# Flog Txt Version 1 # Analyzer Version: 3.2.1 # Analyzer Build Date: Feb 18 2020 07:49:07 # Log Creation Date: 25.02.2020 12:24:49.930 Process: id = "1" image_name = "yesvw.exe" filename = "c:\\users\\fd1hvy\\desktop\\yesvw.exe" page_root = "0x12b04000" os_pid = "0x13a8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x9dc" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\YeSVw.exe\" " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x13ac [0038.405] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0038.405] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x74d70000 [0038.406] GetProcAddress (hModule=0x74d70000, lpProcName="InitializeCriticalSectionEx") returned 0x74e67060 [0038.407] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x74d70000 [0038.407] GetProcAddress (hModule=0x74d70000, lpProcName="FlsAlloc") returned 0x74e6bea0 [0038.407] GetProcAddress (hModule=0x74d70000, lpProcName="FlsSetValue") returned 0x74e62550 [0038.408] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x74d70000 [0038.408] GetProcAddress (hModule=0x74d70000, lpProcName="InitializeCriticalSectionEx") returned 0x74e67060 [0038.408] GetProcessHeap () returned 0x730000 [0038.409] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x74d70000 [0038.409] GetProcAddress (hModule=0x74d70000, lpProcName="FlsAlloc") returned 0x74e6bea0 [0038.409] GetLastError () returned 0xcb [0038.409] GetProcAddress (hModule=0x74d70000, lpProcName="FlsGetValue") returned 0x74e570c0 [0038.409] GetProcAddress (hModule=0x74d70000, lpProcName="FlsSetValue") returned 0x74e62550 [0038.409] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x364) returned 0x758c50 [0038.410] SetLastError (dwErrCode=0xcb) [0038.410] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0xe00) returned 0x758fc0 [0038.479] GetStartupInfoW (in: lpStartupInfo=0x19fe9c | out: lpStartupInfo=0x19fe9c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\YeSVw.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0038.480] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0038.480] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0038.480] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0038.480] GetCommandLineA () returned="\"C:\\Users\\FD1HVy\\Desktop\\YeSVw.exe\" " [0038.480] GetCommandLineW () returned="\"C:\\Users\\FD1HVy\\Desktop\\YeSVw.exe\" " [0038.480] GetACP () returned 0x4e4 [0038.480] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x220) returned 0x741860 [0038.480] IsValidCodePage (CodePage=0x4e4) returned 1 [0038.480] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19febc | out: lpCPInfo=0x19febc) returned 1 [0038.480] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19f784 | out: lpCPInfo=0x19f784) returned 1 [0038.480] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0038.480] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x19f528, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿỂ㔈Ā") returned 256 [0038.480] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿỂ㔈Ā", cchSrc=256, lpCharType=0x19f798 | out: lpCharType=0x19f798) returned 1 [0038.480] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0038.480] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x19f4d8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0038.480] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x74d70000 [0038.480] GetProcAddress (hModule=0x74d70000, lpProcName="LCMapStringEx") returned 0x74e4ed00 [0038.480] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0038.480] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x19f2c8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0038.480] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x19fc98, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ¨0\x83áÔþ\x19", lpUsedDefaultChar=0x0) returned 256 [0038.480] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0038.480] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x19f4f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ흹㔇Ā") returned 256 [0038.480] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ흹㔇Ā", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0038.480] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ흹㔇Ā", cchSrc=256, lpDestStr=0x19f2e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0038.480] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x19fb98, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ¨0\x83áÔþ\x19", lpUsedDefaultChar=0x0) returned 256 [0038.481] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x80) returned 0x748bf8 [0038.481] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x19fce0, nSize=0x105 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\YeSVw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\yesvw.exe")) returned 0x21 [0038.481] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x73b80000 [0038.481] GetProcAddress (hModule=0x73b80000, lpProcName="AreFileApisANSI") returned 0x73b94280 [0038.481] AreFileApisANSI () returned 1 [0038.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\YeSVw.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0038.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\YeSVw.exe", cchWideChar=-1, lpMultiByteStr=0x350c3940, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\Desktop\\YeSVw.exe", lpUsedDefaultChar=0x0) returned 34 [0038.481] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x2a) returned 0x741be8 [0038.481] RtlInitializeSListHead (in: ListHead=0x350c3870 | out: ListHead=0x350c3870) [0038.481] GetLastError () returned 0x0 [0038.481] SetLastError (dwErrCode=0x0) [0038.481] GetEnvironmentStringsW () returned 0x759dc8* [0038.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0038.481] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x565) returned 0x75a8a0 [0038.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x75a8a0, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0038.481] FreeEnvironmentStringsW (penv=0x759dc8) returned 1 [0038.481] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x94) returned 0x748868 [0038.481] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x1f) returned 0x756698 [0038.481] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x28) returned 0x74b148 [0038.481] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x37) returned 0x750c80 [0038.481] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x3c) returned 0x743e10 [0038.481] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x31) returned 0x7509c0 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x14) returned 0x74c528 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x24) returned 0x74b268 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0xd) returned 0x7573a0 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x17) returned 0x74c768 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x2b) returned 0x741b40 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x15) returned 0x74c5a8 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x17) returned 0x74c6c8 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x22) returned 0x74b2c8 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0xe) returned 0x757550 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0xc1) returned 0x73e2b0 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x3e) returned 0x743ea0 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x1b) returned 0x7564b8 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x1d) returned 0x7566c0 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x48) returned 0x748678 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x12) returned 0x74c5c8 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x18) returned 0x74c888 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x1b) returned 0x7565d0 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x24) returned 0x74b2f8 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x29) returned 0x741c20 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x1e) returned 0x7564e0 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x6b) returned 0x746f08 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x17) returned 0x74c588 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0xf) returned 0x757610 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x16) returned 0x74c508 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x28) returned 0x74b358 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x27) returned 0x74b448 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x12) returned 0x74c668 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x21) returned 0x74b3b8 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x10) returned 0x757568 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x1c) returned 0x7566e8 [0038.482] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x12) returned 0x74c848 [0038.482] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x75a8a0 | out: hHeap=0x730000) returned 1 [0038.482] GetModuleHandleW (lpModuleName="api-ms-win-core-synch-l1-2-0.dll") returned 0x74d70000 [0038.483] GetProcAddress (hModule=0x74d70000, lpProcName="SleepConditionVariableCS") returned 0x74edfca0 [0038.483] GetProcAddress (hModule=0x74d70000, lpProcName="WakeAllConditionVariable") returned 0x76f28a90 [0038.483] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x800) returned 0x759dc8 [0038.483] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0038.483] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x35063e92) returned 0x0 [0038.483] GetStartupInfoW (in: lpStartupInfo=0x19ff00 | out: lpStartupInfo=0x19ff00*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\YeSVw.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0038.483] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x3bd8) returned 0x75aa18 [0038.483] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x5c) returned 0x73e968 [0038.484] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0xc0) returned 0x73fd28 [0038.485] FtpSetCurrentDirectoryA (hConnect=0x350c2a70, lpszDirectory=0x0) returned 0 [0038.485] wglShareLists () returned 0x0 [0038.485] GetFocus () returned 0x0 [0038.485] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0038.486] GetFocus () returned 0x0 [0038.486] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0038.486] GetFocus () returned 0x0 [0038.486] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0038.486] GetFocus () returned 0x0 [0038.486] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0038.486] GetFocus () returned 0x0 [0038.486] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0038.486] GetFocus () returned 0x0 [0038.486] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0038.486] GetFocus () returned 0x0 [0038.486] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0038.486] GetFocus () returned 0x0 [0038.486] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0038.486] GetFocus () returned 0x0 [0038.486] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0038.486] GetFocus () returned 0x0 [0038.486] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0038.487] GetFocus () returned 0x0 [0038.487] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0038.487] GetFocus () returned 0x0 [0038.487] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0038.487] GetFocus () returned 0x0 [0038.487] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0038.487] GetFocus () returned 0x0 [0038.487] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0038.487] GetFocus () returned 0x0 [0038.487] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0038.487] GetFocus () returned 0x0 [0038.487] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0038.487] GetFocus () returned 0x0 [0038.487] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0038.487] GetFocus () returned 0x0 [0038.487] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0038.487] SetFocus (hWnd=0x0) returned 0x0 [0038.487] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.487] SetFocus (hWnd=0x0) returned 0x0 [0038.487] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.487] SetFocus (hWnd=0x0) returned 0x0 [0038.487] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.487] SetFocus (hWnd=0x0) returned 0x0 [0038.488] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.488] SetFocus (hWnd=0x0) returned 0x0 [0038.488] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.488] SetFocus (hWnd=0x0) returned 0x0 [0038.488] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.488] SetFocus (hWnd=0x0) returned 0x0 [0038.488] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.488] SetFocus (hWnd=0x0) returned 0x0 [0038.488] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.488] SetFocus (hWnd=0x0) returned 0x0 [0038.488] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.488] SetFocus (hWnd=0x0) returned 0x0 [0038.488] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.488] SetFocus (hWnd=0x0) returned 0x0 [0038.488] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.488] SetFocus (hWnd=0x0) returned 0x0 [0038.488] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.488] SetFocus (hWnd=0x0) returned 0x0 [0038.488] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.488] SetFocus (hWnd=0x0) returned 0x0 [0038.488] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.488] SetFocus (hWnd=0x0) returned 0x0 [0038.488] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.488] SetFocus (hWnd=0x0) returned 0x0 [0038.488] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.489] SetFocus (hWnd=0x0) returned 0x0 [0038.489] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.489] SetFocus (hWnd=0x0) returned 0x0 [0038.489] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.489] SetFocus (hWnd=0x0) returned 0x0 [0038.489] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.489] SetFocus (hWnd=0x0) returned 0x0 [0038.489] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.489] SetFocus (hWnd=0x0) returned 0x0 [0038.489] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.489] SetFocus (hWnd=0x0) returned 0x0 [0038.489] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.489] SetFocus (hWnd=0x0) returned 0x0 [0038.489] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.489] SetFocus (hWnd=0x0) returned 0x0 [0038.489] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.489] SetFocus (hWnd=0x0) returned 0x0 [0038.489] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.489] SetFocus (hWnd=0x0) returned 0x0 [0038.489] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.489] SetFocus (hWnd=0x0) returned 0x0 [0038.489] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.489] SetFocus (hWnd=0x0) returned 0x0 [0038.489] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.489] SetFocus (hWnd=0x0) returned 0x0 [0038.489] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.489] SetFocus (hWnd=0x0) returned 0x0 [0038.489] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.490] SetFocus (hWnd=0x0) returned 0x0 [0038.490] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.490] SetFocus (hWnd=0x0) returned 0x0 [0038.490] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.490] SetFocus (hWnd=0x0) returned 0x0 [0038.490] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.490] SetFocus (hWnd=0x0) returned 0x0 [0038.490] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.490] SetFocus (hWnd=0x0) returned 0x0 [0038.490] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0038.490] GetLastError () returned 0x578 [0038.490] GetStockObject (i=1) returned 0x900014 [0038.490] NetGetJoinInformation (in: lpServer=0x0, lpNameBuffer=0x19fc68, BufferType=0x19fc70 | out: lpNameBuffer=0x19fc68*="WORKGROUP", BufferType=0x19fc70) returned 0x0 [0038.510] NetApiBufferFree (Buffer=0x760708) returned 0x0 [0038.510] CreateHalftonePalette (hdc=0x0) returned 0x6708077e [0038.511] SelectPalette (hdc=0x0, hPal=0x0, bForceBkgd=0) returned 0x0 [0038.512] RealizePalette (hdc=0x0) returned 0xffffffff [0038.513] DeleteObject (ho=0x0) returned 0 [0038.513] QuerySecurityPackageInfoW (in: pPackageName=0x350a9f90, ppPackageInfo=0x19fc6c | out: ppPackageInfo=0x19fc6c) returned 0x0 [0038.958] AcquireCredentialsHandleW (in: pPrincipal=0x0, pPackage=0x350a9f9c, fCredentialUse=0x2, pvLogonId=0x0, pAuthData=0x0, pGetKeyFn=0x0, pvGetKeyArgument=0x0, phCredential=0x19fc7c, ptsExpiry=0x19fc74 | out: phCredential=0x19fc7c, ptsExpiry=0x19fc74) returned 0x0 [0038.959] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0xb48) returned 0x765b38 [0038.959] SetLayout (hdc=0x1, l=0x1) returned 0xffffffff [0038.960] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName="lll") returned 0x2d8 [0038.960] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x8) returned 0x760ab0 [0038.961] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x20) returned 0x756148 [0038.961] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x10) returned 0x757340 [0038.961] SetTextJustification (hdc=0x0, extra=0, count=0) returned 0 [0038.961] GetCursorPos (in: lpPoint=0x19f990 | out: lpPoint=0x19f990*(x=217, y=841)) returned 1 [0038.961] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0038.961] GetCursorPos (in: lpPoint=0x19f9c8 | out: lpPoint=0x19f9c8*(x=217, y=841)) returned 1 [0038.961] FindResourceExA (hModule=0x35000000, lpType="CODE", lpName="MYCODE", wLanguage=0x0) returned 0x0 [0038.961] PdhAddCounterW (in: hQuery=0x0, szFullCounterPath=0x0, dwUserData=0x0, phCounter=0x19f9a8 | out: phCounter=0x19f9a8) returned 0xc0000bbd [0038.963] GetMenuCheckMarkDimensions () returned 983055 [0038.963] GetCursorPos (in: lpPoint=0x350c34e4 | out: lpPoint=0x350c34e4*(x=217, y=841)) returned 1 [0038.963] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0x12b) returned 0x102 [0039.309] TrackPopupMenuEx (param_1=0x0, param_2=0x40, param_3=217, param_4=841, param_5=0x0, param_6=0x0) returned 0 [0039.313] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0039.313] GetCursorPos (in: lpPoint=0x19f9c8 | out: lpPoint=0x19f9c8*(x=217, y=841)) returned 1 [0039.313] FindResourceExA (hModule=0x35000000, lpType="CODE", lpName="MYCODE", wLanguage=0x0) returned 0x0 [0039.313] PdhAddCounterW (in: hQuery=0x0, szFullCounterPath=0x0, dwUserData=0x0, phCounter=0x19f9a8 | out: phCounter=0x19f9a8) returned 0xc0000bbd [0039.313] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.313] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.313] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.313] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.313] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.313] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.313] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.313] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.313] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.313] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.313] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.313] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.314] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.314] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.314] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.314] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.314] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.314] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.314] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.314] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.314] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.314] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.314] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.314] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.314] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.314] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.314] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.314] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.315] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.315] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.315] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.315] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.315] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.315] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.315] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.315] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.315] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.315] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.315] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.315] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.315] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.315] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.315] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.315] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.315] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.315] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.315] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.315] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.315] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.315] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.315] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.315] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.316] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.316] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.316] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.316] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.316] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.316] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.316] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.316] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.316] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.316] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.316] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.316] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.316] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.316] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.316] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.316] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.316] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.316] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.317] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.317] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.317] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.317] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.317] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.317] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.317] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.317] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.317] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.317] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.317] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.317] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.317] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.317] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.317] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.317] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.317] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.317] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.317] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.317] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.317] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.317] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.317] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.317] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.318] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.318] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.318] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.318] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.318] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.318] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.318] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.318] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.318] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.318] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.318] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.318] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.318] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.318] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.318] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.318] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.318] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.318] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.318] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.318] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.318] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.318] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.318] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.318] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.319] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.319] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.319] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.319] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.319] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.319] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.319] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.319] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.319] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.319] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.319] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.319] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.319] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.319] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.319] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.319] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.319] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.319] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.320] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.320] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.320] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.320] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.320] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.320] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.320] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.320] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.320] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.320] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.320] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.320] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.320] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.320] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.320] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.320] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.320] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.320] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.320] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.320] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.320] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0039.320] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0039.320] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x757340 | out: hHeap=0x730000) returned 1 [0039.320] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x756148 | out: hHeap=0x730000) returned 1 [0039.321] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.321] FillConsoleOutputCharacterA (in: hConsoleOutput=0x0, cCharacter=32, nLength=0x0, dwWriteCoord=0x0, lpNumberOfCharsWritten=0x19f9a8 | out: lpNumberOfCharsWritten=0x19f9a8) returned 0 [0039.321] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760be0 [0039.321] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760ac0 [0039.321] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760be0 | out: hHeap=0x730000) returned 1 [0039.321] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760ad0 [0039.321] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ac0 | out: hHeap=0x730000) returned 1 [0039.321] GetFocus () returned 0x0 [0039.321] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.321] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.321] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.321] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.321] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.321] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.321] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.322] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.322] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.322] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ad0 | out: hHeap=0x730000) returned 1 [0039.322] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b50 [0039.322] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760c50 [0039.322] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.322] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b90 [0039.322] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c50 | out: hHeap=0x730000) returned 1 [0039.322] GetFocus () returned 0x0 [0039.322] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.322] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.322] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.322] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.322] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.322] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.322] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.322] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.322] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.322] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b90 | out: hHeap=0x730000) returned 1 [0039.323] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760bd0 [0039.323] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760be0 [0039.323] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bd0 | out: hHeap=0x730000) returned 1 [0039.323] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760c50 [0039.323] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760be0 | out: hHeap=0x730000) returned 1 [0039.323] GetFocus () returned 0x0 [0039.323] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.323] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.323] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.323] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.323] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.323] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.323] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.323] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.323] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.323] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c50 | out: hHeap=0x730000) returned 1 [0039.323] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760ae0 [0039.323] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760be0 [0039.323] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ae0 | out: hHeap=0x730000) returned 1 [0039.323] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760ab0 [0039.323] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760be0 | out: hHeap=0x730000) returned 1 [0039.323] GetFocus () returned 0x0 [0039.324] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.324] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.324] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.324] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.324] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.324] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.324] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.324] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.324] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.324] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.324] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b50 [0039.324] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760ba0 [0039.324] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.324] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760bd0 [0039.324] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ba0 | out: hHeap=0x730000) returned 1 [0039.325] GetFocus () returned 0x0 [0039.325] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.325] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.325] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.325] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.325] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.325] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.325] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.325] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.325] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.325] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bd0 | out: hHeap=0x730000) returned 1 [0039.325] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760ac0 [0039.325] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b50 [0039.325] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ac0 | out: hHeap=0x730000) returned 1 [0039.325] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b00 [0039.325] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.325] GetFocus () returned 0x0 [0039.325] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.325] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.325] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.325] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.326] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.326] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.326] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.326] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.326] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.326] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b00 | out: hHeap=0x730000) returned 1 [0039.326] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760be0 [0039.326] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760ac0 [0039.326] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760be0 | out: hHeap=0x730000) returned 1 [0039.326] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b00 [0039.326] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ac0 | out: hHeap=0x730000) returned 1 [0039.326] GetFocus () returned 0x0 [0039.326] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.326] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.326] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.326] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.326] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.327] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.327] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.327] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.327] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.327] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b00 | out: hHeap=0x730000) returned 1 [0039.327] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b80 [0039.327] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b00 [0039.327] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b80 | out: hHeap=0x730000) returned 1 [0039.327] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760c00 [0039.327] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b00 | out: hHeap=0x730000) returned 1 [0039.327] GetFocus () returned 0x0 [0039.327] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.327] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.327] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.327] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.327] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.327] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.327] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.327] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.327] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.328] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c00 | out: hHeap=0x730000) returned 1 [0039.328] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b60 [0039.328] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760ab0 [0039.328] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b60 | out: hHeap=0x730000) returned 1 [0039.328] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760bf0 [0039.328] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.328] GetFocus () returned 0x0 [0039.328] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.328] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.328] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.328] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.328] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.328] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.328] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.328] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.328] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.328] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bf0 | out: hHeap=0x730000) returned 1 [0039.328] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760c00 [0039.328] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b10 [0039.328] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c00 | out: hHeap=0x730000) returned 1 [0039.328] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760c50 [0039.328] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b10 | out: hHeap=0x730000) returned 1 [0039.329] GetFocus () returned 0x0 [0039.329] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.329] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.329] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.329] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.329] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.329] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.329] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.329] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.329] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.329] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c50 | out: hHeap=0x730000) returned 1 [0039.329] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b50 [0039.329] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b60 [0039.329] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.329] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760ac0 [0039.329] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b60 | out: hHeap=0x730000) returned 1 [0039.329] GetFocus () returned 0x0 [0039.330] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.330] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.330] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.330] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.330] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.330] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.330] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.330] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.330] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.330] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ac0 | out: hHeap=0x730000) returned 1 [0039.330] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760ab0 [0039.330] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760ad0 [0039.330] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.330] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760ab0 [0039.330] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ad0 | out: hHeap=0x730000) returned 1 [0039.330] GetFocus () returned 0x0 [0039.330] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.330] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.330] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.330] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.331] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.331] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.331] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.331] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.331] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.331] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.331] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760ab0 [0039.331] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b50 [0039.331] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.331] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760bf0 [0039.331] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.331] GetFocus () returned 0x0 [0039.331] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.331] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.331] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.331] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.332] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.332] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.332] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.332] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.332] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.332] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bf0 | out: hHeap=0x730000) returned 1 [0039.332] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760bb0 [0039.332] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760bc0 [0039.332] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bb0 | out: hHeap=0x730000) returned 1 [0039.332] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760c00 [0039.332] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bc0 | out: hHeap=0x730000) returned 1 [0039.332] GetFocus () returned 0x0 [0039.332] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.332] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.332] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.332] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.332] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.332] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.332] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.332] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.333] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.333] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c00 | out: hHeap=0x730000) returned 1 [0039.333] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760be0 [0039.333] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b80 [0039.333] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760be0 | out: hHeap=0x730000) returned 1 [0039.333] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760bc0 [0039.333] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b80 | out: hHeap=0x730000) returned 1 [0039.333] GetFocus () returned 0x0 [0039.333] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.333] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.333] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.333] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.333] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.333] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.333] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.333] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.333] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.333] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bc0 | out: hHeap=0x730000) returned 1 [0039.333] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b50 [0039.333] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760c30 [0039.333] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.333] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760ab0 [0039.334] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c30 | out: hHeap=0x730000) returned 1 [0039.334] GetFocus () returned 0x0 [0039.334] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.334] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.334] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.335] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.335] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.335] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.335] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.335] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.335] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.335] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.335] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760ad0 [0039.335] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760c10 [0039.335] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ad0 | out: hHeap=0x730000) returned 1 [0039.335] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760ab0 [0039.335] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c10 | out: hHeap=0x730000) returned 1 [0039.335] GetFocus () returned 0x0 [0039.335] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.335] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.335] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.335] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.335] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.335] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.335] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.336] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.336] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.336] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.336] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760ab0 [0039.336] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b00 [0039.336] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.336] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760bd0 [0039.336] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b00 | out: hHeap=0x730000) returned 1 [0039.336] GetFocus () returned 0x0 [0039.336] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.336] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.336] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.336] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.336] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.336] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.336] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.336] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.336] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.336] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bd0 | out: hHeap=0x730000) returned 1 [0039.336] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760ab0 [0039.336] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760c40 [0039.336] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.336] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760ab0 [0039.337] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c40 | out: hHeap=0x730000) returned 1 [0039.337] GetFocus () returned 0x0 [0039.337] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.337] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.338] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.338] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.338] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.338] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.338] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.338] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.338] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.338] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.338] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b90 [0039.338] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760bc0 [0039.338] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b90 | out: hHeap=0x730000) returned 1 [0039.338] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760bb0 [0039.338] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bc0 | out: hHeap=0x730000) returned 1 [0039.338] GetFocus () returned 0x0 [0039.338] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.338] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.338] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.339] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.339] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.339] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.339] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.339] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.339] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.339] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bb0 | out: hHeap=0x730000) returned 1 [0039.339] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760bc0 [0039.339] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760c30 [0039.339] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bc0 | out: hHeap=0x730000) returned 1 [0039.339] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b90 [0039.339] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c30 | out: hHeap=0x730000) returned 1 [0039.339] GetFocus () returned 0x0 [0039.339] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.339] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.339] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.339] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.339] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.339] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.339] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.340] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.340] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.340] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b90 | out: hHeap=0x730000) returned 1 [0039.340] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b50 [0039.340] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b90 [0039.340] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.340] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760ba0 [0039.340] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b90 | out: hHeap=0x730000) returned 1 [0039.340] GetFocus () returned 0x0 [0039.340] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.340] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.340] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.340] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.340] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.340] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.340] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.340] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.340] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.340] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ba0 | out: hHeap=0x730000) returned 1 [0039.340] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b50 [0039.341] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760ad0 [0039.341] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.341] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760ba0 [0039.341] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ad0 | out: hHeap=0x730000) returned 1 [0039.341] GetFocus () returned 0x0 [0039.341] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.341] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.341] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.341] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.341] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.341] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.341] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.341] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.341] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.341] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ba0 | out: hHeap=0x730000) returned 1 [0039.341] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b50 [0039.341] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b80 [0039.341] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.341] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760bb0 [0039.341] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b80 | out: hHeap=0x730000) returned 1 [0039.341] GetFocus () returned 0x0 [0039.341] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.342] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.342] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.342] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.342] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.342] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.342] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.342] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.342] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.342] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bb0 | out: hHeap=0x730000) returned 1 [0039.342] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b50 [0039.342] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760c00 [0039.342] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.342] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760c10 [0039.342] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c00 | out: hHeap=0x730000) returned 1 [0039.342] GetFocus () returned 0x0 [0039.342] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.342] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.342] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.342] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.342] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.342] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.343] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.343] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.343] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.343] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c10 | out: hHeap=0x730000) returned 1 [0039.343] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b10 [0039.343] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760ab0 [0039.343] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b10 | out: hHeap=0x730000) returned 1 [0039.343] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760c00 [0039.343] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.343] GetFocus () returned 0x0 [0039.343] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.343] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.343] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.343] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.343] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.343] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.343] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.343] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.343] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.343] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c00 | out: hHeap=0x730000) returned 1 [0039.344] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760be0 [0039.344] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760ac0 [0039.344] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760be0 | out: hHeap=0x730000) returned 1 [0039.344] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b00 [0039.344] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ac0 | out: hHeap=0x730000) returned 1 [0039.344] GetFocus () returned 0x0 [0039.344] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.344] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.344] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.344] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.344] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.344] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.344] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.344] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.344] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.344] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b00 | out: hHeap=0x730000) returned 1 [0039.344] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b50 [0039.344] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760bb0 [0039.344] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.344] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760ba0 [0039.344] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bb0 | out: hHeap=0x730000) returned 1 [0039.344] GetFocus () returned 0x0 [0039.345] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.345] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.345] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.345] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.345] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.345] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0039.345] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ba0 | out: hHeap=0x730000) returned 1 [0039.345] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b10 [0039.345] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b00 [0039.345] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b10 | out: hHeap=0x730000) returned 1 [0039.345] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760ad0 [0039.345] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b00 | out: hHeap=0x730000) returned 1 [0039.345] GetFocus () returned 0x0 [0039.346] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ad0 | out: hHeap=0x730000) returned 1 [0039.346] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b50 [0039.346] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b80 [0039.346] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.346] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b50 [0039.346] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b80 | out: hHeap=0x730000) returned 1 [0039.346] GetFocus () returned 0x0 [0039.346] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.346] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760ac0 [0039.346] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760bb0 [0039.346] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ac0 | out: hHeap=0x730000) returned 1 [0039.346] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760bf0 [0039.346] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bb0 | out: hHeap=0x730000) returned 1 [0039.346] GetFocus () returned 0x0 [0039.346] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bf0 | out: hHeap=0x730000) returned 1 [0039.346] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b00 [0039.346] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b10 [0039.347] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b00 | out: hHeap=0x730000) returned 1 [0039.347] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760ab0 [0039.347] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b10 | out: hHeap=0x730000) returned 1 [0039.347] GetFocus () returned 0x0 [0039.347] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.347] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b10 [0039.347] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b50 [0039.347] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b10 | out: hHeap=0x730000) returned 1 [0039.347] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b80 [0039.347] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.347] GetFocus () returned 0x0 [0039.348] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b80 | out: hHeap=0x730000) returned 1 [0039.348] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b80 [0039.348] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760c00 [0039.348] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b80 | out: hHeap=0x730000) returned 1 [0039.348] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760ab0 [0039.348] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c00 | out: hHeap=0x730000) returned 1 [0039.348] GetFocus () returned 0x0 [0039.348] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.348] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b50 [0039.348] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b60 [0039.348] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.348] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760bd0 [0039.348] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b60 | out: hHeap=0x730000) returned 1 [0039.348] GetFocus () returned 0x0 [0039.348] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bd0 | out: hHeap=0x730000) returned 1 [0039.349] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b50 [0039.349] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b10 [0039.349] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.349] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760be0 [0039.349] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b10 | out: hHeap=0x730000) returned 1 [0039.349] GetFocus () returned 0x0 [0039.349] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760be0 | out: hHeap=0x730000) returned 1 [0039.349] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760c20 [0039.349] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b90 [0039.349] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c20 | out: hHeap=0x730000) returned 1 [0039.349] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b10 [0039.349] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b90 | out: hHeap=0x730000) returned 1 [0039.349] GetFocus () returned 0x0 [0039.349] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b10 | out: hHeap=0x730000) returned 1 [0039.349] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760c50 [0039.349] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760ab0 [0039.349] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c50 | out: hHeap=0x730000) returned 1 [0039.349] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760ac0 [0039.349] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.349] GetFocus () returned 0x0 [0039.350] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ac0 | out: hHeap=0x730000) returned 1 [0039.350] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b60 [0039.350] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b80 [0039.350] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b60 | out: hHeap=0x730000) returned 1 [0039.350] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760c30 [0039.350] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b80 | out: hHeap=0x730000) returned 1 [0039.350] GetFocus () returned 0x0 [0039.350] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c30 | out: hHeap=0x730000) returned 1 [0039.350] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760c10 [0039.350] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760bd0 [0039.350] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c10 | out: hHeap=0x730000) returned 1 [0039.350] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b00 [0039.350] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bd0 | out: hHeap=0x730000) returned 1 [0039.350] GetFocus () returned 0x0 [0039.350] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b00 | out: hHeap=0x730000) returned 1 [0039.350] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b00 [0039.350] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b10 [0039.350] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b00 | out: hHeap=0x730000) returned 1 [0039.350] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760bc0 [0039.351] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b10 | out: hHeap=0x730000) returned 1 [0039.351] GetFocus () returned 0x0 [0039.351] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bc0 | out: hHeap=0x730000) returned 1 [0039.351] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760c30 [0039.351] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760bc0 [0039.351] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c30 | out: hHeap=0x730000) returned 1 [0039.351] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760ad0 [0039.351] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bc0 | out: hHeap=0x730000) returned 1 [0039.351] GetFocus () returned 0x0 [0039.351] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ad0 | out: hHeap=0x730000) returned 1 [0039.351] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760bf0 [0039.351] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760c00 [0039.351] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bf0 | out: hHeap=0x730000) returned 1 [0039.351] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760be0 [0039.351] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c00 | out: hHeap=0x730000) returned 1 [0039.351] GetFocus () returned 0x0 [0039.352] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760be0 | out: hHeap=0x730000) returned 1 [0039.352] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760c40 [0039.352] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b00 [0039.352] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c40 | out: hHeap=0x730000) returned 1 [0039.352] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b80 [0039.352] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b00 | out: hHeap=0x730000) returned 1 [0039.352] GetFocus () returned 0x0 [0039.352] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b80 | out: hHeap=0x730000) returned 1 [0039.352] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b90 [0039.352] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760c10 [0039.352] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b90 | out: hHeap=0x730000) returned 1 [0039.352] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760bc0 [0039.352] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c10 | out: hHeap=0x730000) returned 1 [0039.352] GetFocus () returned 0x0 [0039.352] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bc0 | out: hHeap=0x730000) returned 1 [0039.352] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760ae0 [0039.352] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760bb0 [0039.352] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ae0 | out: hHeap=0x730000) returned 1 [0039.352] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760be0 [0039.352] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bb0 | out: hHeap=0x730000) returned 1 [0039.352] GetFocus () returned 0x0 [0039.353] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760be0 | out: hHeap=0x730000) returned 1 [0039.353] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b50 [0039.353] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b80 [0039.353] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.353] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b90 [0039.353] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b80 | out: hHeap=0x730000) returned 1 [0039.353] GetFocus () returned 0x0 [0039.353] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b90 | out: hHeap=0x730000) returned 1 [0039.353] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b00 [0039.353] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b10 [0039.353] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b00 | out: hHeap=0x730000) returned 1 [0039.353] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760bb0 [0039.353] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b10 | out: hHeap=0x730000) returned 1 [0039.353] GetFocus () returned 0x0 [0039.353] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bb0 | out: hHeap=0x730000) returned 1 [0039.353] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760bb0 [0039.353] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b60 [0039.353] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bb0 | out: hHeap=0x730000) returned 1 [0039.354] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760bc0 [0039.354] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b60 | out: hHeap=0x730000) returned 1 [0039.354] GetFocus () returned 0x0 [0039.354] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bc0 | out: hHeap=0x730000) returned 1 [0039.354] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760c40 [0039.354] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b50 [0039.354] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c40 | out: hHeap=0x730000) returned 1 [0039.354] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760ab0 [0039.354] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.354] GetFocus () returned 0x0 [0039.354] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.354] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b90 [0039.354] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b80 [0039.354] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b90 | out: hHeap=0x730000) returned 1 [0039.354] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760c50 [0039.354] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b80 | out: hHeap=0x730000) returned 1 [0039.354] GetFocus () returned 0x0 [0039.355] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c50 | out: hHeap=0x730000) returned 1 [0039.355] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760ab0 [0039.355] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760bf0 [0039.355] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.355] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760be0 [0039.355] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bf0 | out: hHeap=0x730000) returned 1 [0039.355] GetFocus () returned 0x0 [0039.355] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760be0 | out: hHeap=0x730000) returned 1 [0039.355] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b80 [0039.355] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760ab0 [0039.355] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b80 | out: hHeap=0x730000) returned 1 [0039.355] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b50 [0039.355] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.355] GetFocus () returned 0x0 [0039.355] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.355] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b50 [0039.355] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b80 [0039.355] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.355] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b50 [0039.355] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b80 | out: hHeap=0x730000) returned 1 [0039.355] GetFocus () returned 0x0 [0039.356] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.356] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b50 [0039.356] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760ae0 [0039.356] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.356] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760ba0 [0039.356] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ae0 | out: hHeap=0x730000) returned 1 [0039.356] GetFocus () returned 0x0 [0039.356] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ba0 | out: hHeap=0x730000) returned 1 [0039.356] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760c40 [0039.356] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760ac0 [0039.356] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c40 | out: hHeap=0x730000) returned 1 [0039.356] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760bf0 [0039.356] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ac0 | out: hHeap=0x730000) returned 1 [0039.356] GetFocus () returned 0x0 [0039.356] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bf0 | out: hHeap=0x730000) returned 1 [0039.356] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760ad0 [0039.356] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b60 [0039.357] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ad0 | out: hHeap=0x730000) returned 1 [0039.357] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760ab0 [0039.357] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b60 | out: hHeap=0x730000) returned 1 [0039.357] GetFocus () returned 0x0 [0039.357] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.357] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760c20 [0039.357] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760ab0 [0039.357] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c20 | out: hHeap=0x730000) returned 1 [0039.357] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760c20 [0039.357] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.357] GetFocus () returned 0x0 [0039.357] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c20 | out: hHeap=0x730000) returned 1 [0039.357] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b80 [0039.357] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760c30 [0039.357] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b80 | out: hHeap=0x730000) returned 1 [0039.357] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760bf0 [0039.357] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c30 | out: hHeap=0x730000) returned 1 [0039.357] GetFocus () returned 0x0 [0039.358] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bf0 | out: hHeap=0x730000) returned 1 [0039.358] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b80 [0039.358] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b50 [0039.358] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b80 | out: hHeap=0x730000) returned 1 [0039.358] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760ab0 [0039.358] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.358] GetFocus () returned 0x0 [0039.358] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.358] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b50 [0039.358] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760c30 [0039.358] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.358] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b50 [0039.358] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c30 | out: hHeap=0x730000) returned 1 [0039.358] GetFocus () returned 0x0 [0039.358] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.358] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b00 [0039.358] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760c20 [0039.358] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b00 | out: hHeap=0x730000) returned 1 [0039.358] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760c30 [0039.358] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c20 | out: hHeap=0x730000) returned 1 [0039.358] GetFocus () returned 0x0 [0039.359] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c30 | out: hHeap=0x730000) returned 1 [0039.359] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760c20 [0039.359] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b80 [0039.359] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c20 | out: hHeap=0x730000) returned 1 [0039.359] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760bb0 [0039.359] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b80 | out: hHeap=0x730000) returned 1 [0039.359] GetFocus () returned 0x0 [0039.359] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bb0 | out: hHeap=0x730000) returned 1 [0039.359] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760bc0 [0039.359] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b00 [0039.359] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bc0 | out: hHeap=0x730000) returned 1 [0039.359] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760bf0 [0039.359] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b00 | out: hHeap=0x730000) returned 1 [0039.359] GetFocus () returned 0x0 [0039.359] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bf0 | out: hHeap=0x730000) returned 1 [0039.359] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b50 [0039.360] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b90 [0039.360] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.360] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b50 [0039.360] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b90 | out: hHeap=0x730000) returned 1 [0039.360] GetFocus () returned 0x0 [0039.360] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.360] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760bf0 [0039.360] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760ab0 [0039.360] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bf0 | out: hHeap=0x730000) returned 1 [0039.360] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b90 [0039.360] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.360] GetFocus () returned 0x0 [0039.360] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b90 | out: hHeap=0x730000) returned 1 [0039.360] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760bb0 [0039.360] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760bf0 [0039.360] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bb0 | out: hHeap=0x730000) returned 1 [0039.360] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760c30 [0039.360] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bf0 | out: hHeap=0x730000) returned 1 [0039.360] GetFocus () returned 0x0 [0039.361] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c30 | out: hHeap=0x730000) returned 1 [0039.361] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b50 [0039.361] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760ac0 [0039.361] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.361] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760c40 [0039.361] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ac0 | out: hHeap=0x730000) returned 1 [0039.361] GetFocus () returned 0x0 [0039.361] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c40 | out: hHeap=0x730000) returned 1 [0039.361] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b60 [0039.361] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b50 [0039.361] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b60 | out: hHeap=0x730000) returned 1 [0039.361] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b80 [0039.361] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.361] GetFocus () returned 0x0 [0039.361] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b80 | out: hHeap=0x730000) returned 1 [0039.361] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760bf0 [0039.361] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b80 [0039.361] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bf0 | out: hHeap=0x730000) returned 1 [0039.361] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b10 [0039.362] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b80 | out: hHeap=0x730000) returned 1 [0039.362] GetFocus () returned 0x0 [0039.362] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b10 | out: hHeap=0x730000) returned 1 [0039.362] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760bf0 [0039.362] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b50 [0039.362] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bf0 | out: hHeap=0x730000) returned 1 [0039.362] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b10 [0039.362] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.362] GetFocus () returned 0x0 [0039.362] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b10 | out: hHeap=0x730000) returned 1 [0039.362] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760c00 [0039.362] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760ba0 [0039.362] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c00 | out: hHeap=0x730000) returned 1 [0039.362] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b10 [0039.362] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ba0 | out: hHeap=0x730000) returned 1 [0039.362] GetFocus () returned 0x0 [0039.363] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b10 | out: hHeap=0x730000) returned 1 [0039.363] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760c00 [0039.363] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b10 [0039.363] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c00 | out: hHeap=0x730000) returned 1 [0039.363] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b50 [0039.363] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b10 | out: hHeap=0x730000) returned 1 [0039.363] GetFocus () returned 0x0 [0039.363] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.363] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760ad0 [0039.363] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b50 [0039.363] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ad0 | out: hHeap=0x730000) returned 1 [0039.363] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b60 [0039.363] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.363] GetFocus () returned 0x0 [0039.363] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b60 | out: hHeap=0x730000) returned 1 [0039.363] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b00 [0039.363] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760bd0 [0039.363] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b00 | out: hHeap=0x730000) returned 1 [0039.527] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760ad0 [0039.527] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bd0 | out: hHeap=0x730000) returned 1 [0039.527] GetFocus () returned 0x0 [0039.529] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ad0 | out: hHeap=0x730000) returned 1 [0039.530] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b50 [0039.530] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b00 [0039.530] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.530] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b80 [0039.530] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b00 | out: hHeap=0x730000) returned 1 [0039.530] GetFocus () returned 0x0 [0039.532] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b80 | out: hHeap=0x730000) returned 1 [0039.532] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760bb0 [0039.533] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760ba0 [0039.534] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bb0 | out: hHeap=0x730000) returned 1 [0039.534] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b10 [0039.534] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ba0 | out: hHeap=0x730000) returned 1 [0039.534] GetFocus () returned 0x0 [0039.537] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b10 | out: hHeap=0x730000) returned 1 [0039.537] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760ab0 [0039.537] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760ac0 [0039.537] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.537] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760ad0 [0039.537] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ac0 | out: hHeap=0x730000) returned 1 [0039.537] GetFocus () returned 0x0 [0039.538] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ad0 | out: hHeap=0x730000) returned 1 [0039.538] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760c40 [0039.538] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760bb0 [0039.538] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c40 | out: hHeap=0x730000) returned 1 [0039.538] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760ab0 [0039.540] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bb0 | out: hHeap=0x730000) returned 1 [0039.540] GetFocus () returned 0x0 [0039.542] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.542] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760bd0 [0039.543] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b80 [0039.543] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760bd0 | out: hHeap=0x730000) returned 1 [0039.543] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760ab0 [0039.543] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b80 | out: hHeap=0x730000) returned 1 [0039.543] GetFocus () returned 0x0 [0039.545] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.546] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760b10 [0039.546] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760ac0 [0039.546] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b10 | out: hHeap=0x730000) returned 1 [0039.546] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b90 [0039.546] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ac0 | out: hHeap=0x730000) returned 1 [0039.546] GetFocus () returned 0x0 [0039.547] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b90 | out: hHeap=0x730000) returned 1 [0039.547] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760c40 [0039.547] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b50 [0039.547] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760c40 | out: hHeap=0x730000) returned 1 [0039.547] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760ab0 [0039.548] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760b50 | out: hHeap=0x730000) returned 1 [0039.548] GetFocus () returned 0x0 [0039.549] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x760ab0 | out: hHeap=0x730000) returned 1 [0039.549] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x2) returned 0x760ab0 [0039.549] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x760b90 [0039.550] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x6) returned 0x760b50 [0039.550] GetFocus () returned 0x0 [0039.550] GetFocus () returned 0x0 [0039.551] GetFocus () returned 0x0 [0039.552] GetFocus () returned 0x0 [0039.552] GetFocus () returned 0x0 [0039.552] GetFocus () returned 0x0 [0039.552] GetFocus () returned 0x0 [0039.553] GetFocus () returned 0x0 [0039.553] GetFocus () returned 0x0 [0039.553] GetFocus () returned 0x0 [0039.553] GetFocus () returned 0x0 [0039.554] GetFocus () returned 0x0 [0039.554] GetFocus () returned 0x0 [0039.554] GetFocus () returned 0x0 [0039.555] GetFocus () returned 0x0 [0039.555] GetFocus () returned 0x0 [0039.555] GetFocus () returned 0x0 [0039.556] GetFocus () returned 0x0 [0039.556] GetFocus () returned 0x0 [0039.556] GetFocus () returned 0x0 [0039.557] GetFocus () returned 0x0 [0039.557] GetFocus () returned 0x0 [0039.557] GetFocus () returned 0x0 [0039.558] GetFocus () returned 0x0 [0039.558] GetFocus () returned 0x0 [0039.558] GetFocus () returned 0x0 [0039.558] GetFocus () returned 0x0 [0039.559] GetFocus () returned 0x0 [0039.559] GetFocus () returned 0x0 [0039.559] GetFocus () returned 0x0 [0039.560] GetFocus () returned 0x0 [0039.560] GetFocus () returned 0x0 [0039.560] GetFocus () returned 0x0 [0039.561] GetFocus () returned 0x0 [0039.561] GetFocus () returned 0x0 [0039.561] GetFocus () returned 0x0 [0039.562] GetFocus () returned 0x0 [0039.562] GetFocus () returned 0x0 [0039.562] GetFocus () returned 0x0 [0039.563] GetFocus () returned 0x0 [0039.563] GetFocus () returned 0x0 [0039.563] GetFocus () returned 0x0 [0039.564] GetFocus () returned 0x0 [0039.564] GetFocus () returned 0x0 [0039.564] GetFocus () returned 0x0 [0039.565] GetFocus () returned 0x0 [0039.565] GetFocus () returned 0x0 [0039.565] GetFocus () returned 0x0 [0039.565] GetFocus () returned 0x0 [0039.566] GetFocus () returned 0x0 [0039.566] GetFocus () returned 0x0 [0039.566] GetFocus () returned 0x0 [0039.567] GetFocus () returned 0x0 [0039.567] GetFocus () returned 0x0 [0039.568] GetFocus () returned 0x0 [0039.568] GetFocus () returned 0x0 [0039.568] GetFocus () returned 0x0 [0039.569] GetFocus () returned 0x0 [0039.569] GetFocus () returned 0x0 [0039.569] GetFocus () returned 0x0 [0039.570] GetFocus () returned 0x0 [0039.570] GetFocus () returned 0x0 [0039.570] GetFocus () returned 0x0 [0039.571] GetFocus () returned 0x0 [0039.571] GetFocus () returned 0x0 [0039.571] GetFocus () returned 0x0 [0039.572] GetFocus () returned 0x0 [0039.572] GetFocus () returned 0x0 [0039.572] GetFocus () returned 0x0 [0039.572] GetFocus () returned 0x0 [0039.573] GetFocus () returned 0x0 [0039.573] GetFocus () returned 0x0 [0039.573] GetFocus () returned 0x0 [0039.574] GetFocus () returned 0x0 [0039.574] GetFocus () returned 0x0 [0039.574] GetFocus () returned 0x0 [0039.575] GetFocus () returned 0x0 [0039.575] GetFocus () returned 0x0 [0039.575] GetFocus () returned 0x0 [0039.576] GetFocus () returned 0x0 [0039.576] GetFocus () returned 0x0 [0039.576] GetFocus () returned 0x0 [0039.577] GetFocus () returned 0x0 [0039.577] GetFocus () returned 0x0 [0039.577] GetFocus () returned 0x0 [0039.578] GetFocus () returned 0x0 [0039.578] GetFocus () returned 0x0 [0039.578] GetFocus () returned 0x0 [0039.579] GetFocus () returned 0x0 [0039.579] GetFocus () returned 0x0 [0039.579] GetFocus () returned 0x0 [0039.580] GetFocus () returned 0x0 [0039.580] GetFocus () returned 0x0 [0039.580] GetFocus () returned 0x0 [0039.580] GetFocus () returned 0x0 [0039.581] GetFocus () returned 0x0 [0039.581] GetFocus () returned 0x0 [0039.581] GetFocus () returned 0x0 [0039.582] GetFocus () returned 0x0 [0039.582] GetFocus () returned 0x0 [0039.589] GetFocus () returned 0x0 [0039.590] GetFocus () returned 0x0 [0039.590] GetFocus () returned 0x0 [0039.590] GetFocus () returned 0x0 [0039.592] GetFocus () returned 0x0 [0039.592] GetFocus () returned 0x0 [0039.593] GetFocus () returned 0x0 [0039.593] GetFocus () returned 0x0 [0039.593] GetFocus () returned 0x0 [0039.594] GetFocus () returned 0x0 [0039.594] GetFocus () returned 0x0 [0039.595] GetFocus () returned 0x0 [0039.595] GetFocus () returned 0x0 [0039.596] GetFocus () returned 0x0 [0039.596] GetFocus () returned 0x0 [0039.596] GetFocus () returned 0x0 [0039.597] GetFocus () returned 0x0 [0039.597] GetFocus () returned 0x0 [0039.597] GetFocus () returned 0x0 [0039.639] GetFocus () returned 0x0 [0039.639] GetFocus () returned 0x0 [0039.640] GetFocus () returned 0x0 [0039.640] GetFocus () returned 0x0 [0039.640] GetFocus () returned 0x0 [0039.641] GetFocus () returned 0x0 [0039.641] GetFocus () returned 0x0 [0039.641] GetFocus () returned 0x0 [0039.642] GetFocus () returned 0x0 [0039.642] GetFocus () returned 0x0 [0039.642] GetFocus () returned 0x0 [0039.643] GetFocus () returned 0x0 [0039.643] GetFocus () returned 0x0 [0039.643] GetFocus () returned 0x0 [0039.643] GetFocus () returned 0x0 [0039.644] GetFocus () returned 0x0 [0039.644] GetFocus () returned 0x0 [0039.644] GetFocus () returned 0x0 [0039.645] GetFocus () returned 0x0 [0039.645] GetFocus () returned 0x0 [0039.645] GetFocus () returned 0x0 [0039.646] GetFocus () returned 0x0 [0039.646] GetFocus () returned 0x0 [0039.646] GetFocus () returned 0x0 [0039.647] GetFocus () returned 0x0 [0039.647] GetFocus () returned 0x0 [0039.647] GetFocus () returned 0x0 [0039.648] GetFocus () returned 0x0 [0039.648] GetFocus () returned 0x0 [0039.648] GetFocus () returned 0x0 [0039.649] GetFocus () returned 0x0 [0039.649] GetFocus () returned 0x0 [0039.649] GetFocus () returned 0x0 [0039.649] GetFocus () returned 0x0 [0039.650] GetFocus () returned 0x0 [0039.650] GetFocus () returned 0x0 [0039.650] GetFocus () returned 0x0 [0039.651] GetFocus () returned 0x0 [0039.651] GetFocus () returned 0x0 [0039.651] GetFocus () returned 0x0 [0039.652] GetFocus () returned 0x0 [0039.652] GetFocus () returned 0x0 [0039.653] GetFocus () returned 0x0 [0039.653] GetFocus () returned 0x0 [0039.653] GetFocus () returned 0x0 [0039.654] GetFocus () returned 0x0 [0039.654] GetFocus () returned 0x0 [0039.654] GetFocus () returned 0x0 [0041.710] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x170a0173 [0041.711] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x300a0512 [0041.711] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x630a052c [0041.711] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x4e0a019e [0041.711] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x550a0663 [0041.711] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x1a0a0655 [0041.711] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x620a0545 [0041.711] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x7e0a0526 [0041.711] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x470a0692 [0041.711] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x810a0513 [0041.711] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x170a06ba [0041.711] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xaf0a06b9 [0041.711] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x200a0510 [0041.711] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x650a053b [0041.711] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x510a0536 [0041.711] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x6c0a0672 [0041.711] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x200a065a [0041.711] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x210a04fd [0041.711] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x2b0a0678 [0041.711] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x5d0a0549 [0041.712] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x330a01a0 [0041.712] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x6f0a04fb [0041.712] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x2c0a052a [0041.712] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x2e0a0801 [0041.712] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x410a07eb [0041.712] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x860a07ed [0041.712] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x1e0a07d1 [0041.712] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x190a07d8 [0041.712] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x490a07dc [0041.712] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x200a07e4 [0041.712] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x300a07e5 [0041.712] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x540a07da [0041.712] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x5a0a07f6 [0041.712] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x620a07c9 [0041.712] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x1e0a07f1 [0041.712] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x3e0a07fb [0041.712] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x2f0a07f3 [0041.712] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x170a07d9 [0041.712] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x170a07db [0041.712] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x510a07f8 [0041.712] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x1b0a07ff [0041.713] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x300a07d7 [0041.713] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x390a07ec [0041.713] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x130a07e2 [0041.713] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x140a07cf [0041.713] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x280a07e9 [0041.713] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x190a07e7 [0041.713] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x250a07df [0041.713] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x160a067b [0041.713] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x150a0800 [0041.713] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xf0a07fa [0041.713] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x110a07f7 [0041.713] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x220a07d5 [0041.713] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x130a07ea [0041.713] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x1f0a07d3 [0041.713] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xd0a07f0 [0041.713] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x240a066c [0041.713] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x160a07dd [0041.713] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xf0a07e6 [0041.713] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x1a0a07e0 [0041.713] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x3f0a07af [0041.713] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xf0a07f2 [0041.714] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x7f0a07a6 [0041.714] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x610a051f [0041.714] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x1b0a07d6 [0041.714] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x2f0a0767 [0041.714] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xf0a07e8 [0041.714] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x200a07b9 [0041.714] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x5f0a07ac [0041.714] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x1a0a07ce [0041.714] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x200a07c8 [0041.714] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xf0a07de [0041.714] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x3e0a0633 [0041.714] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x170a0806 [0041.714] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x3e0a07bc [0041.715] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x560a07c4 [0041.715] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xf0a07d4 [0041.715] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x170a0805 [0041.715] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x200a07bb [0041.715] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x420a060b [0041.715] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x1a0a0807 [0041.715] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x230a0656 [0041.715] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f9a4 | out: ppstm=0x19f9a4*=0x756030) returned 0x0 [0041.719] IStream:SetSize (This=0x756030, libNewSize=0x400) returned 0x0 [0041.719] IStream:RemoteSeek (in: This=0x756030, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.719] LoadLibraryA (lpLibFileName="kernel32") returned 0x73b80000 [0041.719] ISequentialStream:RemoteWrite (in: This=0x756030, pv=0x766688*=0xc0, cb=0x400, pcbWritten=0x0 | out: pcbWritten=0x0) returned 0x0 [0041.731] GdipAlloc (size=0x10) returned 0x0 [0041.733] GetProcAddress (hModule=0x73b80000, lpProcName="VirtualAlloc") returned 0x73b96970 [0041.733] IUnknown:Release (This=0x756030) returned 0x0 [0041.733] VirtualAlloc (lpAddress=0x0, dwSize=0x34000, flAllocationType=0x3000, flProtect=0x40) returned 0x680000 [0041.734] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName="doroga") returned 0x2dc [0041.735] GetCursorPos (in: lpPoint=0x19f9c8 | out: lpPoint=0x19f9c8*(x=217, y=841)) returned 1 [0041.735] GetStockObject (i=6) returned 0xb00018 [0041.735] SelectObject (hdc=0x0, h=0xb00018) returned 0x0 [0041.735] GetCursorPos (in: lpPoint=0x19f990 | out: lpPoint=0x19f990*(x=217, y=841)) returned 1 [0041.735] DrawIconEx (hdc=0x0, xLeft=5, yTop=10, hIcon=0x0, cxWidth=10, cyWidth=15, istepIfAniCur=0x0, hbrFlickerFreeDraw=0x0, diFlags=0x3) returned 0 [0041.735] GetConsoleWindow () returned 0x0 [0041.735] GetDC (hWnd=0x0) returned 0x10105d6 [0041.736] CreatePen (iStyle=0, cWidth=2, color=0x138213) returned 0x163007cd [0041.736] ImpersonateLoggedOnUser (hToken=0x0) returned 0 [0041.737] SendInput (cInputs=0x1, pInputs=0x19f94c, cbSize=28) returned 0x1 [0041.738] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0xbb6) returned 0x102 [0044.762] GetStockObject (i=6) returned 0xb00018 [0044.762] SelectObject (hdc=0x0, h=0xb00018) returned 0x0 [0044.762] GetCursorPos (in: lpPoint=0x19f990 | out: lpPoint=0x19f990*(x=528, y=338)) returned 1 [0044.762] DrawIconEx (hdc=0x0, xLeft=5, yTop=10, hIcon=0x0, cxWidth=10, cyWidth=15, istepIfAniCur=0x0, hbrFlickerFreeDraw=0x0, diFlags=0x3) returned 0 [0044.762] GetConsoleWindow () returned 0x0 [0044.762] GetDC (hWnd=0x0) returned 0x60100ce [0044.762] CreatePen (iStyle=0, cWidth=2, color=0x52824b) returned 0x4630065f [0044.762] ImpersonateLoggedOnUser (hToken=0x0) returned 0 [0044.762] SendInput (cInputs=0x1, pInputs=0x19f94c, cbSize=28) returned 0x1 [0044.762] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.763] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0044.764] GetDC (hWnd=0x0) returned 0x11010662 [0044.764] wglCreateContext () returned 0x0 [0044.765] wglMakeCurrent () returned 0x0 [0044.768] GetDlgItem (hDlg=0x0, nIDDlgItem=1951716248) returned 0x0 [0044.768] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0044.768] lstrlenA (lpString="\x92\x07") returned 2 [0044.768] lstrlenA (lpString="\x92\x07") returned 2 [0044.768] lstrlenA (lpString="\x92\x07") returned 2 [0044.768] lstrlenA (lpString="\x92\x07") returned 2 [0044.768] lstrlenA (lpString="\x92\x07") returned 2 [0044.768] lstrlenA (lpString="\x92\x07") returned 2 [0044.768] capGetDriverDescriptionA () returned 0x0 [0044.774] GetLastError () returned 0x0 [0044.774] SetLastError (dwErrCode=0x0) [0044.774] OpenThemeData () returned 0x10000 [0044.778] GetSystemMetrics (nIndex=32) returned 4 [0044.779] GetSystemMetrics (nIndex=33) returned 4 [0044.779] CloseThemeData () returned 0x0 [0044.779] lstrlenA (lpString="\x92\x07") returned 2 [0044.779] lstrlenA (lpString="\x92\x07") returned 2 [0044.779] lstrlenA (lpString="\x92\x07") returned 2 [0044.779] lstrlenA (lpString="\x92\x07") returned 2 [0044.779] lstrlenA (lpString="\x92\x07") returned 2 [0044.779] lstrlenA (lpString="\x92\x07") returned 2 [0044.779] capGetDriverDescriptionA () returned 0x0 [0044.780] GetLastError () returned 0x0 [0044.780] SetLastError (dwErrCode=0x0) [0044.780] OpenThemeData () returned 0x20000 [0044.780] GetSystemMetrics (nIndex=32) returned 4 [0044.780] GetSystemMetrics (nIndex=33) returned 4 [0044.780] CloseThemeData () returned 0x0 [0044.781] lstrlenA (lpString="\x92\x07") returned 2 [0044.781] lstrlenA (lpString="\x92\x07") returned 2 [0044.781] lstrlenA (lpString="\x92\x07") returned 2 [0044.781] lstrlenA (lpString="\x92\x07") returned 2 [0044.781] lstrlenA (lpString="\x92\x07") returned 2 [0044.781] lstrlenA (lpString="\x92\x07") returned 2 [0044.781] capGetDriverDescriptionA () returned 0x0 [0044.782] GetLastError () returned 0x0 [0044.782] SetLastError (dwErrCode=0x0) [0044.782] OpenThemeData () returned 0x30000 [0044.782] GetSystemMetrics (nIndex=32) returned 4 [0044.782] GetSystemMetrics (nIndex=33) returned 4 [0044.782] CloseThemeData () returned 0x0 [0044.783] lstrlenA (lpString="\x92\x07") returned 2 [0044.783] lstrlenA (lpString="\x92\x07") returned 2 [0044.783] lstrlenA (lpString="\x92\x07") returned 2 [0044.783] lstrlenA (lpString="\x92\x07") returned 2 [0044.783] lstrlenA (lpString="\x92\x07") returned 2 [0044.783] lstrlenA (lpString="\x92\x07") returned 2 [0044.783] capGetDriverDescriptionA () returned 0x0 [0044.784] GetLastError () returned 0x0 [0044.784] SetLastError (dwErrCode=0x0) [0044.784] OpenThemeData () returned 0x40000 [0044.784] GetSystemMetrics (nIndex=32) returned 4 [0044.784] GetSystemMetrics (nIndex=33) returned 4 [0044.784] CloseThemeData () returned 0x0 [0044.785] lstrlenA (lpString="\x92\x07") returned 2 [0044.785] lstrlenA (lpString="\x92\x07") returned 2 [0044.785] lstrlenA (lpString="\x92\x07") returned 2 [0044.785] lstrlenA (lpString="\x92\x07") returned 2 [0044.785] lstrlenA (lpString="\x92\x07") returned 2 [0044.785] lstrlenA (lpString="\x92\x07") returned 2 [0044.785] capGetDriverDescriptionA () returned 0x0 [0044.785] GetLastError () returned 0x0 [0044.785] SetLastError (dwErrCode=0x0) [0044.785] OpenThemeData () returned 0x50000 [0044.786] GetSystemMetrics (nIndex=32) returned 4 [0044.786] GetSystemMetrics (nIndex=33) returned 4 [0044.786] CloseThemeData () returned 0x0 [0044.786] lstrlenA (lpString="\x92\x07") returned 2 [0044.786] lstrlenA (lpString="\x92\x07") returned 2 [0044.786] lstrlenA (lpString="\x92\x07") returned 2 [0044.786] lstrlenA (lpString="\x92\x07") returned 2 [0044.786] lstrlenA (lpString="\x92\x07") returned 2 [0044.786] lstrlenA (lpString="\x92\x07") returned 2 [0044.786] capGetDriverDescriptionA () returned 0x0 [0044.798] GetLastError () returned 0x0 [0044.798] SetLastError (dwErrCode=0x0) [0044.798] OpenThemeData () returned 0x60000 [0044.798] GetSystemMetrics (nIndex=32) returned 4 [0044.798] GetSystemMetrics (nIndex=33) returned 4 [0044.798] CloseThemeData () returned 0x0 [0044.799] lstrlenA (lpString="\x92\x07") returned 2 [0044.799] lstrlenA (lpString="\x92\x07") returned 2 [0044.799] lstrlenA (lpString="\x92\x07") returned 2 [0044.799] lstrlenA (lpString="\x92\x07") returned 2 [0044.799] lstrlenA (lpString="\x92\x07") returned 2 [0044.799] lstrlenA (lpString="\x92\x07") returned 2 [0044.799] capGetDriverDescriptionA () returned 0x0 [0044.800] GetLastError () returned 0x0 [0044.800] SetLastError (dwErrCode=0x0) [0044.800] OpenThemeData () returned 0x70000 [0044.800] GetSystemMetrics (nIndex=32) returned 4 [0044.800] GetSystemMetrics (nIndex=33) returned 4 [0044.800] CloseThemeData () returned 0x0 [0044.800] lstrlenA (lpString="\x92\x07") returned 2 [0044.800] lstrlenA (lpString="\x92\x07") returned 2 [0044.800] lstrlenA (lpString="\x92\x07") returned 2 [0044.800] lstrlenA (lpString="\x92\x07") returned 2 [0044.800] lstrlenA (lpString="\x92\x07") returned 2 [0044.800] lstrlenA (lpString="\x92\x07") returned 2 [0044.801] capGetDriverDescriptionA () returned 0x0 [0044.801] GetLastError () returned 0x0 [0044.801] SetLastError (dwErrCode=0x0) [0044.801] OpenThemeData () returned 0x80000 [0044.802] GetSystemMetrics (nIndex=32) returned 4 [0044.802] GetSystemMetrics (nIndex=33) returned 4 [0044.802] CloseThemeData () returned 0x0 [0044.802] lstrlenA (lpString="\x92\x07") returned 2 [0044.803] lstrlenA (lpString="\x92\x07") returned 2 [0044.803] lstrlenA (lpString="\x92\x07") returned 2 [0044.803] lstrlenA (lpString="\x92\x07") returned 2 [0044.803] lstrlenA (lpString="\x92\x07") returned 2 [0044.803] lstrlenA (lpString="\x92\x07") returned 2 [0044.803] capGetDriverDescriptionA () returned 0x0 [0044.803] GetLastError () returned 0x0 [0044.803] SetLastError (dwErrCode=0x0) [0044.803] OpenThemeData () returned 0x90000 [0044.804] GetSystemMetrics (nIndex=32) returned 4 [0044.804] GetSystemMetrics (nIndex=33) returned 4 [0044.804] CloseThemeData () returned 0x0 [0044.804] lstrlenA (lpString="\x92\x07") returned 2 [0044.804] lstrlenA (lpString="\x92\x07") returned 2 [0044.804] lstrlenA (lpString="\x92\x07") returned 2 [0044.804] lstrlenA (lpString="\x92\x07") returned 2 [0044.804] lstrlenA (lpString="\x92\x07") returned 2 [0044.804] lstrlenA (lpString="\x92\x07") returned 2 [0044.804] capGetDriverDescriptionA () returned 0x0 [0044.805] GetLastError () returned 0x0 [0044.805] SetLastError (dwErrCode=0x0) [0044.805] OpenThemeData () returned 0xa0000 [0044.806] GetSystemMetrics (nIndex=32) returned 4 [0044.806] GetSystemMetrics (nIndex=33) returned 4 [0044.806] CloseThemeData () returned 0x0 [0044.806] lstrlenA (lpString="\x92\x07") returned 2 [0044.806] lstrlenA (lpString="\x92\x07") returned 2 [0044.806] lstrlenA (lpString="\x92\x07") returned 2 [0044.806] lstrlenA (lpString="\x92\x07") returned 2 [0044.806] lstrlenA (lpString="\x92\x07") returned 2 [0044.806] lstrlenA (lpString="\x92\x07") returned 2 [0044.806] capGetDriverDescriptionA () returned 0x0 [0044.807] GetLastError () returned 0x0 [0044.807] SetLastError (dwErrCode=0x0) [0044.807] OpenThemeData () returned 0xb0000 [0044.807] GetSystemMetrics (nIndex=32) returned 4 [0044.807] GetSystemMetrics (nIndex=33) returned 4 [0044.807] CloseThemeData () returned 0x0 [0044.807] lstrlenA (lpString="\x92\x07") returned 2 [0044.807] lstrlenA (lpString="\x92\x07") returned 2 [0044.807] lstrlenA (lpString="\x92\x07") returned 2 [0044.808] lstrlenA (lpString="\x92\x07") returned 2 [0044.808] lstrlenA (lpString="\x92\x07") returned 2 [0044.808] lstrlenA (lpString="\x92\x07") returned 2 [0044.808] capGetDriverDescriptionA () returned 0x0 [0044.808] GetLastError () returned 0x0 [0044.808] SetLastError (dwErrCode=0x0) [0044.808] OpenThemeData () returned 0xc0000 [0044.809] GetSystemMetrics (nIndex=32) returned 4 [0044.809] GetSystemMetrics (nIndex=33) returned 4 [0044.809] CloseThemeData () returned 0x0 [0044.809] lstrlenA (lpString="\x92\x07") returned 2 [0044.809] lstrlenA (lpString="\x92\x07") returned 2 [0044.809] lstrlenA (lpString="\x92\x07") returned 2 [0044.809] lstrlenA (lpString="\x92\x07") returned 2 [0044.809] lstrlenA (lpString="\x92\x07") returned 2 [0044.809] lstrlenA (lpString="\x92\x07") returned 2 [0044.809] capGetDriverDescriptionA () returned 0x0 [0044.810] GetLastError () returned 0x0 [0044.810] SetLastError (dwErrCode=0x0) [0044.810] OpenThemeData () returned 0xd0000 [0044.810] GetSystemMetrics (nIndex=32) returned 4 [0044.810] GetSystemMetrics (nIndex=33) returned 4 [0044.810] CloseThemeData () returned 0x0 [0044.811] lstrlenA (lpString="\x92\x07") returned 2 [0044.811] lstrlenA (lpString="\x92\x07") returned 2 [0044.811] lstrlenA (lpString="\x92\x07") returned 2 [0044.811] lstrlenA (lpString="\x92\x07") returned 2 [0044.811] lstrlenA (lpString="\x92\x07") returned 2 [0044.811] lstrlenA (lpString="\x92\x07") returned 2 [0044.811] capGetDriverDescriptionA () returned 0x0 [0044.812] GetLastError () returned 0x0 [0044.812] SetLastError (dwErrCode=0x0) [0044.812] OpenThemeData () returned 0xe0000 [0044.812] GetSystemMetrics (nIndex=32) returned 4 [0044.812] GetSystemMetrics (nIndex=33) returned 4 [0044.812] CloseThemeData () returned 0x0 [0044.813] lstrlenA (lpString="\x92\x07") returned 2 [0044.813] lstrlenA (lpString="\x92\x07") returned 2 [0044.813] lstrlenA (lpString="\x92\x07") returned 2 [0044.813] lstrlenA (lpString="\x92\x07") returned 2 [0044.813] lstrlenA (lpString="\x92\x07") returned 2 [0044.813] lstrlenA (lpString="\x92\x07") returned 2 [0044.813] capGetDriverDescriptionA () returned 0x0 [0044.813] GetLastError () returned 0x0 [0044.813] SetLastError (dwErrCode=0x0) [0044.813] OpenThemeData () returned 0xf0000 [0044.814] GetSystemMetrics (nIndex=32) returned 4 [0044.814] GetSystemMetrics (nIndex=33) returned 4 [0044.814] CloseThemeData () returned 0x0 [0044.814] lstrlenA (lpString="\x92\x07") returned 2 [0044.814] lstrlenA (lpString="\x92\x07") returned 2 [0044.814] lstrlenA (lpString="\x92\x07") returned 2 [0044.814] lstrlenA (lpString="\x92\x07") returned 2 [0044.814] lstrlenA (lpString="\x92\x07") returned 2 [0044.814] lstrlenA (lpString="\x92\x07") returned 2 [0044.814] capGetDriverDescriptionA () returned 0x0 [0044.815] GetLastError () returned 0x0 [0044.815] SetLastError (dwErrCode=0x0) [0044.815] OpenThemeData () returned 0x100000 [0044.816] GetSystemMetrics (nIndex=32) returned 4 [0044.816] GetSystemMetrics (nIndex=33) returned 4 [0044.816] CloseThemeData () returned 0x0 [0044.816] lstrlenA (lpString="\x92\x07") returned 2 [0044.816] lstrlenA (lpString="\x92\x07") returned 2 [0044.816] lstrlenA (lpString="\x92\x07") returned 2 [0044.816] lstrlenA (lpString="\x92\x07") returned 2 [0044.816] lstrlenA (lpString="\x92\x07") returned 2 [0044.816] lstrlenA (lpString="\x92\x07") returned 2 [0044.816] capGetDriverDescriptionA () returned 0x0 [0044.817] GetLastError () returned 0x0 [0044.817] SetLastError (dwErrCode=0x0) [0044.817] OpenThemeData () returned 0x110000 [0044.817] GetSystemMetrics (nIndex=32) returned 4 [0044.817] GetSystemMetrics (nIndex=33) returned 4 [0044.817] CloseThemeData () returned 0x0 [0044.817] lstrlenA (lpString="\x92\x07") returned 2 [0044.818] lstrlenA (lpString="\x92\x07") returned 2 [0044.818] lstrlenA (lpString="\x92\x07") returned 2 [0044.818] lstrlenA (lpString="\x92\x07") returned 2 [0044.818] lstrlenA (lpString="\x92\x07") returned 2 [0044.818] lstrlenA (lpString="\x92\x07") returned 2 [0044.818] capGetDriverDescriptionA () returned 0x0 [0044.819] GetLastError () returned 0x0 [0044.819] SetLastError (dwErrCode=0x0) [0044.819] OpenThemeData () returned 0x120000 [0044.822] GetSystemMetrics (nIndex=32) returned 4 [0044.822] GetSystemMetrics (nIndex=33) returned 4 [0044.822] CloseThemeData () returned 0x0 [0044.822] lstrlenA (lpString="\x92\x07") returned 2 [0044.822] lstrlenA (lpString="\x92\x07") returned 2 [0044.822] lstrlenA (lpString="\x92\x07") returned 2 [0044.822] lstrlenA (lpString="\x92\x07") returned 2 [0044.822] lstrlenA (lpString="\x92\x07") returned 2 [0044.822] lstrlenA (lpString="\x92\x07") returned 2 [0044.822] capGetDriverDescriptionA () returned 0x0 [0044.823] GetLastError () returned 0x0 [0044.823] SetLastError (dwErrCode=0x0) [0044.823] OpenThemeData () returned 0x130000 [0044.823] GetSystemMetrics (nIndex=32) returned 4 [0044.823] GetSystemMetrics (nIndex=33) returned 4 [0044.824] CloseThemeData () returned 0x0 [0044.824] lstrlenA (lpString="\x92\x07") returned 2 [0044.824] lstrlenA (lpString="\x92\x07") returned 2 [0044.824] lstrlenA (lpString="\x92\x07") returned 2 [0044.824] lstrlenA (lpString="\x92\x07") returned 2 [0044.824] lstrlenA (lpString="\x92\x07") returned 2 [0044.824] lstrlenA (lpString="\x92\x07") returned 2 [0044.824] capGetDriverDescriptionA () returned 0x0 [0044.825] GetLastError () returned 0x0 [0044.825] SetLastError (dwErrCode=0x0) [0044.825] OpenThemeData () returned 0x140000 [0044.825] GetSystemMetrics (nIndex=32) returned 4 [0044.825] GetSystemMetrics (nIndex=33) returned 4 [0044.825] CloseThemeData () returned 0x0 [0044.825] lstrlenA (lpString="\x92\x07") returned 2 [0044.825] lstrlenA (lpString="\x92\x07") returned 2 [0044.825] lstrlenA (lpString="\x92\x07") returned 2 [0044.825] lstrlenA (lpString="\x92\x07") returned 2 [0044.825] lstrlenA (lpString="\x92\x07") returned 2 [0044.825] lstrlenA (lpString="\x92\x07") returned 2 [0044.826] capGetDriverDescriptionA () returned 0x0 [0044.826] GetLastError () returned 0x0 [0044.826] SetLastError (dwErrCode=0x0) [0044.826] OpenThemeData () returned 0x150000 [0044.827] GetSystemMetrics (nIndex=32) returned 4 [0044.827] GetSystemMetrics (nIndex=33) returned 4 [0044.827] CloseThemeData () returned 0x0 [0044.827] lstrlenA (lpString="\x92\x07") returned 2 [0044.827] lstrlenA (lpString="\x92\x07") returned 2 [0044.827] lstrlenA (lpString="\x92\x07") returned 2 [0044.827] lstrlenA (lpString="\x92\x07") returned 2 [0044.827] lstrlenA (lpString="\x92\x07") returned 2 [0044.827] lstrlenA (lpString="\x92\x07") returned 2 [0044.827] capGetDriverDescriptionA () returned 0x0 [0044.828] GetLastError () returned 0x0 [0044.828] SetLastError (dwErrCode=0x0) [0044.828] OpenThemeData () returned 0x160000 [0044.828] GetSystemMetrics (nIndex=32) returned 4 [0044.828] GetSystemMetrics (nIndex=33) returned 4 [0044.828] CloseThemeData () returned 0x0 [0044.829] lstrlenA (lpString="\x92\x07") returned 2 [0044.829] lstrlenA (lpString="\x92\x07") returned 2 [0044.829] lstrlenA (lpString="\x92\x07") returned 2 [0044.829] lstrlenA (lpString="\x92\x07") returned 2 [0044.829] lstrlenA (lpString="\x92\x07") returned 2 [0044.829] lstrlenA (lpString="\x92\x07") returned 2 [0044.829] capGetDriverDescriptionA () returned 0x0 [0044.829] GetLastError () returned 0x0 [0044.829] SetLastError (dwErrCode=0x0) [0044.829] OpenThemeData () returned 0x170000 [0044.830] GetSystemMetrics (nIndex=32) returned 4 [0044.830] GetSystemMetrics (nIndex=33) returned 4 [0044.830] CloseThemeData () returned 0x0 [0044.830] lstrlenA (lpString="\x92\x07") returned 2 [0044.830] lstrlenA (lpString="\x92\x07") returned 2 [0044.830] lstrlenA (lpString="\x92\x07") returned 2 [0044.830] lstrlenA (lpString="\x92\x07") returned 2 [0044.830] lstrlenA (lpString="\x92\x07") returned 2 [0044.830] lstrlenA (lpString="\x92\x07") returned 2 [0044.830] capGetDriverDescriptionA () returned 0x0 [0044.831] GetLastError () returned 0x0 [0044.831] SetLastError (dwErrCode=0x0) [0044.831] OpenThemeData () returned 0x180000 [0044.831] GetSystemMetrics (nIndex=32) returned 4 [0044.831] GetSystemMetrics (nIndex=33) returned 4 [0044.831] CloseThemeData () returned 0x0 [0044.832] lstrlenA (lpString="\x92\x07") returned 2 [0044.832] lstrlenA (lpString="\x92\x07") returned 2 [0044.832] lstrlenA (lpString="\x92\x07") returned 2 [0044.832] lstrlenA (lpString="\x92\x07") returned 2 [0044.832] lstrlenA (lpString="\x92\x07") returned 2 [0044.832] lstrlenA (lpString="\x92\x07") returned 2 [0044.832] capGetDriverDescriptionA () returned 0x0 [0044.832] GetLastError () returned 0x0 [0044.832] SetLastError (dwErrCode=0x0) [0044.832] OpenThemeData () returned 0x190000 [0044.833] GetSystemMetrics (nIndex=32) returned 4 [0044.833] GetSystemMetrics (nIndex=33) returned 4 [0044.833] CloseThemeData () returned 0x0 [0044.833] lstrlenA (lpString="\x92\x07") returned 2 [0044.833] lstrlenA (lpString="\x92\x07") returned 2 [0044.833] lstrlenA (lpString="\x92\x07") returned 2 [0044.833] lstrlenA (lpString="\x92\x07") returned 2 [0044.833] lstrlenA (lpString="\x92\x07") returned 2 [0044.833] lstrlenA (lpString="\x92\x07") returned 2 [0044.834] capGetDriverDescriptionA () returned 0x0 [0044.835] GetLastError () returned 0x0 [0044.835] SetLastError (dwErrCode=0x0) [0044.835] OpenThemeData () returned 0x1a0000 [0044.835] GetSystemMetrics (nIndex=32) returned 4 [0044.835] GetSystemMetrics (nIndex=33) returned 4 [0044.835] CloseThemeData () returned 0x0 [0044.836] lstrlenA (lpString="\x92\x07") returned 2 [0044.836] lstrlenA (lpString="\x92\x07") returned 2 [0044.836] lstrlenA (lpString="\x92\x07") returned 2 [0044.836] lstrlenA (lpString="\x92\x07") returned 2 [0044.836] lstrlenA (lpString="\x92\x07") returned 2 [0044.836] lstrlenA (lpString="\x92\x07") returned 2 [0044.836] capGetDriverDescriptionA () returned 0x0 [0044.836] GetLastError () returned 0x0 [0044.836] SetLastError (dwErrCode=0x0) [0044.836] OpenThemeData () returned 0x1b0000 [0044.837] GetSystemMetrics (nIndex=32) returned 4 [0044.837] GetSystemMetrics (nIndex=33) returned 4 [0044.837] CloseThemeData () returned 0x0 [0044.837] lstrlenA (lpString="\x92\x07") returned 2 [0044.837] lstrlenA (lpString="\x92\x07") returned 2 [0044.837] lstrlenA (lpString="\x92\x07") returned 2 [0044.837] lstrlenA (lpString="\x92\x07") returned 2 [0044.837] lstrlenA (lpString="\x92\x07") returned 2 [0044.837] lstrlenA (lpString="\x92\x07") returned 2 [0044.837] capGetDriverDescriptionA () returned 0x0 [0044.838] GetLastError () returned 0x0 [0044.838] SetLastError (dwErrCode=0x0) [0044.838] OpenThemeData () returned 0x1c0000 [0044.838] GetSystemMetrics (nIndex=32) returned 4 [0044.838] GetSystemMetrics (nIndex=33) returned 4 [0044.838] CloseThemeData () returned 0x0 [0044.839] lstrlenA (lpString="\x92\x07") returned 2 [0044.839] lstrlenA (lpString="\x92\x07") returned 2 [0044.839] lstrlenA (lpString="\x92\x07") returned 2 [0044.839] lstrlenA (lpString="\x92\x07") returned 2 [0044.839] lstrlenA (lpString="\x92\x07") returned 2 [0044.839] lstrlenA (lpString="\x92\x07") returned 2 [0044.839] capGetDriverDescriptionA () returned 0x0 [0044.839] GetLastError () returned 0x0 [0044.839] SetLastError (dwErrCode=0x0) [0044.839] OpenThemeData () returned 0x1d0000 [0044.840] GetSystemMetrics (nIndex=32) returned 4 [0044.840] GetSystemMetrics (nIndex=33) returned 4 [0044.840] CloseThemeData () returned 0x0 [0044.840] lstrlenA (lpString="\x92\x07") returned 2 [0044.840] lstrlenA (lpString="\x92\x07") returned 2 [0044.840] lstrlenA (lpString="\x92\x07") returned 2 [0044.840] lstrlenA (lpString="\x92\x07") returned 2 [0044.840] lstrlenA (lpString="\x92\x07") returned 2 [0044.840] lstrlenA (lpString="\x92\x07") returned 2 [0044.840] capGetDriverDescriptionA () returned 0x0 [0044.841] GetLastError () returned 0x0 [0044.841] SetLastError (dwErrCode=0x0) [0044.841] OpenThemeData () returned 0x1e0000 [0044.841] GetSystemMetrics (nIndex=32) returned 4 [0044.841] GetSystemMetrics (nIndex=33) returned 4 [0044.841] CloseThemeData () returned 0x0 [0044.842] lstrlenA (lpString="\x92\x07") returned 2 [0044.842] lstrlenA (lpString="\x92\x07") returned 2 [0044.842] lstrlenA (lpString="\x92\x07") returned 2 [0044.842] lstrlenA (lpString="\x92\x07") returned 2 [0044.842] lstrlenA (lpString="\x92\x07") returned 2 [0044.842] lstrlenA (lpString="\x92\x07") returned 2 [0044.842] capGetDriverDescriptionA () returned 0x0 [0044.843] GetLastError () returned 0x0 [0044.843] SetLastError (dwErrCode=0x0) [0044.843] OpenThemeData () returned 0x1f0000 [0044.843] GetSystemMetrics (nIndex=32) returned 4 [0044.843] GetSystemMetrics (nIndex=33) returned 4 [0044.843] CloseThemeData () returned 0x0 [0044.843] lstrlenA (lpString="\x92\x07") returned 2 [0044.843] lstrlenA (lpString="\x92\x07") returned 2 [0044.843] lstrlenA (lpString="\x92\x07") returned 2 [0044.843] lstrlenA (lpString="\x92\x07") returned 2 [0044.843] lstrlenA (lpString="\x92\x07") returned 2 [0044.843] lstrlenA (lpString="\x92\x07") returned 2 [0044.844] capGetDriverDescriptionA () returned 0x0 [0044.844] GetLastError () returned 0x0 [0044.844] SetLastError (dwErrCode=0x0) [0044.844] OpenThemeData () returned 0x200000 [0044.845] GetSystemMetrics (nIndex=32) returned 4 [0044.845] GetSystemMetrics (nIndex=33) returned 4 [0044.845] CloseThemeData () returned 0x0 [0044.845] lstrlenA (lpString="\x92\x07") returned 2 [0044.845] lstrlenA (lpString="\x92\x07") returned 2 [0044.845] lstrlenA (lpString="\x92\x07") returned 2 [0044.845] lstrlenA (lpString="\x92\x07") returned 2 [0044.845] lstrlenA (lpString="\x92\x07") returned 2 [0044.845] lstrlenA (lpString="\x92\x07") returned 2 [0044.845] capGetDriverDescriptionA () returned 0x0 [0044.846] GetLastError () returned 0x0 [0044.846] SetLastError (dwErrCode=0x0) [0044.846] OpenThemeData () returned 0x210000 [0044.846] GetSystemMetrics (nIndex=32) returned 4 [0044.846] GetSystemMetrics (nIndex=33) returned 4 [0044.846] CloseThemeData () returned 0x0 [0044.846] lstrlenA (lpString="\x92\x07") returned 2 [0044.847] lstrlenA (lpString="\x92\x07") returned 2 [0044.847] lstrlenA (lpString="\x92\x07") returned 2 [0044.847] lstrlenA (lpString="\x92\x07") returned 2 [0044.847] lstrlenA (lpString="\x92\x07") returned 2 [0044.847] lstrlenA (lpString="\x92\x07") returned 2 [0044.847] capGetDriverDescriptionA () returned 0x0 [0044.847] GetLastError () returned 0x0 [0044.847] SetLastError (dwErrCode=0x0) [0044.847] OpenThemeData () returned 0x220000 [0044.848] GetSystemMetrics (nIndex=32) returned 4 [0044.848] GetSystemMetrics (nIndex=33) returned 4 [0044.848] CloseThemeData () returned 0x0 [0044.848] lstrlenA (lpString="\x92\x07") returned 2 [0044.848] lstrlenA (lpString="\x92\x07") returned 2 [0044.848] lstrlenA (lpString="\x92\x07") returned 2 [0044.848] lstrlenA (lpString="\x92\x07") returned 2 [0044.848] lstrlenA (lpString="\x92\x07") returned 2 [0044.848] lstrlenA (lpString="\x92\x07") returned 2 [0044.848] capGetDriverDescriptionA () returned 0x0 [0044.849] GetLastError () returned 0x0 [0044.849] SetLastError (dwErrCode=0x0) [0044.849] OpenThemeData () returned 0x230000 [0044.850] GetSystemMetrics (nIndex=32) returned 4 [0044.850] GetSystemMetrics (nIndex=33) returned 4 [0044.850] CloseThemeData () returned 0x0 [0044.850] lstrlenA (lpString="\x92\x07") returned 2 [0044.850] lstrlenA (lpString="\x92\x07") returned 2 [0044.850] lstrlenA (lpString="\x92\x07") returned 2 [0044.850] lstrlenA (lpString="\x92\x07") returned 2 [0044.850] lstrlenA (lpString="\x92\x07") returned 2 [0044.850] lstrlenA (lpString="\x92\x07") returned 2 [0044.850] capGetDriverDescriptionA () returned 0x0 [0044.851] GetLastError () returned 0x0 [0044.851] SetLastError (dwErrCode=0x0) [0044.851] OpenThemeData () returned 0x240000 [0044.851] GetSystemMetrics (nIndex=32) returned 4 [0044.851] GetSystemMetrics (nIndex=33) returned 4 [0044.851] CloseThemeData () returned 0x0 [0044.852] lstrlenA (lpString="\x92\x07") returned 2 [0044.852] lstrlenA (lpString="\x92\x07") returned 2 [0044.852] lstrlenA (lpString="\x92\x07") returned 2 [0044.852] lstrlenA (lpString="\x92\x07") returned 2 [0044.852] lstrlenA (lpString="\x92\x07") returned 2 [0044.852] lstrlenA (lpString="\x92\x07") returned 2 [0044.852] capGetDriverDescriptionA () returned 0x0 [0044.852] GetLastError () returned 0x0 [0044.853] SetLastError (dwErrCode=0x0) [0044.853] OpenThemeData () returned 0x250000 [0044.853] GetSystemMetrics (nIndex=32) returned 4 [0044.853] GetSystemMetrics (nIndex=33) returned 4 [0044.853] CloseThemeData () returned 0x0 [0044.853] lstrlenA (lpString="\x92\x07") returned 2 [0044.853] lstrlenA (lpString="\x92\x07") returned 2 [0044.853] lstrlenA (lpString="\x92\x07") returned 2 [0044.853] lstrlenA (lpString="\x92\x07") returned 2 [0044.853] lstrlenA (lpString="\x92\x07") returned 2 [0044.853] lstrlenA (lpString="\x92\x07") returned 2 [0044.853] capGetDriverDescriptionA () returned 0x0 [0044.854] GetLastError () returned 0x0 [0044.854] SetLastError (dwErrCode=0x0) [0044.854] OpenThemeData () returned 0x260000 [0044.854] GetSystemMetrics (nIndex=32) returned 4 [0044.855] GetSystemMetrics (nIndex=33) returned 4 [0044.855] CloseThemeData () returned 0x0 [0044.855] lstrlenA (lpString="\x92\x07") returned 2 [0044.855] lstrlenA (lpString="\x92\x07") returned 2 [0044.855] lstrlenA (lpString="\x92\x07") returned 2 [0044.855] lstrlenA (lpString="\x92\x07") returned 2 [0044.855] lstrlenA (lpString="\x92\x07") returned 2 [0044.855] lstrlenA (lpString="\x92\x07") returned 2 [0044.855] capGetDriverDescriptionA () returned 0x0 [0044.856] GetLastError () returned 0x0 [0044.856] SetLastError (dwErrCode=0x0) [0044.856] OpenThemeData () returned 0x270000 [0044.856] GetSystemMetrics (nIndex=32) returned 4 [0044.856] GetSystemMetrics (nIndex=33) returned 4 [0044.856] CloseThemeData () returned 0x0 [0044.856] lstrlenA (lpString="\x92\x07") returned 2 [0044.856] lstrlenA (lpString="\x92\x07") returned 2 [0044.856] lstrlenA (lpString="\x92\x07") returned 2 [0044.857] lstrlenA (lpString="\x92\x07") returned 2 [0044.857] lstrlenA (lpString="\x92\x07") returned 2 [0044.857] lstrlenA (lpString="\x92\x07") returned 2 [0044.857] capGetDriverDescriptionA () returned 0x0 [0044.857] GetLastError () returned 0x0 [0044.857] SetLastError (dwErrCode=0x0) [0044.857] OpenThemeData () returned 0x280000 [0044.858] GetSystemMetrics (nIndex=32) returned 4 [0044.858] GetSystemMetrics (nIndex=33) returned 4 [0044.858] CloseThemeData () returned 0x0 [0044.858] lstrlenA (lpString="\x92\x07") returned 2 [0044.858] lstrlenA (lpString="\x92\x07") returned 2 [0044.858] lstrlenA (lpString="\x92\x07") returned 2 [0044.858] lstrlenA (lpString="\x92\x07") returned 2 [0044.858] lstrlenA (lpString="\x92\x07") returned 2 [0044.858] lstrlenA (lpString="\x92\x07") returned 2 [0044.858] capGetDriverDescriptionA () returned 0x0 [0044.859] GetLastError () returned 0x0 [0044.859] SetLastError (dwErrCode=0x0) [0044.859] OpenThemeData () returned 0x290000 [0044.859] GetSystemMetrics (nIndex=32) returned 4 [0044.859] GetSystemMetrics (nIndex=33) returned 4 [0044.859] CloseThemeData () returned 0x0 [0044.860] lstrlenA (lpString="\x92\x07") returned 2 [0044.860] lstrlenA (lpString="\x92\x07") returned 2 [0044.860] lstrlenA (lpString="\x92\x07") returned 2 [0044.860] capGetDriverDescriptionA () returned 0x0 [0044.861] GetLastError () returned 0x0 [0044.861] SetLastError (dwErrCode=0x0) [0044.861] OpenThemeData () returned 0x2a0000 [0044.861] GetSystemMetrics (nIndex=32) returned 4 [0044.861] GetSystemMetrics (nIndex=33) returned 4 [0044.861] CloseThemeData () returned 0x0 [0044.862] capGetDriverDescriptionA () returned 0x0 [0044.862] GetLastError () returned 0x0 [0044.862] SetLastError (dwErrCode=0x0) [0044.862] OpenThemeData () returned 0x2b0000 [0044.863] GetSystemMetrics (nIndex=32) returned 4 [0044.863] GetSystemMetrics (nIndex=33) returned 4 [0044.863] CloseThemeData () returned 0x0 [0044.863] capGetDriverDescriptionA () returned 0x0 [0044.864] GetLastError () returned 0x0 [0044.864] SetLastError (dwErrCode=0x0) [0044.864] OpenThemeData () returned 0x2c0000 [0044.864] GetSystemMetrics (nIndex=32) returned 4 [0044.864] GetSystemMetrics (nIndex=33) returned 4 [0044.864] CloseThemeData () returned 0x0 [0044.865] capGetDriverDescriptionA () returned 0x0 [0044.866] GetLastError () returned 0x0 [0044.866] SetLastError (dwErrCode=0x0) [0044.866] OpenThemeData () returned 0x2d0000 [0044.866] GetSystemMetrics (nIndex=32) returned 4 [0044.867] GetSystemMetrics (nIndex=33) returned 4 [0044.867] CloseThemeData () returned 0x0 [0044.867] capGetDriverDescriptionA () returned 0x0 [0044.867] GetLastError () returned 0x0 [0044.868] SetLastError (dwErrCode=0x0) [0044.868] OpenThemeData () returned 0x2e0000 [0044.868] GetSystemMetrics (nIndex=32) returned 4 [0044.868] GetSystemMetrics (nIndex=33) returned 4 [0044.868] CloseThemeData () returned 0x0 [0044.868] capGetDriverDescriptionA () returned 0x0 [0044.869] GetLastError () returned 0x0 [0044.869] SetLastError (dwErrCode=0x0) [0044.869] OpenThemeData () returned 0x2f0000 [0044.869] GetSystemMetrics (nIndex=32) returned 4 [0044.869] GetSystemMetrics (nIndex=33) returned 4 [0044.869] CloseThemeData () returned 0x0 [0044.870] capGetDriverDescriptionA () returned 0x0 [0044.870] GetLastError () returned 0x0 [0044.870] SetLastError (dwErrCode=0x0) [0044.870] OpenThemeData () returned 0x300000 [0044.871] GetSystemMetrics (nIndex=32) returned 4 [0044.871] GetSystemMetrics (nIndex=33) returned 4 [0044.871] CloseThemeData () returned 0x0 [0044.871] capGetDriverDescriptionA () returned 0x0 [0044.872] GetLastError () returned 0x0 [0044.872] SetLastError (dwErrCode=0x0) [0044.872] OpenThemeData () returned 0x310000 [0044.872] GetSystemMetrics (nIndex=32) returned 4 [0044.872] GetSystemMetrics (nIndex=33) returned 4 [0044.872] CloseThemeData () returned 0x0 [0044.873] capGetDriverDescriptionA () returned 0x0 [0044.873] GetLastError () returned 0x0 [0044.873] SetLastError (dwErrCode=0x0) [0044.873] OpenThemeData () returned 0x320000 [0044.874] GetSystemMetrics (nIndex=32) returned 4 [0044.874] GetSystemMetrics (nIndex=33) returned 4 [0044.874] CloseThemeData () returned 0x0 [0044.874] capGetDriverDescriptionA () returned 0x0 [0044.875] GetLastError () returned 0x0 [0044.875] SetLastError (dwErrCode=0x0) [0044.875] OpenThemeData () returned 0x330000 [0044.875] GetSystemMetrics (nIndex=32) returned 4 [0044.875] GetSystemMetrics (nIndex=33) returned 4 [0044.875] CloseThemeData () returned 0x0 [0044.875] capGetDriverDescriptionA () returned 0x0 [0044.876] GetLastError () returned 0x0 [0044.876] SetLastError (dwErrCode=0x0) [0044.876] OpenThemeData () returned 0x340000 [0044.877] GetSystemMetrics (nIndex=32) returned 4 [0044.877] GetSystemMetrics (nIndex=33) returned 4 [0044.877] CloseThemeData () returned 0x0 [0044.877] capGetDriverDescriptionA () returned 0x0 [0044.877] GetLastError () returned 0x0 [0044.878] SetLastError (dwErrCode=0x0) [0044.878] OpenThemeData () returned 0x350000 [0044.878] GetSystemMetrics (nIndex=32) returned 4 [0044.878] GetSystemMetrics (nIndex=33) returned 4 [0044.878] CloseThemeData () returned 0x0 [0044.878] capGetDriverDescriptionA () returned 0x0 [0044.879] GetLastError () returned 0x0 [0044.879] SetLastError (dwErrCode=0x0) [0044.879] OpenThemeData () returned 0x360000 [0044.879] GetSystemMetrics (nIndex=32) returned 4 [0044.879] GetSystemMetrics (nIndex=33) returned 4 [0044.879] CloseThemeData () returned 0x0 [0044.880] capGetDriverDescriptionA () returned 0x0 [0044.881] GetLastError () returned 0x0 [0044.881] SetLastError (dwErrCode=0x0) [0044.881] OpenThemeData () returned 0x370000 [0044.881] GetSystemMetrics (nIndex=32) returned 4 [0044.881] GetSystemMetrics (nIndex=33) returned 4 [0044.881] CloseThemeData () returned 0x0 [0044.881] capGetDriverDescriptionA () returned 0x0 [0044.882] GetLastError () returned 0x0 [0044.882] SetLastError (dwErrCode=0x0) [0044.882] OpenThemeData () returned 0x380000 [0044.883] GetSystemMetrics (nIndex=32) returned 4 [0044.883] GetSystemMetrics (nIndex=33) returned 4 [0044.883] CloseThemeData () returned 0x0 [0044.883] capGetDriverDescriptionA () returned 0x0 [0044.884] GetLastError () returned 0x0 [0044.884] SetLastError (dwErrCode=0x0) [0044.884] OpenThemeData () returned 0x390000 [0044.885] GetSystemMetrics (nIndex=32) returned 4 [0044.885] GetSystemMetrics (nIndex=33) returned 4 [0044.885] CloseThemeData () returned 0x0 [0044.886] capGetDriverDescriptionA () returned 0x0 [0044.887] GetLastError () returned 0x0 [0044.887] SetLastError (dwErrCode=0x0) [0044.887] OpenThemeData () returned 0x3a0000 [0044.887] GetSystemMetrics (nIndex=32) returned 4 [0044.887] GetSystemMetrics (nIndex=33) returned 4 [0044.887] CloseThemeData () returned 0x0 [0044.888] capGetDriverDescriptionA () returned 0x0 [0044.888] GetLastError () returned 0x0 [0044.888] SetLastError (dwErrCode=0x0) [0044.888] OpenThemeData () returned 0x3b0000 [0044.889] GetSystemMetrics (nIndex=32) returned 4 [0044.889] GetSystemMetrics (nIndex=33) returned 4 [0044.889] CloseThemeData () returned 0x0 [0044.889] capGetDriverDescriptionA () returned 0x0 [0044.890] GetLastError () returned 0x0 [0044.890] SetLastError (dwErrCode=0x0) [0044.890] OpenThemeData () returned 0x3c0000 [0044.890] GetSystemMetrics (nIndex=32) returned 4 [0044.890] GetSystemMetrics (nIndex=33) returned 4 [0044.890] CloseThemeData () returned 0x0 [0044.890] capGetDriverDescriptionA () returned 0x0 [0044.891] GetLastError () returned 0x0 [0044.891] SetLastError (dwErrCode=0x0) [0044.891] OpenThemeData () returned 0x3d0000 [0044.891] GetSystemMetrics (nIndex=32) returned 4 [0044.891] GetSystemMetrics (nIndex=33) returned 4 [0044.891] CloseThemeData () returned 0x0 [0044.892] capGetDriverDescriptionA () returned 0x0 [0044.892] GetLastError () returned 0x0 [0044.892] SetLastError (dwErrCode=0x0) [0044.892] OpenThemeData () returned 0x3e0000 [0044.893] GetSystemMetrics (nIndex=32) returned 4 [0044.893] GetSystemMetrics (nIndex=33) returned 4 [0044.893] CloseThemeData () returned 0x0 [0044.893] capGetDriverDescriptionA () returned 0x0 [0044.894] GetLastError () returned 0x0 [0044.894] SetLastError (dwErrCode=0x0) [0044.894] OpenThemeData () returned 0x3f0000 [0044.894] GetSystemMetrics (nIndex=32) returned 4 [0044.894] GetSystemMetrics (nIndex=33) returned 4 [0044.894] CloseThemeData () returned 0x0 [0044.895] capGetDriverDescriptionA () returned 0x0 [0044.895] GetLastError () returned 0x0 [0044.895] SetLastError (dwErrCode=0x0) [0044.895] OpenThemeData () returned 0x400000 [0044.896] GetSystemMetrics (nIndex=32) returned 4 [0044.896] GetSystemMetrics (nIndex=33) returned 4 [0044.896] CloseThemeData () returned 0x0 [0044.896] capGetDriverDescriptionA () returned 0x0 [0044.897] GetLastError () returned 0x0 [0044.897] SetLastError (dwErrCode=0x0) [0044.897] OpenThemeData () returned 0x410000 [0044.897] GetSystemMetrics (nIndex=32) returned 4 [0044.897] GetSystemMetrics (nIndex=33) returned 4 [0044.897] CloseThemeData () returned 0x0 [0044.898] capGetDriverDescriptionA () returned 0x0 [0044.898] GetLastError () returned 0x0 [0044.898] SetLastError (dwErrCode=0x0) [0044.898] OpenThemeData () returned 0x420000 [0044.899] GetSystemMetrics (nIndex=32) returned 4 [0044.899] GetSystemMetrics (nIndex=33) returned 4 [0044.899] CloseThemeData () returned 0x0 [0044.899] capGetDriverDescriptionA () returned 0x0 [0044.900] GetLastError () returned 0x0 [0044.900] SetLastError (dwErrCode=0x0) [0044.900] OpenThemeData () returned 0x430000 [0044.900] GetSystemMetrics (nIndex=32) returned 4 [0044.900] GetSystemMetrics (nIndex=33) returned 4 [0044.900] CloseThemeData () returned 0x0 [0044.901] capGetDriverDescriptionA () returned 0x0 [0044.901] GetLastError () returned 0x0 [0044.901] SetLastError (dwErrCode=0x0) [0044.901] OpenThemeData () returned 0x440000 [0044.902] GetSystemMetrics (nIndex=32) returned 4 [0044.902] GetSystemMetrics (nIndex=33) returned 4 [0044.902] CloseThemeData () returned 0x0 [0044.902] capGetDriverDescriptionA () returned 0x0 [0044.903] GetLastError () returned 0x0 [0044.903] SetLastError (dwErrCode=0x0) [0044.903] OpenThemeData () returned 0x450000 [0044.903] GetSystemMetrics (nIndex=32) returned 4 [0044.903] GetSystemMetrics (nIndex=33) returned 4 [0044.903] CloseThemeData () returned 0x0 [0044.903] capGetDriverDescriptionA () returned 0x0 [0044.904] GetLastError () returned 0x0 [0044.904] SetLastError (dwErrCode=0x0) [0044.904] OpenThemeData () returned 0x460000 [0044.904] GetSystemMetrics (nIndex=32) returned 4 [0044.905] GetSystemMetrics (nIndex=33) returned 4 [0044.905] CloseThemeData () returned 0x0 [0044.905] capGetDriverDescriptionA () returned 0x0 [0044.905] GetLastError () returned 0x0 [0044.905] SetLastError (dwErrCode=0x0) [0044.906] OpenThemeData () returned 0x470000 [0044.906] GetSystemMetrics (nIndex=32) returned 4 [0044.906] GetSystemMetrics (nIndex=33) returned 4 [0044.906] CloseThemeData () returned 0x0 [0044.906] capGetDriverDescriptionA () returned 0x0 [0044.907] GetLastError () returned 0x0 [0044.907] SetLastError (dwErrCode=0x0) [0044.907] OpenThemeData () returned 0x480000 [0044.907] GetSystemMetrics (nIndex=32) returned 4 [0044.907] GetSystemMetrics (nIndex=33) returned 4 [0044.907] CloseThemeData () returned 0x0 [0044.908] capGetDriverDescriptionA () returned 0x0 [0044.908] GetLastError () returned 0x0 [0044.908] SetLastError (dwErrCode=0x0) [0044.908] OpenThemeData () returned 0x490000 [0044.909] GetSystemMetrics (nIndex=32) returned 4 [0044.909] GetSystemMetrics (nIndex=33) returned 4 [0044.909] CloseThemeData () returned 0x0 [0044.910] capGetDriverDescriptionA () returned 0x0 [0044.910] GetLastError () returned 0x0 [0044.910] SetLastError (dwErrCode=0x0) [0044.910] OpenThemeData () returned 0x4a0000 [0044.911] GetSystemMetrics (nIndex=32) returned 4 [0044.911] GetSystemMetrics (nIndex=33) returned 4 [0044.911] CloseThemeData () returned 0x0 [0044.911] capGetDriverDescriptionA () returned 0x0 [0044.912] GetLastError () returned 0x0 [0044.912] SetLastError (dwErrCode=0x0) [0044.912] OpenThemeData () returned 0x4b0000 [0044.913] GetSystemMetrics (nIndex=32) returned 4 [0044.913] GetSystemMetrics (nIndex=33) returned 4 [0044.913] CloseThemeData () returned 0x0 [0044.913] capGetDriverDescriptionA () returned 0x0 [0044.914] GetLastError () returned 0x0 [0044.914] SetLastError (dwErrCode=0x0) [0044.914] OpenThemeData () returned 0x4c0000 [0044.914] GetSystemMetrics (nIndex=32) returned 4 [0044.914] GetSystemMetrics (nIndex=33) returned 4 [0044.914] CloseThemeData () returned 0x0 [0044.915] capGetDriverDescriptionA () returned 0x0 [0044.915] GetLastError () returned 0x0 [0044.915] SetLastError (dwErrCode=0x0) [0044.915] OpenThemeData () returned 0x4d0000 [0044.916] GetSystemMetrics (nIndex=32) returned 4 [0044.916] GetSystemMetrics (nIndex=33) returned 4 [0044.916] CloseThemeData () returned 0x0 [0044.916] capGetDriverDescriptionA () returned 0x0 [0044.917] GetLastError () returned 0x0 [0044.917] SetLastError (dwErrCode=0x0) [0044.917] OpenThemeData () returned 0x4e0000 [0044.917] GetSystemMetrics (nIndex=32) returned 4 [0044.917] GetSystemMetrics (nIndex=33) returned 4 [0044.917] CloseThemeData () returned 0x0 [0044.918] capGetDriverDescriptionA () returned 0x0 [0044.918] GetLastError () returned 0x0 [0044.918] SetLastError (dwErrCode=0x0) [0044.918] OpenThemeData () returned 0x4f0000 [0044.919] GetSystemMetrics (nIndex=32) returned 4 [0044.919] GetSystemMetrics (nIndex=33) returned 4 [0044.919] CloseThemeData () returned 0x0 [0044.919] capGetDriverDescriptionA () returned 0x0 [0044.920] GetLastError () returned 0x0 [0044.920] SetLastError (dwErrCode=0x0) [0044.920] OpenThemeData () returned 0x500000 [0044.920] GetSystemMetrics (nIndex=32) returned 4 [0044.920] GetSystemMetrics (nIndex=33) returned 4 [0044.920] CloseThemeData () returned 0x0 [0044.920] capGetDriverDescriptionA () returned 0x0 [0044.921] GetLastError () returned 0x0 [0044.921] SetLastError (dwErrCode=0x0) [0044.921] OpenThemeData () returned 0x510000 [0044.922] GetSystemMetrics (nIndex=32) returned 4 [0044.922] GetSystemMetrics (nIndex=33) returned 4 [0044.922] CloseThemeData () returned 0x0 [0044.922] capGetDriverDescriptionA () returned 0x0 [0044.922] GetLastError () returned 0x0 [0044.923] SetLastError (dwErrCode=0x0) [0044.923] OpenThemeData () returned 0x520000 [0044.923] GetSystemMetrics (nIndex=32) returned 4 [0044.923] GetSystemMetrics (nIndex=33) returned 4 [0044.923] CloseThemeData () returned 0x0 [0044.923] capGetDriverDescriptionA () returned 0x0 [0044.924] GetLastError () returned 0x0 [0044.924] SetLastError (dwErrCode=0x0) [0044.924] OpenThemeData () returned 0x530000 [0044.924] GetSystemMetrics (nIndex=32) returned 4 [0044.924] GetSystemMetrics (nIndex=33) returned 4 [0044.924] CloseThemeData () returned 0x0 [0044.925] capGetDriverDescriptionA () returned 0x0 [0044.925] GetLastError () returned 0x0 [0044.925] SetLastError (dwErrCode=0x0) [0044.925] OpenThemeData () returned 0x540000 [0044.926] GetSystemMetrics (nIndex=32) returned 4 [0044.926] GetSystemMetrics (nIndex=33) returned 4 [0044.926] CloseThemeData () returned 0x0 [0044.926] capGetDriverDescriptionA () returned 0x0 [0044.927] GetLastError () returned 0x0 [0044.927] SetLastError (dwErrCode=0x0) [0044.927] OpenThemeData () returned 0x550000 [0044.928] GetSystemMetrics (nIndex=32) returned 4 [0044.928] GetSystemMetrics (nIndex=33) returned 4 [0044.928] CloseThemeData () returned 0x0 [0044.929] capGetDriverDescriptionA () returned 0x0 [0044.929] GetLastError () returned 0x0 [0044.929] SetLastError (dwErrCode=0x0) [0044.929] OpenThemeData () returned 0x560000 [0044.930] GetSystemMetrics (nIndex=32) returned 4 [0044.930] GetSystemMetrics (nIndex=33) returned 4 [0044.930] CloseThemeData () returned 0x0 [0044.930] capGetDriverDescriptionA () returned 0x0 [0044.931] GetLastError () returned 0x0 [0044.931] SetLastError (dwErrCode=0x0) [0044.931] OpenThemeData () returned 0x570000 [0044.931] GetSystemMetrics (nIndex=32) returned 4 [0044.931] GetSystemMetrics (nIndex=33) returned 4 [0044.931] CloseThemeData () returned 0x0 [0044.932] capGetDriverDescriptionA () returned 0x0 [0044.932] GetLastError () returned 0x0 [0044.932] SetLastError (dwErrCode=0x0) [0044.932] OpenThemeData () returned 0x580000 [0044.933] GetSystemMetrics (nIndex=32) returned 4 [0044.933] GetSystemMetrics (nIndex=33) returned 4 [0044.933] CloseThemeData () returned 0x0 [0044.933] capGetDriverDescriptionA () returned 0x0 [0044.934] GetLastError () returned 0x0 [0044.934] SetLastError (dwErrCode=0x0) [0044.934] OpenThemeData () returned 0x590000 [0044.934] GetSystemMetrics (nIndex=32) returned 4 [0044.934] GetSystemMetrics (nIndex=33) returned 4 [0044.934] CloseThemeData () returned 0x0 [0044.935] capGetDriverDescriptionA () returned 0x0 [0044.936] GetLastError () returned 0x0 [0044.936] SetLastError (dwErrCode=0x0) [0044.936] OpenThemeData () returned 0x5a0000 [0044.936] GetSystemMetrics (nIndex=32) returned 4 [0044.937] GetSystemMetrics (nIndex=33) returned 4 [0044.937] CloseThemeData () returned 0x0 [0044.937] capGetDriverDescriptionA () returned 0x0 [0044.937] GetLastError () returned 0x0 [0044.938] SetLastError (dwErrCode=0x0) [0044.938] OpenThemeData () returned 0x5b0000 [0044.938] GetSystemMetrics (nIndex=32) returned 4 [0044.938] GetSystemMetrics (nIndex=33) returned 4 [0044.938] CloseThemeData () returned 0x0 [0044.938] capGetDriverDescriptionA () returned 0x0 [0044.939] GetLastError () returned 0x0 [0044.939] SetLastError (dwErrCode=0x0) [0044.939] OpenThemeData () returned 0x5c0000 [0044.939] GetSystemMetrics (nIndex=32) returned 4 [0044.939] GetSystemMetrics (nIndex=33) returned 4 [0044.939] CloseThemeData () returned 0x0 [0044.940] capGetDriverDescriptionA () returned 0x0 [0044.940] GetLastError () returned 0x0 [0044.940] SetLastError (dwErrCode=0x0) [0044.940] OpenThemeData () returned 0x5d0000 [0044.941] GetSystemMetrics (nIndex=32) returned 4 [0044.941] GetSystemMetrics (nIndex=33) returned 4 [0044.941] CloseThemeData () returned 0x0 [0044.941] capGetDriverDescriptionA () returned 0x0 [0044.942] GetLastError () returned 0x0 [0044.942] SetLastError (dwErrCode=0x0) [0044.942] OpenThemeData () returned 0x5e0000 [0044.942] GetSystemMetrics (nIndex=32) returned 4 [0044.942] GetSystemMetrics (nIndex=33) returned 4 [0044.942] CloseThemeData () returned 0x0 [0044.943] capGetDriverDescriptionA () returned 0x0 [0044.944] GetLastError () returned 0x0 [0044.944] SetLastError (dwErrCode=0x0) [0044.944] OpenThemeData () returned 0x5f0000 [0044.944] GetSystemMetrics (nIndex=32) returned 4 [0044.944] GetSystemMetrics (nIndex=33) returned 4 [0044.944] CloseThemeData () returned 0x0 [0044.944] capGetDriverDescriptionA () returned 0x0 [0044.945] GetLastError () returned 0x0 [0044.945] SetLastError (dwErrCode=0x0) [0044.945] OpenThemeData () returned 0x600000 [0044.945] GetSystemMetrics (nIndex=32) returned 4 [0044.946] GetSystemMetrics (nIndex=33) returned 4 [0044.946] CloseThemeData () returned 0x0 [0044.946] capGetDriverDescriptionA () returned 0x0 [0044.946] GetLastError () returned 0x0 [0044.946] SetLastError (dwErrCode=0x0) [0044.946] OpenThemeData () returned 0x610000 [0044.947] GetSystemMetrics (nIndex=32) returned 4 [0044.947] GetSystemMetrics (nIndex=33) returned 4 [0044.947] CloseThemeData () returned 0x0 [0044.947] capGetDriverDescriptionA () returned 0x0 [0044.948] GetLastError () returned 0x0 [0044.948] SetLastError (dwErrCode=0x0) [0044.948] OpenThemeData () returned 0x620000 [0044.950] GetSystemMetrics (nIndex=32) returned 4 [0044.950] GetSystemMetrics (nIndex=33) returned 4 [0044.950] CloseThemeData () returned 0x0 [0044.951] capGetDriverDescriptionA () returned 0x0 [0044.951] GetLastError () returned 0x0 [0044.951] SetLastError (dwErrCode=0x0) [0044.951] OpenThemeData () returned 0x630000 [0044.952] GetSystemMetrics (nIndex=32) returned 4 [0044.952] GetSystemMetrics (nIndex=33) returned 4 [0044.952] CloseThemeData () returned 0x0 [0044.952] capGetDriverDescriptionA () returned 0x0 [0044.953] GetLastError () returned 0x0 [0044.953] SetLastError (dwErrCode=0x0) [0044.953] OpenThemeData () returned 0x640000 [0044.953] GetSystemMetrics (nIndex=32) returned 4 [0044.953] GetSystemMetrics (nIndex=33) returned 4 [0044.953] CloseThemeData () returned 0x0 [0044.954] capGetDriverDescriptionA () returned 0x0 [0044.954] GetLastError () returned 0x0 [0044.954] SetLastError (dwErrCode=0x0) [0044.954] OpenThemeData () returned 0x650000 [0044.955] GetSystemMetrics (nIndex=32) returned 4 [0044.955] GetSystemMetrics (nIndex=33) returned 4 [0044.955] CloseThemeData () returned 0x0 [0044.955] capGetDriverDescriptionA () returned 0x0 [0044.956] GetLastError () returned 0x0 [0044.956] SetLastError (dwErrCode=0x0) [0044.956] OpenThemeData () returned 0x660000 [0044.956] GetSystemMetrics (nIndex=32) returned 4 [0044.956] GetSystemMetrics (nIndex=33) returned 4 [0044.956] CloseThemeData () returned 0x0 [0044.956] capGetDriverDescriptionA () returned 0x0 [0044.957] GetLastError () returned 0x0 [0044.957] SetLastError (dwErrCode=0x0) [0044.957] OpenThemeData () returned 0x670000 [0044.958] GetSystemMetrics (nIndex=32) returned 4 [0044.958] GetSystemMetrics (nIndex=33) returned 4 [0044.958] CloseThemeData () returned 0x0 [0044.958] capGetDriverDescriptionA () returned 0x0 [0044.960] GetLastError () returned 0x0 [0044.960] SetLastError (dwErrCode=0x0) [0044.960] OpenThemeData () returned 0x680000 [0044.961] GetSystemMetrics (nIndex=32) returned 4 [0044.961] GetSystemMetrics (nIndex=33) returned 4 [0044.961] CloseThemeData () returned 0x0 [0044.961] capGetDriverDescriptionA () returned 0x0 [0044.962] GetLastError () returned 0x0 [0044.962] SetLastError (dwErrCode=0x0) [0044.962] OpenThemeData () returned 0x690000 [0044.962] GetSystemMetrics (nIndex=32) returned 4 [0044.962] GetSystemMetrics (nIndex=33) returned 4 [0044.962] CloseThemeData () returned 0x0 [0044.963] capGetDriverDescriptionA () returned 0x0 [0044.964] GetLastError () returned 0x0 [0044.964] SetLastError (dwErrCode=0x0) [0044.964] OpenThemeData () returned 0x6a0000 [0044.964] GetSystemMetrics (nIndex=32) returned 4 [0044.964] GetSystemMetrics (nIndex=33) returned 4 [0044.964] CloseThemeData () returned 0x0 [0044.965] capGetDriverDescriptionA () returned 0x0 [0044.965] GetLastError () returned 0x0 [0044.965] SetLastError (dwErrCode=0x0) [0044.965] OpenThemeData () returned 0x6b0000 [0044.966] GetSystemMetrics (nIndex=32) returned 4 [0044.966] GetSystemMetrics (nIndex=33) returned 4 [0044.966] CloseThemeData () returned 0x0 [0044.966] capGetDriverDescriptionA () returned 0x0 [0044.967] GetLastError () returned 0x0 [0044.967] SetLastError (dwErrCode=0x0) [0044.967] OpenThemeData () returned 0x6c0000 [0044.967] GetSystemMetrics (nIndex=32) returned 4 [0044.967] GetSystemMetrics (nIndex=33) returned 4 [0044.967] CloseThemeData () returned 0x0 [0044.968] capGetDriverDescriptionA () returned 0x0 [0044.968] GetLastError () returned 0x0 [0044.968] SetLastError (dwErrCode=0x0) [0044.968] OpenThemeData () returned 0x6d0000 [0044.969] GetSystemMetrics (nIndex=32) returned 4 [0044.969] GetSystemMetrics (nIndex=33) returned 4 [0044.969] CloseThemeData () returned 0x0 [0044.969] capGetDriverDescriptionA () returned 0x0 [0044.970] GetLastError () returned 0x0 [0044.970] SetLastError (dwErrCode=0x0) [0044.970] OpenThemeData () returned 0x6e0000 [0044.970] GetSystemMetrics (nIndex=32) returned 4 [0044.970] GetSystemMetrics (nIndex=33) returned 4 [0044.970] CloseThemeData () returned 0x0 [0044.970] capGetDriverDescriptionA () returned 0x0 [0044.971] GetLastError () returned 0x0 [0044.971] SetLastError (dwErrCode=0x0) [0044.971] OpenThemeData () returned 0x6f0000 [0044.971] GetSystemMetrics (nIndex=32) returned 4 [0044.971] GetSystemMetrics (nIndex=33) returned 4 [0044.971] CloseThemeData () returned 0x0 [0044.972] capGetDriverDescriptionA () returned 0x0 [0044.972] GetLastError () returned 0x0 [0044.972] SetLastError (dwErrCode=0x0) [0044.972] OpenThemeData () returned 0x700000 [0044.973] GetSystemMetrics (nIndex=32) returned 4 [0044.973] GetSystemMetrics (nIndex=33) returned 4 [0044.973] CloseThemeData () returned 0x0 [0044.973] capGetDriverDescriptionA () returned 0x0 [0044.974] GetLastError () returned 0x0 [0044.974] SetLastError (dwErrCode=0x0) [0044.974] OpenThemeData () returned 0x710000 [0044.975] GetSystemMetrics (nIndex=32) returned 4 [0044.975] GetSystemMetrics (nIndex=33) returned 4 [0044.975] CloseThemeData () returned 0x0 [0044.975] capGetDriverDescriptionA () returned 0x0 [0044.976] GetLastError () returned 0x0 [0044.976] SetLastError (dwErrCode=0x0) [0044.976] OpenThemeData () returned 0x720000 [0044.976] GetSystemMetrics (nIndex=32) returned 4 [0044.976] GetSystemMetrics (nIndex=33) returned 4 [0044.976] CloseThemeData () returned 0x0 [0044.977] capGetDriverDescriptionA () returned 0x0 [0044.977] GetLastError () returned 0x0 [0044.977] SetLastError (dwErrCode=0x0) [0044.977] OpenThemeData () returned 0x730000 [0044.978] GetSystemMetrics (nIndex=32) returned 4 [0044.978] GetSystemMetrics (nIndex=33) returned 4 [0044.978] CloseThemeData () returned 0x0 [0044.978] capGetDriverDescriptionA () returned 0x0 [0044.978] GetLastError () returned 0x0 [0044.979] SetLastError (dwErrCode=0x0) [0044.979] OpenThemeData () returned 0x740000 [0044.979] GetSystemMetrics (nIndex=32) returned 4 [0044.979] GetSystemMetrics (nIndex=33) returned 4 [0044.979] CloseThemeData () returned 0x0 [0044.979] capGetDriverDescriptionA () returned 0x0 [0044.980] GetLastError () returned 0x0 [0044.980] SetLastError (dwErrCode=0x0) [0044.980] OpenThemeData () returned 0x750000 [0044.980] GetSystemMetrics (nIndex=32) returned 4 [0044.980] GetSystemMetrics (nIndex=33) returned 4 [0044.980] CloseThemeData () returned 0x0 [0044.981] capGetDriverDescriptionA () returned 0x0 [0044.981] GetLastError () returned 0x0 [0044.981] SetLastError (dwErrCode=0x0) [0044.981] OpenThemeData () returned 0x760000 [0044.982] GetSystemMetrics (nIndex=32) returned 4 [0044.982] GetSystemMetrics (nIndex=33) returned 4 [0044.982] CloseThemeData () returned 0x0 [0044.982] capGetDriverDescriptionA () returned 0x0 [0044.983] GetLastError () returned 0x0 [0044.983] SetLastError (dwErrCode=0x0) [0044.983] OpenThemeData () returned 0x770000 [0044.983] GetSystemMetrics (nIndex=32) returned 4 [0044.983] GetSystemMetrics (nIndex=33) returned 4 [0044.983] CloseThemeData () returned 0x0 [0044.984] capGetDriverDescriptionA () returned 0x0 [0044.984] GetLastError () returned 0x0 [0044.984] SetLastError (dwErrCode=0x0) [0044.984] OpenThemeData () returned 0x780000 [0044.985] GetSystemMetrics (nIndex=32) returned 4 [0044.985] GetSystemMetrics (nIndex=33) returned 4 [0044.985] CloseThemeData () returned 0x0 [0044.985] capGetDriverDescriptionA () returned 0x0 [0044.986] GetLastError () returned 0x0 [0044.986] SetLastError (dwErrCode=0x0) [0044.986] OpenThemeData () returned 0x790000 [0044.986] GetSystemMetrics (nIndex=32) returned 4 [0044.986] GetSystemMetrics (nIndex=33) returned 4 [0044.986] CloseThemeData () returned 0x0 [0044.987] capGetDriverDescriptionA () returned 0x0 [0044.988] GetLastError () returned 0x0 [0044.988] SetLastError (dwErrCode=0x0) [0044.988] OpenThemeData () returned 0x7a0000 [0044.988] GetSystemMetrics (nIndex=32) returned 4 [0044.988] GetSystemMetrics (nIndex=33) returned 4 [0044.988] CloseThemeData () returned 0x0 [0044.989] capGetDriverDescriptionA () returned 0x0 [0044.989] GetLastError () returned 0x0 [0044.989] SetLastError (dwErrCode=0x0) [0044.989] OpenThemeData () returned 0x7b0000 [0044.990] GetSystemMetrics (nIndex=32) returned 4 [0044.990] GetSystemMetrics (nIndex=33) returned 4 [0044.990] CloseThemeData () returned 0x0 [0044.990] capGetDriverDescriptionA () returned 0x0 [0044.991] GetLastError () returned 0x0 [0044.991] SetLastError (dwErrCode=0x0) [0044.991] OpenThemeData () returned 0x7c0000 [0044.991] GetSystemMetrics (nIndex=32) returned 4 [0044.991] GetSystemMetrics (nIndex=33) returned 4 [0044.991] CloseThemeData () returned 0x0 [0044.992] capGetDriverDescriptionA () returned 0x0 [0044.992] GetLastError () returned 0x0 [0044.992] SetLastError (dwErrCode=0x0) [0044.992] OpenThemeData () returned 0x7d0000 [0044.993] GetSystemMetrics (nIndex=32) returned 4 [0044.993] GetSystemMetrics (nIndex=33) returned 4 [0044.993] CloseThemeData () returned 0x0 [0044.993] capGetDriverDescriptionA () returned 0x0 [0044.994] GetLastError () returned 0x0 [0044.994] SetLastError (dwErrCode=0x0) [0044.994] OpenThemeData () returned 0x7e0000 [0044.994] GetSystemMetrics (nIndex=32) returned 4 [0044.994] GetSystemMetrics (nIndex=33) returned 4 [0044.994] CloseThemeData () returned 0x0 [0044.995] capGetDriverDescriptionA () returned 0x0 [0044.995] GetLastError () returned 0x0 [0044.995] SetLastError (dwErrCode=0x0) [0044.995] OpenThemeData () returned 0x7f0000 [0044.996] GetSystemMetrics (nIndex=32) returned 4 [0044.996] GetSystemMetrics (nIndex=33) returned 4 [0044.996] CloseThemeData () returned 0x0 [0044.996] capGetDriverDescriptionA () returned 0x0 [0044.997] GetLastError () returned 0x0 [0044.997] SetLastError (dwErrCode=0x0) [0044.997] OpenThemeData () returned 0x800000 [0044.997] GetSystemMetrics (nIndex=32) returned 4 [0044.997] GetSystemMetrics (nIndex=33) returned 4 [0044.997] CloseThemeData () returned 0x0 [0044.997] capGetDriverDescriptionA () returned 0x0 [0044.998] GetLastError () returned 0x0 [0044.998] SetLastError (dwErrCode=0x0) [0044.998] OpenThemeData () returned 0x810000 [0044.998] GetSystemMetrics (nIndex=32) returned 4 [0044.998] GetSystemMetrics (nIndex=33) returned 4 [0044.999] CloseThemeData () returned 0x0 [0044.999] capGetDriverDescriptionA () returned 0x0 [0044.999] GetLastError () returned 0x0 [0044.999] SetLastError (dwErrCode=0x0) [0044.999] OpenThemeData () returned 0x820000 [0045.000] GetSystemMetrics (nIndex=32) returned 4 [0045.000] GetSystemMetrics (nIndex=33) returned 4 [0045.000] CloseThemeData () returned 0x0 [0045.000] capGetDriverDescriptionA () returned 0x0 [0045.001] GetLastError () returned 0x0 [0045.001] SetLastError (dwErrCode=0x0) [0045.001] OpenThemeData () returned 0x830000 [0045.001] GetSystemMetrics (nIndex=32) returned 4 [0045.001] GetSystemMetrics (nIndex=33) returned 4 [0045.001] CloseThemeData () returned 0x0 [0045.002] capGetDriverDescriptionA () returned 0x0 [0045.002] GetLastError () returned 0x0 [0045.002] SetLastError (dwErrCode=0x0) [0045.002] OpenThemeData () returned 0x840000 [0045.003] GetSystemMetrics (nIndex=32) returned 4 [0045.003] GetSystemMetrics (nIndex=33) returned 4 [0045.003] CloseThemeData () returned 0x0 [0045.003] capGetDriverDescriptionA () returned 0x0 [0045.004] GetLastError () returned 0x0 [0045.004] SetLastError (dwErrCode=0x0) [0045.004] OpenThemeData () returned 0x850000 [0045.004] GetSystemMetrics (nIndex=32) returned 4 [0045.004] GetSystemMetrics (nIndex=33) returned 4 [0045.004] CloseThemeData () returned 0x0 [0045.005] capGetDriverDescriptionA () returned 0x0 [0045.006] GetLastError () returned 0x0 [0045.006] SetLastError (dwErrCode=0x0) [0045.006] OpenThemeData () returned 0x860000 [0045.006] GetSystemMetrics (nIndex=32) returned 4 [0045.006] GetSystemMetrics (nIndex=33) returned 4 [0045.006] CloseThemeData () returned 0x0 [0045.007] capGetDriverDescriptionA () returned 0x0 [0045.007] GetLastError () returned 0x0 [0045.007] SetLastError (dwErrCode=0x0) [0045.007] OpenThemeData () returned 0x870000 [0045.008] GetSystemMetrics (nIndex=32) returned 4 [0045.008] GetSystemMetrics (nIndex=33) returned 4 [0045.008] CloseThemeData () returned 0x0 [0045.008] capGetDriverDescriptionA () returned 0x0 [0045.009] GetLastError () returned 0x0 [0045.009] SetLastError (dwErrCode=0x0) [0045.009] OpenThemeData () returned 0x880000 [0045.009] GetSystemMetrics (nIndex=32) returned 4 [0045.009] GetSystemMetrics (nIndex=33) returned 4 [0045.009] CloseThemeData () returned 0x0 [0045.010] capGetDriverDescriptionA () returned 0x0 [0045.010] GetLastError () returned 0x0 [0045.010] SetLastError (dwErrCode=0x0) [0045.010] OpenThemeData () returned 0x890000 [0045.011] GetSystemMetrics (nIndex=32) returned 4 [0045.011] GetSystemMetrics (nIndex=33) returned 4 [0045.011] CloseThemeData () returned 0x0 [0045.011] capGetDriverDescriptionA () returned 0x0 [0045.012] GetLastError () returned 0x0 [0045.012] SetLastError (dwErrCode=0x0) [0045.012] OpenThemeData () returned 0x8a0000 [0045.013] GetSystemMetrics (nIndex=32) returned 4 [0045.013] GetSystemMetrics (nIndex=33) returned 4 [0045.013] CloseThemeData () returned 0x0 [0045.013] capGetDriverDescriptionA () returned 0x0 [0045.014] GetLastError () returned 0x0 [0045.014] SetLastError (dwErrCode=0x0) [0045.014] OpenThemeData () returned 0x8b0000 [0045.015] GetSystemMetrics (nIndex=32) returned 4 [0045.015] GetSystemMetrics (nIndex=33) returned 4 [0045.015] CloseThemeData () returned 0x0 [0045.016] capGetDriverDescriptionA () returned 0x0 [0045.016] GetLastError () returned 0x0 [0045.016] SetLastError (dwErrCode=0x0) [0045.016] OpenThemeData () returned 0x8c0000 [0045.017] GetSystemMetrics (nIndex=32) returned 4 [0045.017] GetSystemMetrics (nIndex=33) returned 4 [0045.017] CloseThemeData () returned 0x0 [0045.017] capGetDriverDescriptionA () returned 0x0 [0045.018] GetLastError () returned 0x0 [0045.018] SetLastError (dwErrCode=0x0) [0045.018] OpenThemeData () returned 0x8d0000 [0045.018] GetSystemMetrics (nIndex=32) returned 4 [0045.018] GetSystemMetrics (nIndex=33) returned 4 [0045.018] CloseThemeData () returned 0x0 [0045.019] capGetDriverDescriptionA () returned 0x0 [0045.019] GetLastError () returned 0x0 [0045.019] SetLastError (dwErrCode=0x0) [0045.019] OpenThemeData () returned 0x8e0000 [0045.020] GetSystemMetrics (nIndex=32) returned 4 [0045.020] GetSystemMetrics (nIndex=33) returned 4 [0045.020] CloseThemeData () returned 0x0 [0045.020] capGetDriverDescriptionA () returned 0x0 [0045.021] GetLastError () returned 0x0 [0045.021] SetLastError (dwErrCode=0x0) [0045.021] OpenThemeData () returned 0x8f0000 [0045.021] GetSystemMetrics (nIndex=32) returned 4 [0045.021] GetSystemMetrics (nIndex=33) returned 4 [0045.021] CloseThemeData () returned 0x0 [0045.022] capGetDriverDescriptionA () returned 0x0 [0045.022] GetLastError () returned 0x0 [0045.022] SetLastError (dwErrCode=0x0) [0045.022] OpenThemeData () returned 0x900000 [0045.023] GetSystemMetrics (nIndex=32) returned 4 [0045.023] GetSystemMetrics (nIndex=33) returned 4 [0045.023] CloseThemeData () returned 0x0 [0045.023] capGetDriverDescriptionA () returned 0x0 [0045.024] GetLastError () returned 0x0 [0045.024] SetLastError (dwErrCode=0x0) [0045.024] OpenThemeData () returned 0x910000 [0045.024] GetSystemMetrics (nIndex=32) returned 4 [0045.024] GetSystemMetrics (nIndex=33) returned 4 [0045.024] CloseThemeData () returned 0x0 [0045.025] capGetDriverDescriptionA () returned 0x0 [0045.025] GetLastError () returned 0x0 [0045.025] SetLastError (dwErrCode=0x0) [0045.025] OpenThemeData () returned 0x920000 [0045.026] GetSystemMetrics (nIndex=32) returned 4 [0045.026] GetSystemMetrics (nIndex=33) returned 4 [0045.026] CloseThemeData () returned 0x0 [0045.026] capGetDriverDescriptionA () returned 0x0 [0045.027] GetLastError () returned 0x0 [0045.027] SetLastError (dwErrCode=0x0) [0045.027] OpenThemeData () returned 0x930000 [0045.027] GetSystemMetrics (nIndex=32) returned 4 [0045.027] GetSystemMetrics (nIndex=33) returned 4 [0045.027] CloseThemeData () returned 0x0 [0045.027] capGetDriverDescriptionA () returned 0x0 [0045.028] GetLastError () returned 0x0 [0045.028] SetLastError (dwErrCode=0x0) [0045.028] OpenThemeData () returned 0x940000 [0045.029] GetSystemMetrics (nIndex=32) returned 4 [0045.029] GetSystemMetrics (nIndex=33) returned 4 [0045.029] CloseThemeData () returned 0x0 [0045.029] capGetDriverDescriptionA () returned 0x0 [0045.029] GetLastError () returned 0x0 [0045.030] SetLastError (dwErrCode=0x0) [0045.030] OpenThemeData () returned 0x950000 [0045.030] GetSystemMetrics (nIndex=32) returned 4 [0045.030] GetSystemMetrics (nIndex=33) returned 4 [0045.030] CloseThemeData () returned 0x0 [0045.030] capGetDriverDescriptionA () returned 0x0 [0045.031] GetLastError () returned 0x0 [0045.031] SetLastError (dwErrCode=0x0) [0045.031] OpenThemeData () returned 0x960000 [0045.031] GetSystemMetrics (nIndex=32) returned 4 [0045.031] GetSystemMetrics (nIndex=33) returned 4 [0045.031] CloseThemeData () returned 0x0 [0045.032] capGetDriverDescriptionA () returned 0x0 [0045.032] GetLastError () returned 0x0 [0045.032] SetLastError (dwErrCode=0x0) [0045.032] OpenThemeData () returned 0x970000 [0045.033] GetSystemMetrics (nIndex=32) returned 4 [0045.033] GetSystemMetrics (nIndex=33) returned 4 [0045.033] CloseThemeData () returned 0x0 [0045.033] capGetDriverDescriptionA () returned 0x0 [0045.034] GetLastError () returned 0x0 [0045.034] SetLastError (dwErrCode=0x0) [0045.034] OpenThemeData () returned 0x980000 [0045.034] GetSystemMetrics (nIndex=32) returned 4 [0045.034] GetSystemMetrics (nIndex=33) returned 4 [0045.034] CloseThemeData () returned 0x0 [0045.035] capGetDriverDescriptionA () returned 0x0 [0045.035] GetLastError () returned 0x0 [0045.035] SetLastError (dwErrCode=0x0) [0045.035] OpenThemeData () returned 0x990000 [0045.036] GetSystemMetrics (nIndex=32) returned 4 [0045.036] GetSystemMetrics (nIndex=33) returned 4 [0045.036] CloseThemeData () returned 0x0 [0045.037] capGetDriverDescriptionA () returned 0x0 [0045.038] GetLastError () returned 0x0 [0045.038] SetLastError (dwErrCode=0x0) [0045.038] OpenThemeData () returned 0x9a0000 [0045.039] GetSystemMetrics (nIndex=32) returned 4 [0045.039] GetSystemMetrics (nIndex=33) returned 4 [0045.039] CloseThemeData () returned 0x0 [0045.039] capGetDriverDescriptionA () returned 0x0 [0045.040] GetLastError () returned 0x0 [0045.040] SetLastError (dwErrCode=0x0) [0045.040] OpenThemeData () returned 0x9b0000 [0045.040] GetSystemMetrics (nIndex=32) returned 4 [0045.040] GetSystemMetrics (nIndex=33) returned 4 [0045.040] CloseThemeData () returned 0x0 [0045.041] capGetDriverDescriptionA () returned 0x0 [0045.041] GetLastError () returned 0x0 [0045.041] SetLastError (dwErrCode=0x0) [0045.041] OpenThemeData () returned 0x9c0000 [0045.042] GetSystemMetrics (nIndex=32) returned 4 [0045.042] GetSystemMetrics (nIndex=33) returned 4 [0045.042] CloseThemeData () returned 0x0 [0045.042] capGetDriverDescriptionA () returned 0x0 [0045.043] GetLastError () returned 0x0 [0045.043] SetLastError (dwErrCode=0x0) [0045.043] OpenThemeData () returned 0x9d0000 [0045.043] GetSystemMetrics (nIndex=32) returned 4 [0045.043] GetSystemMetrics (nIndex=33) returned 4 [0045.043] CloseThemeData () returned 0x0 [0045.043] capGetDriverDescriptionA () returned 0x0 [0045.044] GetLastError () returned 0x0 [0045.044] SetLastError (dwErrCode=0x0) [0045.044] OpenThemeData () returned 0x9e0000 [0045.045] GetSystemMetrics (nIndex=32) returned 4 [0045.045] GetSystemMetrics (nIndex=33) returned 4 [0045.045] CloseThemeData () returned 0x0 [0045.045] capGetDriverDescriptionA () returned 0x0 [0045.045] GetLastError () returned 0x0 [0045.045] SetLastError (dwErrCode=0x0) [0045.045] OpenThemeData () returned 0x9f0000 [0045.046] GetSystemMetrics (nIndex=32) returned 4 [0045.046] GetSystemMetrics (nIndex=33) returned 4 [0045.046] CloseThemeData () returned 0x0 [0045.046] capGetDriverDescriptionA () returned 0x0 [0045.047] GetLastError () returned 0x0 [0045.047] SetLastError (dwErrCode=0x0) [0045.047] OpenThemeData () returned 0xa00000 [0045.047] GetSystemMetrics (nIndex=32) returned 4 [0045.047] GetSystemMetrics (nIndex=33) returned 4 [0045.047] CloseThemeData () returned 0x0 [0045.048] capGetDriverDescriptionA () returned 0x0 [0045.048] GetLastError () returned 0x0 [0045.048] SetLastError (dwErrCode=0x0) [0045.048] OpenThemeData () returned 0xa10000 [0045.049] GetSystemMetrics (nIndex=32) returned 4 [0045.049] GetSystemMetrics (nIndex=33) returned 4 [0045.049] CloseThemeData () returned 0x0 [0045.049] capGetDriverDescriptionA () returned 0x0 [0045.050] GetLastError () returned 0x0 [0045.050] SetLastError (dwErrCode=0x0) [0045.050] OpenThemeData () returned 0xa20000 [0045.050] GetSystemMetrics (nIndex=32) returned 4 [0045.050] GetSystemMetrics (nIndex=33) returned 4 [0045.050] CloseThemeData () returned 0x0 [0045.051] capGetDriverDescriptionA () returned 0x0 [0045.051] GetLastError () returned 0x0 [0045.051] SetLastError (dwErrCode=0x0) [0045.051] OpenThemeData () returned 0xa30000 [0045.052] GetSystemMetrics (nIndex=32) returned 4 [0045.052] GetSystemMetrics (nIndex=33) returned 4 [0045.052] CloseThemeData () returned 0x0 [0045.054] capGetDriverDescriptionA () returned 0x0 [0045.055] GetLastError () returned 0x0 [0045.055] SetLastError (dwErrCode=0x0) [0045.055] OpenThemeData () returned 0xa40000 [0045.055] GetSystemMetrics (nIndex=32) returned 4 [0045.055] GetSystemMetrics (nIndex=33) returned 4 [0045.055] CloseThemeData () returned 0x0 [0045.056] capGetDriverDescriptionA () returned 0x0 [0045.056] GetLastError () returned 0x0 [0045.056] SetLastError (dwErrCode=0x0) [0045.056] OpenThemeData () returned 0xa50000 [0045.057] GetSystemMetrics (nIndex=32) returned 4 [0045.057] GetSystemMetrics (nIndex=33) returned 4 [0045.057] CloseThemeData () returned 0x0 [0045.057] capGetDriverDescriptionA () returned 0x0 [0045.058] GetLastError () returned 0x0 [0045.058] SetLastError (dwErrCode=0x0) [0045.058] OpenThemeData () returned 0xa60000 [0045.058] GetSystemMetrics (nIndex=32) returned 4 [0045.058] GetSystemMetrics (nIndex=33) returned 4 [0045.058] CloseThemeData () returned 0x0 [0045.058] capGetDriverDescriptionA () returned 0x0 [0045.059] GetLastError () returned 0x0 [0045.059] SetLastError (dwErrCode=0x0) [0045.059] OpenThemeData () returned 0xa70000 [0045.060] GetSystemMetrics (nIndex=32) returned 4 [0045.060] GetSystemMetrics (nIndex=33) returned 4 [0045.060] CloseThemeData () returned 0x0 [0045.060] capGetDriverDescriptionA () returned 0x0 [0045.060] GetLastError () returned 0x0 [0045.061] SetLastError (dwErrCode=0x0) [0045.061] OpenThemeData () returned 0xa80000 [0045.061] GetSystemMetrics (nIndex=32) returned 4 [0045.061] GetSystemMetrics (nIndex=33) returned 4 [0045.061] CloseThemeData () returned 0x0 [0045.061] capGetDriverDescriptionA () returned 0x0 [0045.062] GetLastError () returned 0x0 [0045.062] SetLastError (dwErrCode=0x0) [0045.062] OpenThemeData () returned 0xa90000 [0045.062] GetSystemMetrics (nIndex=32) returned 4 [0045.062] GetSystemMetrics (nIndex=33) returned 4 [0045.062] CloseThemeData () returned 0x0 [0045.063] capGetDriverDescriptionA () returned 0x0 [0045.063] GetLastError () returned 0x0 [0045.063] SetLastError (dwErrCode=0x0) [0045.063] OpenThemeData () returned 0xaa0000 [0045.064] GetSystemMetrics (nIndex=32) returned 4 [0045.064] GetSystemMetrics (nIndex=33) returned 4 [0045.064] CloseThemeData () returned 0x0 [0045.064] capGetDriverDescriptionA () returned 0x0 [0045.065] GetLastError () returned 0x0 [0045.065] SetLastError (dwErrCode=0x0) [0045.065] OpenThemeData () returned 0xab0000 [0045.065] GetSystemMetrics (nIndex=32) returned 4 [0045.065] GetSystemMetrics (nIndex=33) returned 4 [0045.065] CloseThemeData () returned 0x0 [0045.066] capGetDriverDescriptionA () returned 0x0 [0045.066] GetLastError () returned 0x0 [0045.066] SetLastError (dwErrCode=0x0) [0045.066] OpenThemeData () returned 0xac0000 [0045.067] GetSystemMetrics (nIndex=32) returned 4 [0045.067] GetSystemMetrics (nIndex=33) returned 4 [0045.067] CloseThemeData () returned 0x0 [0045.067] capGetDriverDescriptionA () returned 0x0 [0045.068] GetLastError () returned 0x0 [0045.068] SetLastError (dwErrCode=0x0) [0045.068] OpenThemeData () returned 0xad0000 [0045.069] GetSystemMetrics (nIndex=32) returned 4 [0045.069] GetSystemMetrics (nIndex=33) returned 4 [0045.069] CloseThemeData () returned 0x0 [0045.069] capGetDriverDescriptionA () returned 0x0 [0045.069] GetLastError () returned 0x0 [0045.070] SetLastError (dwErrCode=0x0) [0045.070] OpenThemeData () returned 0xae0000 [0045.070] GetSystemMetrics (nIndex=32) returned 4 [0045.070] GetSystemMetrics (nIndex=33) returned 4 [0045.070] CloseThemeData () returned 0x0 [0045.070] capGetDriverDescriptionA () returned 0x0 [0045.071] GetLastError () returned 0x0 [0045.071] SetLastError (dwErrCode=0x0) [0045.071] OpenThemeData () returned 0xaf0000 [0045.071] GetSystemMetrics (nIndex=32) returned 4 [0045.071] GetSystemMetrics (nIndex=33) returned 4 [0045.071] CloseThemeData () returned 0x0 [0045.072] capGetDriverDescriptionA () returned 0x0 [0045.072] GetLastError () returned 0x0 [0045.072] SetLastError (dwErrCode=0x0) [0045.072] OpenThemeData () returned 0xb00000 [0045.073] GetSystemMetrics (nIndex=32) returned 4 [0045.073] GetSystemMetrics (nIndex=33) returned 4 [0045.073] CloseThemeData () returned 0x0 [0045.073] capGetDriverDescriptionA () returned 0x0 [0045.074] GetLastError () returned 0x0 [0045.074] SetLastError (dwErrCode=0x0) [0045.074] OpenThemeData () returned 0xb10000 [0045.074] GetSystemMetrics (nIndex=32) returned 4 [0045.074] GetSystemMetrics (nIndex=33) returned 4 [0045.074] CloseThemeData () returned 0x0 [0045.075] capGetDriverDescriptionA () returned 0x0 [0045.075] GetLastError () returned 0x0 [0045.075] SetLastError (dwErrCode=0x0) [0045.075] OpenThemeData () returned 0xb20000 [0045.076] GetSystemMetrics (nIndex=32) returned 4 [0045.076] GetSystemMetrics (nIndex=33) returned 4 [0045.076] CloseThemeData () returned 0x0 [0045.076] capGetDriverDescriptionA () returned 0x0 [0045.077] GetLastError () returned 0x0 [0045.077] SetLastError (dwErrCode=0x0) [0045.077] OpenThemeData () returned 0xb30000 [0045.077] GetSystemMetrics (nIndex=32) returned 4 [0045.077] GetSystemMetrics (nIndex=33) returned 4 [0045.077] CloseThemeData () returned 0x0 [0045.078] capGetDriverDescriptionA () returned 0x0 [0045.078] GetLastError () returned 0x0 [0045.078] SetLastError (dwErrCode=0x0) [0045.078] OpenThemeData () returned 0xb40000 [0045.080] GetSystemMetrics (nIndex=32) returned 4 [0045.080] GetSystemMetrics (nIndex=33) returned 4 [0045.080] CloseThemeData () returned 0x0 [0045.081] capGetDriverDescriptionA () returned 0x0 [0045.081] GetLastError () returned 0x0 [0045.081] SetLastError (dwErrCode=0x0) [0045.081] OpenThemeData () returned 0xb50000 [0045.082] GetSystemMetrics (nIndex=32) returned 4 [0045.082] GetSystemMetrics (nIndex=33) returned 4 [0045.082] CloseThemeData () returned 0x0 [0045.082] capGetDriverDescriptionA () returned 0x0 [0045.083] GetLastError () returned 0x0 [0045.083] SetLastError (dwErrCode=0x0) [0045.083] OpenThemeData () returned 0xb60000 [0045.084] GetSystemMetrics (nIndex=32) returned 4 [0045.084] GetSystemMetrics (nIndex=33) returned 4 [0045.084] CloseThemeData () returned 0x0 [0045.084] capGetDriverDescriptionA () returned 0x0 [0045.085] GetLastError () returned 0x0 [0045.085] SetLastError (dwErrCode=0x0) [0045.085] OpenThemeData () returned 0xb70000 [0045.085] GetSystemMetrics (nIndex=32) returned 4 [0045.085] GetSystemMetrics (nIndex=33) returned 4 [0045.085] CloseThemeData () returned 0x0 [0045.085] capGetDriverDescriptionA () returned 0x0 [0045.086] GetLastError () returned 0x0 [0045.086] SetLastError (dwErrCode=0x0) [0045.086] OpenThemeData () returned 0xb80000 [0045.086] GetSystemMetrics (nIndex=32) returned 4 [0045.086] GetSystemMetrics (nIndex=33) returned 4 [0045.086] CloseThemeData () returned 0x0 [0045.087] capGetDriverDescriptionA () returned 0x0 [0045.087] GetLastError () returned 0x0 [0045.087] SetLastError (dwErrCode=0x0) [0045.087] OpenThemeData () returned 0xb90000 [0045.088] GetSystemMetrics (nIndex=32) returned 4 [0045.088] GetSystemMetrics (nIndex=33) returned 4 [0045.088] CloseThemeData () returned 0x0 [0045.089] capGetDriverDescriptionA () returned 0x0 [0045.090] GetLastError () returned 0x0 [0045.090] SetLastError (dwErrCode=0x0) [0045.090] OpenThemeData () returned 0xba0000 [0045.090] GetSystemMetrics (nIndex=32) returned 4 [0045.090] GetSystemMetrics (nIndex=33) returned 4 [0045.090] CloseThemeData () returned 0x0 [0045.091] capGetDriverDescriptionA () returned 0x0 [0045.091] GetLastError () returned 0x0 [0045.091] SetLastError (dwErrCode=0x0) [0045.091] OpenThemeData () returned 0xbb0000 [0045.092] GetSystemMetrics (nIndex=32) returned 4 [0045.092] GetSystemMetrics (nIndex=33) returned 4 [0045.092] CloseThemeData () returned 0x0 [0045.092] capGetDriverDescriptionA () returned 0x0 [0045.093] GetLastError () returned 0x0 [0045.093] SetLastError (dwErrCode=0x0) [0045.093] OpenThemeData () returned 0xbc0000 [0045.093] GetSystemMetrics (nIndex=32) returned 4 [0045.093] GetSystemMetrics (nIndex=33) returned 4 [0045.093] CloseThemeData () returned 0x0 [0045.093] capGetDriverDescriptionA () returned 0x0 [0045.094] GetLastError () returned 0x0 [0045.094] SetLastError (dwErrCode=0x0) [0045.094] OpenThemeData () returned 0xbd0000 [0045.094] GetSystemMetrics (nIndex=32) returned 4 [0045.095] GetSystemMetrics (nIndex=33) returned 4 [0045.095] CloseThemeData () returned 0x0 [0045.095] capGetDriverDescriptionA () returned 0x0 [0045.095] GetLastError () returned 0x0 [0045.095] SetLastError (dwErrCode=0x0) [0045.095] OpenThemeData () returned 0xbe0000 [0045.096] GetSystemMetrics (nIndex=32) returned 4 [0045.096] GetSystemMetrics (nIndex=33) returned 4 [0045.096] CloseThemeData () returned 0x0 [0045.096] capGetDriverDescriptionA () returned 0x0 [0045.097] GetLastError () returned 0x0 [0045.097] SetLastError (dwErrCode=0x0) [0045.097] OpenThemeData () returned 0xbf0000 [0045.097] GetSystemMetrics (nIndex=32) returned 4 [0045.097] GetSystemMetrics (nIndex=33) returned 4 [0045.097] CloseThemeData () returned 0x0 [0045.098] capGetDriverDescriptionA () returned 0x0 [0045.098] GetLastError () returned 0x0 [0045.098] SetLastError (dwErrCode=0x0) [0045.098] OpenThemeData () returned 0xc00000 [0045.099] GetSystemMetrics (nIndex=32) returned 4 [0045.099] GetSystemMetrics (nIndex=33) returned 4 [0045.099] CloseThemeData () returned 0x0 [0045.100] capGetDriverDescriptionA () returned 0x0 [0045.100] GetLastError () returned 0x0 [0045.100] SetLastError (dwErrCode=0x0) [0045.100] OpenThemeData () returned 0xc10000 [0045.101] GetSystemMetrics (nIndex=32) returned 4 [0045.101] GetSystemMetrics (nIndex=33) returned 4 [0045.101] CloseThemeData () returned 0x0 [0045.101] capGetDriverDescriptionA () returned 0x0 [0045.102] GetLastError () returned 0x0 [0045.102] SetLastError (dwErrCode=0x0) [0045.102] OpenThemeData () returned 0xc20000 [0045.102] GetSystemMetrics (nIndex=32) returned 4 [0045.102] GetSystemMetrics (nIndex=33) returned 4 [0045.102] CloseThemeData () returned 0x0 [0045.103] capGetDriverDescriptionA () returned 0x0 [0045.103] GetLastError () returned 0x0 [0045.103] SetLastError (dwErrCode=0x0) [0045.103] OpenThemeData () returned 0xc30000 [0045.104] GetSystemMetrics (nIndex=32) returned 4 [0045.104] GetSystemMetrics (nIndex=33) returned 4 [0045.104] CloseThemeData () returned 0x0 [0045.104] capGetDriverDescriptionA () returned 0x0 [0045.105] GetLastError () returned 0x0 [0045.105] SetLastError (dwErrCode=0x0) [0045.105] OpenThemeData () returned 0xc40000 [0045.105] GetSystemMetrics (nIndex=32) returned 4 [0045.105] GetSystemMetrics (nIndex=33) returned 4 [0045.105] CloseThemeData () returned 0x0 [0045.105] capGetDriverDescriptionA () returned 0x0 [0045.106] GetLastError () returned 0x0 [0045.106] SetLastError (dwErrCode=0x0) [0045.106] OpenThemeData () returned 0xc50000 [0045.106] GetSystemMetrics (nIndex=32) returned 4 [0045.106] GetSystemMetrics (nIndex=33) returned 4 [0045.106] CloseThemeData () returned 0x0 [0045.107] capGetDriverDescriptionA () returned 0x0 [0045.107] GetLastError () returned 0x0 [0045.107] SetLastError (dwErrCode=0x0) [0045.107] OpenThemeData () returned 0xc60000 [0045.108] GetSystemMetrics (nIndex=32) returned 4 [0045.108] GetSystemMetrics (nIndex=33) returned 4 [0045.108] CloseThemeData () returned 0x0 [0045.108] capGetDriverDescriptionA () returned 0x0 [0045.109] GetLastError () returned 0x0 [0045.109] SetLastError (dwErrCode=0x0) [0045.109] OpenThemeData () returned 0xc70000 [0045.109] GetSystemMetrics (nIndex=32) returned 4 [0045.109] GetSystemMetrics (nIndex=33) returned 4 [0045.109] CloseThemeData () returned 0x0 [0045.110] capGetDriverDescriptionA () returned 0x0 [0045.110] GetLastError () returned 0x0 [0045.110] SetLastError (dwErrCode=0x0) [0045.110] OpenThemeData () returned 0xc80000 [0045.111] GetSystemMetrics (nIndex=32) returned 4 [0045.111] GetSystemMetrics (nIndex=33) returned 4 [0045.111] CloseThemeData () returned 0x0 [0045.111] capGetDriverDescriptionA () returned 0x0 [0045.112] GetLastError () returned 0x0 [0045.112] SetLastError (dwErrCode=0x0) [0045.112] OpenThemeData () returned 0xc90000 [0045.112] GetSystemMetrics (nIndex=32) returned 4 [0045.112] GetSystemMetrics (nIndex=33) returned 4 [0045.112] CloseThemeData () returned 0x0 [0045.113] capGetDriverDescriptionA () returned 0x0 [0045.113] GetLastError () returned 0x0 [0045.113] SetLastError (dwErrCode=0x0) [0045.113] OpenThemeData () returned 0xca0000 [0045.114] GetSystemMetrics (nIndex=32) returned 4 [0045.114] GetSystemMetrics (nIndex=33) returned 4 [0045.114] CloseThemeData () returned 0x0 [0045.114] capGetDriverDescriptionA () returned 0x0 [0045.115] GetLastError () returned 0x0 [0045.116] SetLastError (dwErrCode=0x0) [0045.116] OpenThemeData () returned 0xcb0000 [0045.116] GetSystemMetrics (nIndex=32) returned 4 [0045.116] GetSystemMetrics (nIndex=33) returned 4 [0045.116] CloseThemeData () returned 0x0 [0045.116] capGetDriverDescriptionA () returned 0x0 [0045.117] GetLastError () returned 0x0 [0045.117] SetLastError (dwErrCode=0x0) [0045.117] OpenThemeData () returned 0xcc0000 [0045.118] GetSystemMetrics (nIndex=32) returned 4 [0045.118] GetSystemMetrics (nIndex=33) returned 4 [0045.118] CloseThemeData () returned 0x0 [0045.118] capGetDriverDescriptionA () returned 0x0 [0045.118] GetLastError () returned 0x0 [0045.119] SetLastError (dwErrCode=0x0) [0045.119] OpenThemeData () returned 0xcd0000 [0045.119] GetSystemMetrics (nIndex=32) returned 4 [0045.119] GetSystemMetrics (nIndex=33) returned 4 [0045.119] CloseThemeData () returned 0x0 [0045.119] capGetDriverDescriptionA () returned 0x0 [0045.120] GetLastError () returned 0x0 [0045.120] SetLastError (dwErrCode=0x0) [0045.120] OpenThemeData () returned 0xce0000 [0045.120] GetSystemMetrics (nIndex=32) returned 4 [0045.120] GetSystemMetrics (nIndex=33) returned 4 [0045.120] CloseThemeData () returned 0x0 [0045.121] capGetDriverDescriptionA () returned 0x0 [0045.121] GetLastError () returned 0x0 [0045.121] SetLastError (dwErrCode=0x0) [0045.121] OpenThemeData () returned 0xcf0000 [0045.122] GetSystemMetrics (nIndex=32) returned 4 [0045.122] GetSystemMetrics (nIndex=33) returned 4 [0045.122] CloseThemeData () returned 0x0 [0045.122] capGetDriverDescriptionA () returned 0x0 [0045.123] GetLastError () returned 0x0 [0045.123] SetLastError (dwErrCode=0x0) [0045.123] OpenThemeData () returned 0xd00000 [0045.123] GetSystemMetrics (nIndex=32) returned 4 [0045.123] GetSystemMetrics (nIndex=33) returned 4 [0045.123] CloseThemeData () returned 0x0 [0045.124] capGetDriverDescriptionA () returned 0x0 [0045.124] GetLastError () returned 0x0 [0045.124] SetLastError (dwErrCode=0x0) [0045.124] OpenThemeData () returned 0xd10000 [0045.125] GetSystemMetrics (nIndex=32) returned 4 [0045.125] GetSystemMetrics (nIndex=33) returned 4 [0045.125] CloseThemeData () returned 0x0 [0045.125] capGetDriverDescriptionA () returned 0x0 [0045.126] GetLastError () returned 0x0 [0045.126] SetLastError (dwErrCode=0x0) [0045.126] OpenThemeData () returned 0xd20000 [0045.126] GetSystemMetrics (nIndex=32) returned 4 [0045.126] GetSystemMetrics (nIndex=33) returned 4 [0045.126] CloseThemeData () returned 0x0 [0045.126] capGetDriverDescriptionA () returned 0x0 [0045.127] GetLastError () returned 0x0 [0045.127] SetLastError (dwErrCode=0x0) [0045.127] OpenThemeData () returned 0xd30000 [0045.128] GetSystemMetrics (nIndex=32) returned 4 [0045.128] GetSystemMetrics (nIndex=33) returned 4 [0045.128] CloseThemeData () returned 0x0 [0045.128] capGetDriverDescriptionA () returned 0x0 [0045.128] GetLastError () returned 0x0 [0045.129] SetLastError (dwErrCode=0x0) [0045.129] OpenThemeData () returned 0xd40000 [0045.129] GetSystemMetrics (nIndex=32) returned 4 [0045.129] GetSystemMetrics (nIndex=33) returned 4 [0045.129] CloseThemeData () returned 0x0 [0045.129] capGetDriverDescriptionA () returned 0x0 [0045.130] GetLastError () returned 0x0 [0045.130] SetLastError (dwErrCode=0x0) [0045.130] OpenThemeData () returned 0xd50000 [0045.131] GetSystemMetrics (nIndex=32) returned 4 [0045.131] GetSystemMetrics (nIndex=33) returned 4 [0045.131] CloseThemeData () returned 0x0 [0045.131] capGetDriverDescriptionA () returned 0x0 [0045.132] GetLastError () returned 0x0 [0045.132] SetLastError (dwErrCode=0x0) [0045.132] OpenThemeData () returned 0xd60000 [0045.132] GetSystemMetrics (nIndex=32) returned 4 [0045.132] GetSystemMetrics (nIndex=33) returned 4 [0045.132] CloseThemeData () returned 0x0 [0045.132] capGetDriverDescriptionA () returned 0x0 [0045.133] GetLastError () returned 0x0 [0045.133] SetLastError (dwErrCode=0x0) [0045.133] OpenThemeData () returned 0xd70000 [0045.133] GetSystemMetrics (nIndex=32) returned 4 [0045.134] GetSystemMetrics (nIndex=33) returned 4 [0045.134] CloseThemeData () returned 0x0 [0045.134] capGetDriverDescriptionA () returned 0x0 [0045.134] GetLastError () returned 0x0 [0045.134] SetLastError (dwErrCode=0x0) [0045.134] OpenThemeData () returned 0xd80000 [0045.135] GetSystemMetrics (nIndex=32) returned 4 [0045.135] GetSystemMetrics (nIndex=33) returned 4 [0045.135] CloseThemeData () returned 0x0 [0045.135] capGetDriverDescriptionA () returned 0x0 [0045.136] GetLastError () returned 0x0 [0045.136] SetLastError (dwErrCode=0x0) [0045.136] OpenThemeData () returned 0xd90000 [0045.136] GetSystemMetrics (nIndex=32) returned 4 [0045.136] GetSystemMetrics (nIndex=33) returned 4 [0045.136] CloseThemeData () returned 0x0 [0045.138] capGetDriverDescriptionA () returned 0x0 [0045.138] GetLastError () returned 0x0 [0045.138] SetLastError (dwErrCode=0x0) [0045.138] OpenThemeData () returned 0xda0000 [0045.139] GetSystemMetrics (nIndex=32) returned 4 [0045.139] GetSystemMetrics (nIndex=33) returned 4 [0045.139] CloseThemeData () returned 0x0 [0045.139] capGetDriverDescriptionA () returned 0x0 [0045.140] GetLastError () returned 0x0 [0045.140] SetLastError (dwErrCode=0x0) [0045.140] OpenThemeData () returned 0xdb0000 [0045.140] GetSystemMetrics (nIndex=32) returned 4 [0045.140] GetSystemMetrics (nIndex=33) returned 4 [0045.140] CloseThemeData () returned 0x0 [0045.141] capGetDriverDescriptionA () returned 0x0 [0045.141] GetLastError () returned 0x0 [0045.141] SetLastError (dwErrCode=0x0) [0045.141] OpenThemeData () returned 0xdc0000 [0045.142] GetSystemMetrics (nIndex=32) returned 4 [0045.142] GetSystemMetrics (nIndex=33) returned 4 [0045.142] CloseThemeData () returned 0x0 [0045.142] capGetDriverDescriptionA () returned 0x0 [0045.143] GetLastError () returned 0x0 [0045.143] SetLastError (dwErrCode=0x0) [0045.143] OpenThemeData () returned 0xdd0000 [0045.145] GetSystemMetrics (nIndex=32) returned 4 [0045.146] GetSystemMetrics (nIndex=33) returned 4 [0045.146] CloseThemeData () returned 0x0 [0045.149] capGetDriverDescriptionA () returned 0x0 [0045.149] GetLastError () returned 0x0 [0045.149] SetLastError (dwErrCode=0x0) [0045.149] OpenThemeData () returned 0xde0000 [0045.150] GetSystemMetrics (nIndex=32) returned 4 [0045.150] GetSystemMetrics (nIndex=33) returned 4 [0045.150] CloseThemeData () returned 0x0 [0045.150] capGetDriverDescriptionA () returned 0x0 [0045.151] GetLastError () returned 0x0 [0045.151] SetLastError (dwErrCode=0x0) [0045.151] OpenThemeData () returned 0xdf0000 [0045.151] GetSystemMetrics (nIndex=32) returned 4 [0045.151] GetSystemMetrics (nIndex=33) returned 4 [0045.151] CloseThemeData () returned 0x0 [0045.151] capGetDriverDescriptionA () returned 0x0 [0045.152] GetLastError () returned 0x0 [0045.152] SetLastError (dwErrCode=0x0) [0045.152] OpenThemeData () returned 0xe00000 [0045.153] GetSystemMetrics (nIndex=32) returned 4 [0045.153] GetSystemMetrics (nIndex=33) returned 4 [0045.153] CloseThemeData () returned 0x0 [0045.153] capGetDriverDescriptionA () returned 0x0 [0045.153] GetLastError () returned 0x0 [0045.153] SetLastError (dwErrCode=0x0) [0045.154] OpenThemeData () returned 0xe10000 [0045.154] GetSystemMetrics (nIndex=32) returned 4 [0045.154] GetSystemMetrics (nIndex=33) returned 4 [0045.154] CloseThemeData () returned 0x0 [0045.154] capGetDriverDescriptionA () returned 0x0 [0045.155] GetLastError () returned 0x0 [0045.155] SetLastError (dwErrCode=0x0) [0045.155] OpenThemeData () returned 0xe20000 [0045.155] GetSystemMetrics (nIndex=32) returned 4 [0045.155] GetSystemMetrics (nIndex=33) returned 4 [0045.155] CloseThemeData () returned 0x0 [0045.156] capGetDriverDescriptionA () returned 0x0 [0045.156] GetLastError () returned 0x0 [0045.156] SetLastError (dwErrCode=0x0) [0045.156] OpenThemeData () returned 0xe30000 [0045.157] GetSystemMetrics (nIndex=32) returned 4 [0045.157] GetSystemMetrics (nIndex=33) returned 4 [0045.157] CloseThemeData () returned 0x0 [0045.157] capGetDriverDescriptionA () returned 0x0 [0045.158] GetLastError () returned 0x0 [0045.158] SetLastError (dwErrCode=0x0) [0045.158] OpenThemeData () returned 0xe40000 [0045.158] GetSystemMetrics (nIndex=32) returned 4 [0045.158] GetSystemMetrics (nIndex=33) returned 4 [0045.158] CloseThemeData () returned 0x0 [0045.159] capGetDriverDescriptionA () returned 0x0 [0045.159] GetLastError () returned 0x0 [0045.159] SetLastError (dwErrCode=0x0) [0045.159] OpenThemeData () returned 0xe50000 [0045.160] GetSystemMetrics (nIndex=32) returned 4 [0045.160] GetSystemMetrics (nIndex=33) returned 4 [0045.160] CloseThemeData () returned 0x0 [0045.160] capGetDriverDescriptionA () returned 0x0 [0045.161] GetLastError () returned 0x0 [0045.161] SetLastError (dwErrCode=0x0) [0045.161] OpenThemeData () returned 0xe60000 [0045.161] GetSystemMetrics (nIndex=32) returned 4 [0045.161] GetSystemMetrics (nIndex=33) returned 4 [0045.161] CloseThemeData () returned 0x0 [0045.162] capGetDriverDescriptionA () returned 0x0 [0045.162] GetLastError () returned 0x0 [0045.162] SetLastError (dwErrCode=0x0) [0045.163] OpenThemeData () returned 0xe70000 [0045.163] GetSystemMetrics (nIndex=32) returned 4 [0045.163] GetSystemMetrics (nIndex=33) returned 4 [0045.163] CloseThemeData () returned 0x0 [0045.163] capGetDriverDescriptionA () returned 0x0 [0045.164] GetLastError () returned 0x0 [0045.164] SetLastError (dwErrCode=0x0) [0045.164] OpenThemeData () returned 0xe80000 [0045.164] GetSystemMetrics (nIndex=32) returned 4 [0045.164] GetSystemMetrics (nIndex=33) returned 4 [0045.164] CloseThemeData () returned 0x0 [0045.165] capGetDriverDescriptionA () returned 0x0 [0045.165] GetLastError () returned 0x0 [0045.165] SetLastError (dwErrCode=0x0) [0045.165] OpenThemeData () returned 0xe90000 [0045.166] GetSystemMetrics (nIndex=32) returned 4 [0045.166] GetSystemMetrics (nIndex=33) returned 4 [0045.166] CloseThemeData () returned 0x0 [0045.166] capGetDriverDescriptionA () returned 0x0 [0045.167] GetLastError () returned 0x0 [0045.167] SetLastError (dwErrCode=0x0) [0045.167] OpenThemeData () returned 0xea0000 [0045.167] GetSystemMetrics (nIndex=32) returned 4 [0045.167] GetSystemMetrics (nIndex=33) returned 4 [0045.167] CloseThemeData () returned 0x0 [0045.168] capGetDriverDescriptionA () returned 0x0 [0045.168] GetLastError () returned 0x0 [0045.168] SetLastError (dwErrCode=0x0) [0045.168] OpenThemeData () returned 0xeb0000 [0045.169] GetSystemMetrics (nIndex=32) returned 4 [0045.169] GetSystemMetrics (nIndex=33) returned 4 [0045.169] CloseThemeData () returned 0x0 [0045.169] capGetDriverDescriptionA () returned 0x0 [0045.170] GetLastError () returned 0x0 [0045.170] SetLastError (dwErrCode=0x0) [0045.170] OpenThemeData () returned 0xec0000 [0045.170] GetSystemMetrics (nIndex=32) returned 4 [0045.170] GetSystemMetrics (nIndex=33) returned 4 [0045.170] CloseThemeData () returned 0x0 [0045.170] capGetDriverDescriptionA () returned 0x0 [0045.171] GetLastError () returned 0x0 [0045.171] SetLastError (dwErrCode=0x0) [0045.171] OpenThemeData () returned 0xed0000 [0045.172] GetSystemMetrics (nIndex=32) returned 4 [0045.172] GetSystemMetrics (nIndex=33) returned 4 [0045.172] CloseThemeData () returned 0x0 [0045.172] capGetDriverDescriptionA () returned 0x0 [0045.172] GetLastError () returned 0x0 [0045.173] SetLastError (dwErrCode=0x0) [0045.173] OpenThemeData () returned 0xee0000 [0045.173] GetSystemMetrics (nIndex=32) returned 4 [0045.173] GetSystemMetrics (nIndex=33) returned 4 [0045.173] CloseThemeData () returned 0x0 [0045.173] capGetDriverDescriptionA () returned 0x0 [0045.174] GetLastError () returned 0x0 [0045.174] SetLastError (dwErrCode=0x0) [0045.174] OpenThemeData () returned 0xef0000 [0045.174] GetSystemMetrics (nIndex=32) returned 4 [0045.174] GetSystemMetrics (nIndex=33) returned 4 [0045.174] CloseThemeData () returned 0x0 [0045.175] capGetDriverDescriptionA () returned 0x0 [0045.175] GetLastError () returned 0x0 [0045.175] SetLastError (dwErrCode=0x0) [0045.175] OpenThemeData () returned 0xf00000 [0045.176] GetSystemMetrics (nIndex=32) returned 4 [0045.176] GetSystemMetrics (nIndex=33) returned 4 [0045.176] CloseThemeData () returned 0x0 [0045.176] capGetDriverDescriptionA () returned 0x0 [0045.177] GetLastError () returned 0x0 [0045.177] SetLastError (dwErrCode=0x0) [0045.177] OpenThemeData () returned 0xf10000 [0045.185] GetSystemMetrics (nIndex=32) returned 4 [0045.185] GetSystemMetrics (nIndex=33) returned 4 [0045.185] CloseThemeData () returned 0x0 [0045.186] capGetDriverDescriptionA () returned 0x0 [0045.186] GetLastError () returned 0x0 [0045.186] SetLastError (dwErrCode=0x0) [0045.186] OpenThemeData () returned 0xf20000 [0045.187] GetSystemMetrics (nIndex=32) returned 4 [0045.187] GetSystemMetrics (nIndex=33) returned 4 [0045.187] CloseThemeData () returned 0x0 [0045.187] capGetDriverDescriptionA () returned 0x0 [0045.188] GetLastError () returned 0x0 [0045.188] SetLastError (dwErrCode=0x0) [0045.188] OpenThemeData () returned 0xf30000 [0045.188] GetSystemMetrics (nIndex=32) returned 4 [0045.188] GetSystemMetrics (nIndex=33) returned 4 [0045.188] CloseThemeData () returned 0x0 [0045.189] capGetDriverDescriptionA () returned 0x0 [0045.189] GetLastError () returned 0x0 [0045.189] SetLastError (dwErrCode=0x0) [0045.189] OpenThemeData () returned 0xf40000 [0045.190] GetSystemMetrics (nIndex=32) returned 4 [0045.190] GetSystemMetrics (nIndex=33) returned 4 [0045.190] CloseThemeData () returned 0x0 [0045.190] capGetDriverDescriptionA () returned 0x0 [0045.191] GetLastError () returned 0x0 [0045.191] SetLastError (dwErrCode=0x0) [0045.191] OpenThemeData () returned 0xf50000 [0045.191] GetSystemMetrics (nIndex=32) returned 4 [0045.191] GetSystemMetrics (nIndex=33) returned 4 [0045.191] CloseThemeData () returned 0x0 [0045.192] capGetDriverDescriptionA () returned 0x0 [0045.192] GetLastError () returned 0x0 [0045.192] SetLastError (dwErrCode=0x0) [0045.192] OpenThemeData () returned 0xf60000 [0045.193] GetSystemMetrics (nIndex=32) returned 4 [0045.193] GetSystemMetrics (nIndex=33) returned 4 [0045.193] CloseThemeData () returned 0x0 [0045.195] capGetDriverDescriptionA () returned 0x0 [0045.195] GetLastError () returned 0x0 [0045.195] SetLastError (dwErrCode=0x0) [0045.195] OpenThemeData () returned 0xf70000 [0045.196] GetSystemMetrics (nIndex=32) returned 4 [0045.196] GetSystemMetrics (nIndex=33) returned 4 [0045.196] CloseThemeData () returned 0x0 [0045.196] capGetDriverDescriptionA () returned 0x0 [0045.197] GetLastError () returned 0x0 [0045.197] SetLastError (dwErrCode=0x0) [0045.197] OpenThemeData () returned 0xf80000 [0045.197] GetSystemMetrics (nIndex=32) returned 4 [0045.197] GetSystemMetrics (nIndex=33) returned 4 [0045.197] CloseThemeData () returned 0x0 [0045.198] capGetDriverDescriptionA () returned 0x0 [0045.198] GetLastError () returned 0x0 [0045.198] SetLastError (dwErrCode=0x0) [0045.198] OpenThemeData () returned 0xf90000 [0045.199] GetSystemMetrics (nIndex=32) returned 4 [0045.199] GetSystemMetrics (nIndex=33) returned 4 [0045.199] CloseThemeData () returned 0x0 [0049.716] GetParent (hWnd=0x0) returned 0x0 [0049.716] GetParent (hWnd=0x0) returned 0x0 [0049.716] SetWindowPos (hWnd=0x0, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x56) returned 0 [0049.716] CreateFileA (lpFileName="", dwDesiredAccess=0x0, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0049.716] DeviceIoControl (in: hDevice=0xffffffff, dwIoControlCode=0x900c0, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x19fde8, nOutBufferSize=0x40, lpBytesReturned=0x19f994, lpOverlapped=0x0 | out: lpOutBuffer=0x19fde8, lpBytesReturned=0x19f994, lpOverlapped=0x0) returned 0 [0049.716] StringFromGUID2 (in: rguid=0x19f9b0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lpsz=0x19fe28, cchMax=39 | out: lpsz="{00000000-0000-0000-0000-000000000000}") returned 39 [0049.717] EnumSystemGeoID (GeoClass=0x10, ParentGeoId=0x0, lpGeoEnumProc=0x680000) [0049.847] GetModuleHandleA (lpModuleName="ntdll") returned 0x76ec0000 [0049.847] GetModuleHandleA (lpModuleName=0x0) returned 0x35000000 [0050.865] VirtualProtect (in: lpAddress=0x35000000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.865] VirtualProtect (in: lpAddress=0x35001000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.866] VirtualProtect (in: lpAddress=0x35002000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.866] VirtualProtect (in: lpAddress=0x35003000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.866] VirtualProtect (in: lpAddress=0x35004000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.866] VirtualProtect (in: lpAddress=0x35005000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.866] VirtualProtect (in: lpAddress=0x35006000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.866] VirtualProtect (in: lpAddress=0x35007000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.867] VirtualProtect (in: lpAddress=0x35008000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.867] VirtualProtect (in: lpAddress=0x35009000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.867] VirtualProtect (in: lpAddress=0x3500a000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.867] VirtualProtect (in: lpAddress=0x3500b000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.867] VirtualProtect (in: lpAddress=0x3500c000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.867] VirtualProtect (in: lpAddress=0x3500d000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.868] VirtualProtect (in: lpAddress=0x3500e000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.868] VirtualProtect (in: lpAddress=0x3500f000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.868] VirtualProtect (in: lpAddress=0x35010000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.868] VirtualProtect (in: lpAddress=0x35011000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.868] VirtualProtect (in: lpAddress=0x35012000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.869] VirtualProtect (in: lpAddress=0x35013000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.869] VirtualProtect (in: lpAddress=0x35014000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.869] VirtualProtect (in: lpAddress=0x35015000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.869] VirtualProtect (in: lpAddress=0x35016000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.869] VirtualProtect (in: lpAddress=0x35017000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.869] VirtualProtect (in: lpAddress=0x35018000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.870] VirtualProtect (in: lpAddress=0x35019000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.870] VirtualProtect (in: lpAddress=0x3501a000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.870] VirtualProtect (in: lpAddress=0x3501b000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.870] VirtualProtect (in: lpAddress=0x3501c000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.870] VirtualProtect (in: lpAddress=0x3501d000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.870] VirtualProtect (in: lpAddress=0x3501e000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.871] VirtualProtect (in: lpAddress=0x3501f000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.871] VirtualProtect (in: lpAddress=0x35020000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.871] VirtualProtect (in: lpAddress=0x35021000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.871] VirtualProtect (in: lpAddress=0x35022000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.871] VirtualProtect (in: lpAddress=0x35023000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.871] VirtualProtect (in: lpAddress=0x35024000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.872] VirtualProtect (in: lpAddress=0x35025000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.872] VirtualProtect (in: lpAddress=0x35026000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.872] VirtualProtect (in: lpAddress=0x35027000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.872] VirtualProtect (in: lpAddress=0x35028000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.872] VirtualProtect (in: lpAddress=0x35029000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.872] VirtualProtect (in: lpAddress=0x3502a000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.873] VirtualProtect (in: lpAddress=0x3502b000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.873] VirtualProtect (in: lpAddress=0x3502c000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.873] VirtualProtect (in: lpAddress=0x3502d000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.873] VirtualProtect (in: lpAddress=0x3502e000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.873] VirtualProtect (in: lpAddress=0x3502f000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.873] VirtualProtect (in: lpAddress=0x35030000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.874] VirtualProtect (in: lpAddress=0x35031000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.874] VirtualProtect (in: lpAddress=0x35032000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.874] VirtualProtect (in: lpAddress=0x35033000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.874] VirtualProtect (in: lpAddress=0x35034000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.874] VirtualProtect (in: lpAddress=0x35035000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.874] VirtualProtect (in: lpAddress=0x35036000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.875] VirtualProtect (in: lpAddress=0x35037000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.875] VirtualProtect (in: lpAddress=0x35038000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.875] VirtualProtect (in: lpAddress=0x35039000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.875] VirtualProtect (in: lpAddress=0x3503a000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.875] VirtualProtect (in: lpAddress=0x3503b000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.876] VirtualProtect (in: lpAddress=0x3503c000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.876] VirtualProtect (in: lpAddress=0x3503d000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.876] VirtualProtect (in: lpAddress=0x3503e000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.876] VirtualProtect (in: lpAddress=0x3503f000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.876] VirtualProtect (in: lpAddress=0x35040000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.876] VirtualProtect (in: lpAddress=0x35041000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.877] VirtualProtect (in: lpAddress=0x35042000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.877] VirtualProtect (in: lpAddress=0x35043000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.877] VirtualProtect (in: lpAddress=0x35044000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.877] VirtualProtect (in: lpAddress=0x35045000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.877] VirtualProtect (in: lpAddress=0x35046000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.877] VirtualProtect (in: lpAddress=0x35047000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.878] VirtualProtect (in: lpAddress=0x35048000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.878] VirtualProtect (in: lpAddress=0x35049000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.878] VirtualProtect (in: lpAddress=0x3504a000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.878] VirtualProtect (in: lpAddress=0x3504b000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.878] VirtualProtect (in: lpAddress=0x3504c000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.878] VirtualProtect (in: lpAddress=0x3504d000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.879] VirtualProtect (in: lpAddress=0x3504e000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.879] VirtualProtect (in: lpAddress=0x3504f000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.879] VirtualProtect (in: lpAddress=0x35050000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.879] VirtualProtect (in: lpAddress=0x35051000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.879] VirtualProtect (in: lpAddress=0x35052000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.879] VirtualProtect (in: lpAddress=0x35053000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.880] VirtualProtect (in: lpAddress=0x35054000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.880] VirtualProtect (in: lpAddress=0x35055000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.880] VirtualProtect (in: lpAddress=0x35056000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.880] VirtualProtect (in: lpAddress=0x35057000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.880] VirtualProtect (in: lpAddress=0x35058000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.880] VirtualProtect (in: lpAddress=0x35059000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.881] VirtualProtect (in: lpAddress=0x3505a000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.881] VirtualProtect (in: lpAddress=0x3505b000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.881] VirtualProtect (in: lpAddress=0x3505c000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.881] VirtualProtect (in: lpAddress=0x3505d000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.881] VirtualProtect (in: lpAddress=0x3505e000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.881] VirtualProtect (in: lpAddress=0x3505f000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.882] VirtualProtect (in: lpAddress=0x35060000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.882] VirtualProtect (in: lpAddress=0x35061000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.882] VirtualProtect (in: lpAddress=0x35062000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.882] VirtualProtect (in: lpAddress=0x35063000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.882] VirtualProtect (in: lpAddress=0x35064000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.882] VirtualProtect (in: lpAddress=0x35065000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.883] VirtualProtect (in: lpAddress=0x35066000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.883] VirtualProtect (in: lpAddress=0x35067000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.883] VirtualProtect (in: lpAddress=0x35068000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.883] VirtualProtect (in: lpAddress=0x35069000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.883] VirtualProtect (in: lpAddress=0x3506a000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.884] VirtualProtect (in: lpAddress=0x3506b000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.891] VirtualProtect (in: lpAddress=0x3506c000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.891] VirtualProtect (in: lpAddress=0x3506d000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.891] VirtualProtect (in: lpAddress=0x3506e000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.891] VirtualProtect (in: lpAddress=0x3506f000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.892] VirtualProtect (in: lpAddress=0x35070000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.892] VirtualProtect (in: lpAddress=0x35071000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.892] VirtualProtect (in: lpAddress=0x35072000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.892] VirtualProtect (in: lpAddress=0x35073000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.892] VirtualProtect (in: lpAddress=0x35074000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.892] VirtualProtect (in: lpAddress=0x35075000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.893] VirtualProtect (in: lpAddress=0x35076000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.893] VirtualProtect (in: lpAddress=0x35077000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.893] VirtualProtect (in: lpAddress=0x35078000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.893] VirtualProtect (in: lpAddress=0x35079000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.893] VirtualProtect (in: lpAddress=0x3507a000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.893] VirtualProtect (in: lpAddress=0x3507b000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.894] VirtualProtect (in: lpAddress=0x3507c000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.894] VirtualProtect (in: lpAddress=0x3507d000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.894] VirtualProtect (in: lpAddress=0x3507e000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.894] VirtualProtect (in: lpAddress=0x3507f000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.894] VirtualProtect (in: lpAddress=0x35080000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.894] VirtualProtect (in: lpAddress=0x35081000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.895] VirtualProtect (in: lpAddress=0x35082000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.895] VirtualProtect (in: lpAddress=0x35083000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.895] VirtualProtect (in: lpAddress=0x35084000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.895] VirtualProtect (in: lpAddress=0x35085000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.895] VirtualProtect (in: lpAddress=0x35086000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.895] VirtualProtect (in: lpAddress=0x35087000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.896] VirtualProtect (in: lpAddress=0x35088000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.896] VirtualProtect (in: lpAddress=0x35089000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.896] VirtualProtect (in: lpAddress=0x3508a000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.896] VirtualProtect (in: lpAddress=0x3508b000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x20) returned 1 [0050.896] VirtualProtect (in: lpAddress=0x3508c000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.896] VirtualProtect (in: lpAddress=0x3508d000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.897] VirtualProtect (in: lpAddress=0x3508e000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.897] VirtualProtect (in: lpAddress=0x3508f000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.897] VirtualProtect (in: lpAddress=0x35090000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.897] VirtualProtect (in: lpAddress=0x35091000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.897] VirtualProtect (in: lpAddress=0x35092000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.897] VirtualProtect (in: lpAddress=0x35093000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.898] VirtualProtect (in: lpAddress=0x35094000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.898] VirtualProtect (in: lpAddress=0x35095000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.898] VirtualProtect (in: lpAddress=0x35096000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.898] VirtualProtect (in: lpAddress=0x35097000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.898] VirtualProtect (in: lpAddress=0x35098000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.898] VirtualProtect (in: lpAddress=0x35099000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.899] VirtualProtect (in: lpAddress=0x3509a000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.899] VirtualProtect (in: lpAddress=0x3509b000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.899] VirtualProtect (in: lpAddress=0x3509c000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.899] VirtualProtect (in: lpAddress=0x3509d000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.899] VirtualProtect (in: lpAddress=0x3509e000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.900] VirtualProtect (in: lpAddress=0x3509f000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.900] VirtualProtect (in: lpAddress=0x350a0000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.900] VirtualProtect (in: lpAddress=0x350a1000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.901] VirtualProtect (in: lpAddress=0x350a2000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.901] VirtualProtect (in: lpAddress=0x350a3000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.901] VirtualProtect (in: lpAddress=0x350a4000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.901] VirtualProtect (in: lpAddress=0x350a5000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.901] VirtualProtect (in: lpAddress=0x350a6000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.901] VirtualProtect (in: lpAddress=0x350a7000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.901] VirtualProtect (in: lpAddress=0x350a8000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.902] VirtualProtect (in: lpAddress=0x350a9000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.902] VirtualProtect (in: lpAddress=0x350aa000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.902] VirtualProtect (in: lpAddress=0x350ab000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.902] VirtualProtect (in: lpAddress=0x350ac000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.902] VirtualProtect (in: lpAddress=0x350ad000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.902] VirtualProtect (in: lpAddress=0x350ae000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.903] VirtualProtect (in: lpAddress=0x350af000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.903] VirtualProtect (in: lpAddress=0x350b0000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.903] VirtualProtect (in: lpAddress=0x350b1000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.903] VirtualProtect (in: lpAddress=0x350b2000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.903] VirtualProtect (in: lpAddress=0x350b3000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.903] VirtualProtect (in: lpAddress=0x350b4000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.904] VirtualProtect (in: lpAddress=0x350b5000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.904] VirtualProtect (in: lpAddress=0x350b6000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.904] VirtualProtect (in: lpAddress=0x350b7000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.904] VirtualProtect (in: lpAddress=0x350b8000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.904] VirtualProtect (in: lpAddress=0x350b9000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.904] VirtualProtect (in: lpAddress=0x350ba000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.905] VirtualProtect (in: lpAddress=0x350bb000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.905] VirtualProtect (in: lpAddress=0x350bc000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x8) returned 1 [0050.905] VirtualProtect (in: lpAddress=0x350bd000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x8) returned 1 [0050.905] VirtualProtect (in: lpAddress=0x350be000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x8) returned 1 [0050.905] VirtualProtect (in: lpAddress=0x350bf000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x8) returned 1 [0050.905] VirtualProtect (in: lpAddress=0x350c0000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x4) returned 1 [0050.906] VirtualProtect (in: lpAddress=0x350c1000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x4) returned 1 [0050.906] VirtualProtect (in: lpAddress=0x350c2000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x4) returned 1 [0050.906] VirtualProtect (in: lpAddress=0x350c3000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x4) returned 1 [0050.906] VirtualProtect (in: lpAddress=0x350c4000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.906] VirtualProtect (in: lpAddress=0x350c5000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.906] VirtualProtect (in: lpAddress=0x350c6000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.907] VirtualProtect (in: lpAddress=0x350c7000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.907] VirtualProtect (in: lpAddress=0x350c8000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.907] VirtualProtect (in: lpAddress=0x350c9000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.907] VirtualProtect (in: lpAddress=0x350ca000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.907] VirtualProtect (in: lpAddress=0x350cb000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.907] VirtualProtect (in: lpAddress=0x350cc000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.908] VirtualProtect (in: lpAddress=0x350cd000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.908] VirtualProtect (in: lpAddress=0x350ce000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.908] VirtualProtect (in: lpAddress=0x350cf000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.908] VirtualProtect (in: lpAddress=0x350d0000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.908] VirtualProtect (in: lpAddress=0x350d1000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.908] VirtualProtect (in: lpAddress=0x350d2000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.909] VirtualProtect (in: lpAddress=0x350d3000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.909] VirtualProtect (in: lpAddress=0x350d4000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.909] VirtualProtect (in: lpAddress=0x350d5000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.909] VirtualProtect (in: lpAddress=0x350d6000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.909] VirtualProtect (in: lpAddress=0x350d7000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.909] VirtualProtect (in: lpAddress=0x350d8000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.910] VirtualProtect (in: lpAddress=0x350d9000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.910] VirtualProtect (in: lpAddress=0x350da000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.910] VirtualProtect (in: lpAddress=0x350db000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.910] VirtualProtect (in: lpAddress=0x350dc000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.910] VirtualProtect (in: lpAddress=0x350dd000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.910] VirtualProtect (in: lpAddress=0x350de000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.911] VirtualProtect (in: lpAddress=0x350df000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.911] VirtualProtect (in: lpAddress=0x350e0000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.911] VirtualProtect (in: lpAddress=0x350e1000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.911] VirtualProtect (in: lpAddress=0x350e2000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.911] VirtualProtect (in: lpAddress=0x350e3000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.911] VirtualProtect (in: lpAddress=0x350e4000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.912] VirtualProtect (in: lpAddress=0x350e5000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.912] VirtualProtect (in: lpAddress=0x350e6000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.912] VirtualProtect (in: lpAddress=0x350e7000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.912] VirtualProtect (in: lpAddress=0x350e8000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.912] VirtualProtect (in: lpAddress=0x350e9000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.912] VirtualProtect (in: lpAddress=0x350ea000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.913] VirtualProtect (in: lpAddress=0x350eb000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.913] VirtualProtect (in: lpAddress=0x350ec000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.913] VirtualProtect (in: lpAddress=0x350ed000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.913] VirtualProtect (in: lpAddress=0x350ee000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.913] VirtualProtect (in: lpAddress=0x350ef000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.913] VirtualProtect (in: lpAddress=0x350f0000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.914] VirtualProtect (in: lpAddress=0x350f1000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.914] VirtualProtect (in: lpAddress=0x350f2000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.914] VirtualProtect (in: lpAddress=0x350f3000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.914] VirtualProtect (in: lpAddress=0x350f4000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.914] VirtualProtect (in: lpAddress=0x350f5000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.914] VirtualProtect (in: lpAddress=0x350f6000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.915] VirtualProtect (in: lpAddress=0x350f7000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0050.915] VirtualProtect (in: lpAddress=0x350f8000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19f7a4 | out: lpflOldProtect=0x19f7a4*=0x2) returned 1 [0051.060] GetCurrentThreadId () returned 0x13ac [0051.060] GetCurrentProcessId () returned 0x13a8 [0051.060] QueryPerformanceCounter (in: lpPerformanceCount=0x19f7e8 | out: lpPerformanceCount=0x19f7e8*=14642209080) returned 1 [0051.116] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0051.124] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x74d70000 [0051.124] GetProcAddress (hModule=0x74d70000, lpProcName="InitializeCriticalSectionEx") returned 0x74e67060 [0051.124] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x74d70000 [0051.124] GetProcAddress (hModule=0x74d70000, lpProcName="FlsAlloc") returned 0x74e6bea0 [0051.124] GetProcAddress (hModule=0x74d70000, lpProcName="FlsSetValue") returned 0x74e62550 [0051.143] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x74d70000 [0051.143] GetProcAddress (hModule=0x74d70000, lpProcName="InitializeCriticalSectionEx") returned 0x74e67060 [0051.145] GetProcessHeap () returned 0x730000 [0051.145] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x74d70000 [0051.150] GetProcAddress (hModule=0x74d70000, lpProcName="FlsAlloc") returned 0x74e6bea0 [0051.150] GetLastError () returned 0x6 [0051.150] GetProcAddress (hModule=0x74d70000, lpProcName="FlsGetValue") returned 0x74e570c0 [0051.154] SetLastError (dwErrCode=0x6) [0051.157] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0xc00) returned 0x7e60b8 [0051.158] GetStartupInfoW (in: lpStartupInfo=0x19f718 | out: lpStartupInfo=0x19f718*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\YeSVw.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0051.158] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0051.158] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0051.158] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0051.159] GetCommandLineA () returned="\"C:\\Users\\FD1HVy\\Desktop\\YeSVw.exe\" " [0051.159] GetCommandLineW () returned="\"C:\\Users\\FD1HVy\\Desktop\\YeSVw.exe\" " [0051.159] GetLastError () returned 0x6 [0051.159] SetLastError (dwErrCode=0x6) [0051.159] GetLastError () returned 0x6 [0051.159] SetLastError (dwErrCode=0x6) [0051.159] GetACP () returned 0x4e4 [0051.159] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x220) returned 0x76ec30 [0051.159] IsValidCodePage (CodePage=0x4e4) returned 1 [0051.159] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19f748 | out: lpCPInfo=0x19f748) returned 1 [0051.159] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19f010 | out: lpCPInfo=0x19f010) returned 1 [0051.159] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f624, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0051.159] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f624, cbMultiByte=256, lpWideCharStr=0x19eda8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0051.159] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x19f024 | out: lpCharType=0x19f024) returned 1 [0051.163] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f624, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0051.163] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f624, cbMultiByte=256, lpWideCharStr=0x19ed58, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0051.163] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x74d70000 [0051.163] GetProcAddress (hModule=0x74d70000, lpProcName="LCMapStringEx") returned 0x74e4ed00 [0051.163] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0051.163] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x19eb48, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0051.163] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x19f524, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x97!ÉÙ`÷\x19", lpUsedDefaultChar=0x0) returned 256 [0051.163] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f624, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0051.163] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f624, cbMultiByte=256, lpWideCharStr=0x19ed78, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0051.163] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0051.163] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x19eb68, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0051.163] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x19f424, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x97!ÉÙ`÷\x19", lpUsedDefaultChar=0x0) returned 256 [0051.163] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x80) returned 0x740e60 [0051.163] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x35158e60, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\YeSVw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\yesvw.exe")) returned 0x21 [0051.163] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x4c) returned 0x744500 [0051.163] RtlInitializeSListHead (in: ListHead=0x35158a50 | out: ListHead=0x35158a50) [0051.163] GetLastError () returned 0x0 [0051.163] SetLastError (dwErrCode=0x0) [0051.163] GetEnvironmentStringsW () returned 0x7e6cc0* [0051.163] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0xaca) returned 0x7e7798 [0051.163] FreeEnvironmentStringsW (penv=0x7e6cc0) returned 1 [0051.163] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x94) returned 0x770360 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x3e) returned 0x7627d8 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x50) returned 0x73e4c0 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x6e) returned 0x736e30 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x78) returned 0x7433f8 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x62) returned 0x760e98 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x28) returned 0x760468 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x48) returned 0x7484e8 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x1a) returned 0x756148 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x2e) returned 0x764908 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x56) returned 0x73e9e8 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x2a) returned 0x7646a0 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x2e) returned 0x764588 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x44) returned 0x748538 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x1c) returned 0x756058 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x182) returned 0x76ee58 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x7c) returned 0x7423f8 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x36) returned 0x763658 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x3a) returned 0x762790 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x90) returned 0x742480 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x24) returned 0x760438 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x30) returned 0x764400 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x36) returned 0x7633d8 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x48) returned 0x748588 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x52) returned 0x76efe8 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x3c) returned 0x762550 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0xd6) returned 0x76f048 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x2e) returned 0x764828 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x1e) returned 0x756468 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x2c) returned 0x7645c0 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x50) returned 0x76f128 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x4e) returned 0x76f180 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x24) returned 0x7600d8 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x42) returned 0x748768 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x20) returned 0x7560a8 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x38) returned 0x7639d8 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x24) returned 0x7603d8 [0051.164] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x7e7798 | out: hHeap=0x730000) returned 1 [0051.164] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x800) returned 0x7e6cc0 [0051.173] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0051.173] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x35005fbe) returned 0x35063e92 [0051.444] GetStartupInfoW (in: lpStartupInfo=0x19f780 | out: lpStartupInfo=0x19f780*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\YeSVw.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0051.463] LoadLibraryA (lpLibFileName="Advapi32.dll") returned 0x75260000 [0051.463] GetProcAddress (hModule=0x75260000, lpProcName="CryptAcquireContextA") returned 0x7527fc40 [0051.463] GetProcAddress (hModule=0x75260000, lpProcName="CryptCreateHash") returned 0x7527eed0 [0051.463] GetProcAddress (hModule=0x75260000, lpProcName="CryptHashData") returned 0x7527eef0 [0051.463] GetProcAddress (hModule=0x75260000, lpProcName="CryptGetHashParam") returned 0x7527ee70 [0051.463] GetProcAddress (hModule=0x75260000, lpProcName="CryptDestroyHash") returned 0x7527f0e0 [0051.464] GetProcAddress (hModule=0x75260000, lpProcName="CryptReleaseContext") returned 0x7527fbc0 [0051.464] CryptAcquireContextA (in: phProv=0x19d95c, szContainer=0x0, szProvider="Microsoft Base Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19d95c*=0x76f1d8) returned 1 [0052.024] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.025] CryptHashData (hHash=0x763598, pbData=0x19d934, dwDataLen=0x1, dwFlags=0x0) returned 1 [0052.025] CryptGetHashParam (in: hHash=0x763598, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.025] CryptDestroyHash (hHash=0x763598) returned 1 [0052.025] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.025] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x1, dwFlags=0x0) returned 1 [0052.025] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.025] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.025] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.025] CryptHashData (hHash=0x763ad8, pbData=0x19d934, dwDataLen=0x1, dwFlags=0x0) returned 1 [0052.025] CryptGetHashParam (in: hHash=0x763ad8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.025] CryptDestroyHash (hHash=0x763ad8) returned 1 [0052.025] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.025] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x1, dwFlags=0x0) returned 1 [0052.025] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.025] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.025] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.025] CryptHashData (hHash=0x763358, pbData=0x19d934, dwDataLen=0x1, dwFlags=0x0) returned 1 [0052.025] CryptGetHashParam (in: hHash=0x763358, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.025] CryptDestroyHash (hHash=0x763358) returned 1 [0052.025] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.026] CryptHashData (hHash=0x763918, pbData=0x19d934, dwDataLen=0x1, dwFlags=0x0) returned 1 [0052.026] CryptGetHashParam (in: hHash=0x763918, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.026] CryptDestroyHash (hHash=0x763918) returned 1 [0052.026] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.026] CryptHashData (hHash=0x763918, pbData=0x19d934, dwDataLen=0x1, dwFlags=0x0) returned 1 [0052.026] CryptGetHashParam (in: hHash=0x763918, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.026] CryptDestroyHash (hHash=0x763918) returned 1 [0052.026] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.026] CryptHashData (hHash=0x763958, pbData=0x19d934, dwDataLen=0x1, dwFlags=0x0) returned 1 [0052.026] CryptGetHashParam (in: hHash=0x763958, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.026] CryptDestroyHash (hHash=0x763958) returned 1 [0052.026] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.026] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x1, dwFlags=0x0) returned 1 [0052.026] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.026] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.026] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.026] CryptHashData (hHash=0x763a98, pbData=0x19d934, dwDataLen=0x1, dwFlags=0x0) returned 1 [0052.026] CryptGetHashParam (in: hHash=0x763a98, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.026] CryptDestroyHash (hHash=0x763a98) returned 1 [0052.026] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.026] CryptHashData (hHash=0x763318, pbData=0x19d934, dwDataLen=0x1, dwFlags=0x0) returned 1 [0052.026] CryptGetHashParam (in: hHash=0x763318, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.026] CryptDestroyHash (hHash=0x763318) returned 1 [0052.026] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.026] CryptHashData (hHash=0x7634d8, pbData=0x19d934, dwDataLen=0x1, dwFlags=0x0) returned 1 [0052.026] CryptGetHashParam (in: hHash=0x7634d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.026] CryptDestroyHash (hHash=0x7634d8) returned 1 [0052.026] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.026] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x1, dwFlags=0x0) returned 1 [0052.026] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.026] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.026] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.026] CryptHashData (hHash=0x7634d8, pbData=0x19d934, dwDataLen=0x1, dwFlags=0x0) returned 1 [0052.026] CryptGetHashParam (in: hHash=0x7634d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.026] CryptDestroyHash (hHash=0x7634d8) returned 1 [0052.026] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.026] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x1, dwFlags=0x0) returned 1 [0052.026] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.026] CryptDestroyHash (hHash=0x763418) returned 1 [0052.026] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.026] CryptHashData (hHash=0x763558, pbData=0x19d934, dwDataLen=0x1, dwFlags=0x0) returned 1 [0052.026] CryptGetHashParam (in: hHash=0x763558, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.026] CryptDestroyHash (hHash=0x763558) returned 1 [0052.027] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.027] CryptHashData (hHash=0x763858, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.027] CryptGetHashParam (in: hHash=0x763858, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.027] CryptDestroyHash (hHash=0x763858) returned 1 [0052.027] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.027] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.027] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.027] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.027] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.027] CryptHashData (hHash=0x763598, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.027] CryptGetHashParam (in: hHash=0x763598, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.027] CryptDestroyHash (hHash=0x763598) returned 1 [0052.027] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.027] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.027] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.027] CryptDestroyHash (hHash=0x763418) returned 1 [0052.027] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.027] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.027] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.027] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.027] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.027] CryptHashData (hHash=0x763818, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.027] CryptGetHashParam (in: hHash=0x763818, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.027] CryptDestroyHash (hHash=0x763818) returned 1 [0052.027] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.027] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.027] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.027] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.027] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.027] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.027] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.027] CryptDestroyHash (hHash=0x763418) returned 1 [0052.027] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.027] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.027] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.027] CryptDestroyHash (hHash=0x763418) returned 1 [0052.027] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.027] CryptHashData (hHash=0x763358, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.027] CryptGetHashParam (in: hHash=0x763358, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.027] CryptDestroyHash (hHash=0x763358) returned 1 [0052.027] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.027] CryptHashData (hHash=0x763598, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.028] CryptGetHashParam (in: hHash=0x763598, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.028] CryptDestroyHash (hHash=0x763598) returned 1 [0052.028] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.028] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.028] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.028] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.028] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.028] CryptHashData (hHash=0x763818, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.028] CryptGetHashParam (in: hHash=0x763818, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.028] CryptDestroyHash (hHash=0x763818) returned 1 [0052.028] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.028] CryptHashData (hHash=0x763558, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.028] CryptGetHashParam (in: hHash=0x763558, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.028] CryptDestroyHash (hHash=0x763558) returned 1 [0052.028] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.028] CryptHashData (hHash=0x7637d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.028] CryptGetHashParam (in: hHash=0x7637d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.028] CryptDestroyHash (hHash=0x7637d8) returned 1 [0052.028] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.028] CryptHashData (hHash=0x763818, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.028] CryptGetHashParam (in: hHash=0x763818, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.028] CryptDestroyHash (hHash=0x763818) returned 1 [0052.028] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.028] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.028] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.028] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.028] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.028] CryptHashData (hHash=0x763458, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.028] CryptGetHashParam (in: hHash=0x763458, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.028] CryptDestroyHash (hHash=0x763458) returned 1 [0052.028] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.028] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.028] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.028] CryptDestroyHash (hHash=0x763418) returned 1 [0052.028] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.028] CryptHashData (hHash=0x763918, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.028] CryptGetHashParam (in: hHash=0x763918, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.028] CryptDestroyHash (hHash=0x763918) returned 1 [0052.028] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.028] CryptHashData (hHash=0x763918, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.028] CryptGetHashParam (in: hHash=0x763918, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.028] CryptDestroyHash (hHash=0x763918) returned 1 [0052.029] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.029] CryptHashData (hHash=0x763558, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.029] CryptGetHashParam (in: hHash=0x763558, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.029] CryptDestroyHash (hHash=0x763558) returned 1 [0052.029] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.029] CryptHashData (hHash=0x763458, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.029] CryptGetHashParam (in: hHash=0x763458, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.029] CryptDestroyHash (hHash=0x763458) returned 1 [0052.029] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.029] CryptHashData (hHash=0x763598, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.029] CryptGetHashParam (in: hHash=0x763598, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.029] CryptDestroyHash (hHash=0x763598) returned 1 [0052.029] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.029] CryptHashData (hHash=0x763918, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.029] CryptGetHashParam (in: hHash=0x763918, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.029] CryptDestroyHash (hHash=0x763918) returned 1 [0052.029] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.029] CryptHashData (hHash=0x7637d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.029] CryptGetHashParam (in: hHash=0x7637d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.029] CryptDestroyHash (hHash=0x7637d8) returned 1 [0052.029] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.029] CryptHashData (hHash=0x763818, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.029] CryptGetHashParam (in: hHash=0x763818, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.029] CryptDestroyHash (hHash=0x763818) returned 1 [0052.029] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.029] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.029] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.029] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.029] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.029] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.029] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.029] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.029] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.029] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.029] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.029] CryptDestroyHash (hHash=0x763418) returned 1 [0052.029] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.029] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.029] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.029] CryptDestroyHash (hHash=0x763418) returned 1 [0052.029] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.030] CryptHashData (hHash=0x763918, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.030] CryptGetHashParam (in: hHash=0x763918, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.030] CryptDestroyHash (hHash=0x763918) returned 1 [0052.030] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.030] CryptHashData (hHash=0x763518, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.030] CryptGetHashParam (in: hHash=0x763518, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.030] CryptDestroyHash (hHash=0x763518) returned 1 [0052.030] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.030] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.030] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.030] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.030] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.030] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.030] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.030] CryptDestroyHash (hHash=0x763418) returned 1 [0052.030] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.030] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.030] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.030] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.030] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.030] CryptHashData (hHash=0x7637d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.030] CryptGetHashParam (in: hHash=0x7637d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.030] CryptDestroyHash (hHash=0x7637d8) returned 1 [0052.030] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.030] CryptHashData (hHash=0x7637d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.030] CryptGetHashParam (in: hHash=0x7637d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.030] CryptDestroyHash (hHash=0x7637d8) returned 1 [0052.030] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.030] CryptHashData (hHash=0x7637d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.030] CryptGetHashParam (in: hHash=0x7637d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.030] CryptDestroyHash (hHash=0x7637d8) returned 1 [0052.030] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.030] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.030] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.030] CryptDestroyHash (hHash=0x763418) returned 1 [0052.030] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.030] CryptHashData (hHash=0x7637d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.030] CryptGetHashParam (in: hHash=0x7637d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.030] CryptDestroyHash (hHash=0x7637d8) returned 1 [0052.030] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.030] CryptHashData (hHash=0x7635d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.031] CryptGetHashParam (in: hHash=0x7635d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.031] CryptDestroyHash (hHash=0x7635d8) returned 1 [0052.031] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.031] CryptHashData (hHash=0x7635d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.031] CryptGetHashParam (in: hHash=0x7635d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.031] CryptDestroyHash (hHash=0x7635d8) returned 1 [0052.031] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.031] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.031] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.031] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.031] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.031] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.031] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.031] CryptDestroyHash (hHash=0x763418) returned 1 [0052.031] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.031] CryptHashData (hHash=0x763518, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.031] CryptGetHashParam (in: hHash=0x763518, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.031] CryptDestroyHash (hHash=0x763518) returned 1 [0052.031] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.031] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.031] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.031] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.031] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.031] CryptHashData (hHash=0x7634d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.031] CryptGetHashParam (in: hHash=0x7634d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.031] CryptDestroyHash (hHash=0x7634d8) returned 1 [0052.031] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.031] CryptHashData (hHash=0x763918, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.031] CryptGetHashParam (in: hHash=0x763918, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.031] CryptDestroyHash (hHash=0x763918) returned 1 [0052.031] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.031] CryptHashData (hHash=0x763358, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.031] CryptGetHashParam (in: hHash=0x763358, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.031] CryptDestroyHash (hHash=0x763358) returned 1 [0052.031] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.031] CryptHashData (hHash=0x763718, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.031] CryptGetHashParam (in: hHash=0x763718, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.031] CryptDestroyHash (hHash=0x763718) returned 1 [0052.031] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.031] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.031] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.031] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.031] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.032] CryptHashData (hHash=0x763318, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.032] CryptGetHashParam (in: hHash=0x763318, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.032] CryptDestroyHash (hHash=0x763318) returned 1 [0052.032] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.032] CryptHashData (hHash=0x763958, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.032] CryptGetHashParam (in: hHash=0x763958, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.032] CryptDestroyHash (hHash=0x763958) returned 1 [0052.032] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.032] CryptHashData (hHash=0x763358, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.032] CryptGetHashParam (in: hHash=0x763358, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.032] CryptDestroyHash (hHash=0x763358) returned 1 [0052.032] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.032] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.032] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.032] CryptDestroyHash (hHash=0x763418) returned 1 [0052.032] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.032] CryptHashData (hHash=0x7637d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.032] CryptGetHashParam (in: hHash=0x7637d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.032] CryptDestroyHash (hHash=0x7637d8) returned 1 [0052.032] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.032] CryptHashData (hHash=0x763a98, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.032] CryptGetHashParam (in: hHash=0x763a98, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.032] CryptDestroyHash (hHash=0x763a98) returned 1 [0052.032] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.032] CryptHashData (hHash=0x763818, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.032] CryptGetHashParam (in: hHash=0x763818, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.032] CryptDestroyHash (hHash=0x763818) returned 1 [0052.032] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.032] CryptHashData (hHash=0x763918, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.032] CryptGetHashParam (in: hHash=0x763918, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.032] CryptDestroyHash (hHash=0x763918) returned 1 [0052.032] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.032] CryptHashData (hHash=0x763718, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.032] CryptGetHashParam (in: hHash=0x763718, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.032] CryptDestroyHash (hHash=0x763718) returned 1 [0052.032] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.032] CryptHashData (hHash=0x763918, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.032] CryptGetHashParam (in: hHash=0x763918, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.032] CryptDestroyHash (hHash=0x763918) returned 1 [0052.032] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.032] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.033] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.033] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.033] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.033] CryptHashData (hHash=0x7637d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.033] CryptGetHashParam (in: hHash=0x7637d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.033] CryptDestroyHash (hHash=0x7637d8) returned 1 [0052.033] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.033] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.033] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.033] CryptDestroyHash (hHash=0x763418) returned 1 [0052.033] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.033] CryptHashData (hHash=0x7637d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.033] CryptGetHashParam (in: hHash=0x7637d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.033] CryptDestroyHash (hHash=0x7637d8) returned 1 [0052.033] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.033] CryptHashData (hHash=0x763598, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.033] CryptGetHashParam (in: hHash=0x763598, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.033] CryptDestroyHash (hHash=0x763598) returned 1 [0052.033] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.033] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.033] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.033] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.033] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.033] CryptHashData (hHash=0x763598, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.033] CryptGetHashParam (in: hHash=0x763598, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.033] CryptDestroyHash (hHash=0x763598) returned 1 [0052.033] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.033] CryptHashData (hHash=0x7637d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.033] CryptGetHashParam (in: hHash=0x7637d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.033] CryptDestroyHash (hHash=0x7637d8) returned 1 [0052.033] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.033] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.033] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.033] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.033] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.033] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.033] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.033] CryptDestroyHash (hHash=0x763418) returned 1 [0052.033] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.033] CryptHashData (hHash=0x763858, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.033] CryptGetHashParam (in: hHash=0x763858, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.034] CryptDestroyHash (hHash=0x763858) returned 1 [0052.034] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.034] CryptHashData (hHash=0x763ad8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.034] CryptGetHashParam (in: hHash=0x763ad8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.034] CryptDestroyHash (hHash=0x763ad8) returned 1 [0052.034] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.034] CryptHashData (hHash=0x763518, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.034] CryptGetHashParam (in: hHash=0x763518, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.034] CryptDestroyHash (hHash=0x763518) returned 1 [0052.034] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.034] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.034] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.034] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.034] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.034] CryptHashData (hHash=0x7634d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.034] CryptGetHashParam (in: hHash=0x7634d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.034] CryptDestroyHash (hHash=0x7634d8) returned 1 [0052.034] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.034] CryptHashData (hHash=0x7634d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.034] CryptGetHashParam (in: hHash=0x7634d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.034] CryptDestroyHash (hHash=0x7634d8) returned 1 [0052.034] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.034] CryptHashData (hHash=0x763458, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.034] CryptGetHashParam (in: hHash=0x763458, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.034] CryptDestroyHash (hHash=0x763458) returned 1 [0052.034] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.034] CryptHashData (hHash=0x763ad8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.034] CryptGetHashParam (in: hHash=0x763ad8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.034] CryptDestroyHash (hHash=0x763ad8) returned 1 [0052.034] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.034] CryptHashData (hHash=0x763458, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.034] CryptGetHashParam (in: hHash=0x763458, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.034] CryptDestroyHash (hHash=0x763458) returned 1 [0052.034] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.034] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.034] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.034] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.034] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.034] CryptHashData (hHash=0x763958, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.034] CryptGetHashParam (in: hHash=0x763958, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.034] CryptDestroyHash (hHash=0x763958) returned 1 [0052.034] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.034] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.035] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.035] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.035] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.035] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.035] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.035] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.035] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.035] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.035] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.035] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.035] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.035] CryptHashData (hHash=0x763818, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.035] CryptGetHashParam (in: hHash=0x763818, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.035] CryptDestroyHash (hHash=0x763818) returned 1 [0052.035] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.035] CryptHashData (hHash=0x763518, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.035] CryptGetHashParam (in: hHash=0x763518, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.035] CryptDestroyHash (hHash=0x763518) returned 1 [0052.035] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.035] CryptHashData (hHash=0x763958, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.035] CryptGetHashParam (in: hHash=0x763958, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.035] CryptDestroyHash (hHash=0x763958) returned 1 [0052.035] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.035] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.035] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.035] CryptDestroyHash (hHash=0x763418) returned 1 [0052.035] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.035] CryptHashData (hHash=0x763ad8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.035] CryptGetHashParam (in: hHash=0x763ad8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.035] CryptDestroyHash (hHash=0x763ad8) returned 1 [0052.035] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.035] CryptHashData (hHash=0x763918, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.035] CryptGetHashParam (in: hHash=0x763918, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.035] CryptDestroyHash (hHash=0x763918) returned 1 [0052.035] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.035] CryptHashData (hHash=0x763918, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.035] CryptGetHashParam (in: hHash=0x763918, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.035] CryptDestroyHash (hHash=0x763918) returned 1 [0052.035] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.035] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.035] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.035] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.036] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.036] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.036] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.036] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.036] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.036] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.036] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.036] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.036] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.036] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.036] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.036] CryptDestroyHash (hHash=0x763418) returned 1 [0052.036] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.036] CryptHashData (hHash=0x763958, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.036] CryptGetHashParam (in: hHash=0x763958, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.036] CryptDestroyHash (hHash=0x763958) returned 1 [0052.036] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.036] CryptHashData (hHash=0x763ad8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.036] CryptGetHashParam (in: hHash=0x763ad8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.036] CryptDestroyHash (hHash=0x763ad8) returned 1 [0052.036] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.036] CryptHashData (hHash=0x763a98, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.036] CryptGetHashParam (in: hHash=0x763a98, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.036] CryptDestroyHash (hHash=0x763a98) returned 1 [0052.036] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.036] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.036] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.036] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.036] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.036] CryptHashData (hHash=0x763358, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.036] CryptGetHashParam (in: hHash=0x763358, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.036] CryptDestroyHash (hHash=0x763358) returned 1 [0052.036] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.036] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.036] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.036] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.036] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.036] CryptHashData (hHash=0x763a98, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.036] CryptGetHashParam (in: hHash=0x763a98, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.036] CryptDestroyHash (hHash=0x763a98) returned 1 [0052.036] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.036] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.036] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.037] CryptDestroyHash (hHash=0x763418) returned 1 [0052.037] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.037] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.037] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.037] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.037] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.037] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.037] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.037] CryptDestroyHash (hHash=0x763418) returned 1 [0052.037] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.037] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.037] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.037] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.037] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.037] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.037] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.037] CryptDestroyHash (hHash=0x763418) returned 1 [0052.037] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.037] CryptHashData (hHash=0x7637d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.037] CryptGetHashParam (in: hHash=0x7637d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.037] CryptDestroyHash (hHash=0x7637d8) returned 1 [0052.037] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.037] CryptHashData (hHash=0x7635d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.037] CryptGetHashParam (in: hHash=0x7635d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.037] CryptDestroyHash (hHash=0x7635d8) returned 1 [0052.037] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.037] CryptHashData (hHash=0x763918, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.037] CryptGetHashParam (in: hHash=0x763918, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.037] CryptDestroyHash (hHash=0x763918) returned 1 [0052.037] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.037] CryptHashData (hHash=0x763a98, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.037] CryptGetHashParam (in: hHash=0x763a98, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.037] CryptDestroyHash (hHash=0x763a98) returned 1 [0052.037] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.037] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.037] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.037] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.037] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.037] CryptHashData (hHash=0x763818, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.037] CryptGetHashParam (in: hHash=0x763818, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.037] CryptDestroyHash (hHash=0x763818) returned 1 [0052.037] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.037] CryptHashData (hHash=0x7634d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.038] CryptGetHashParam (in: hHash=0x7634d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.038] CryptDestroyHash (hHash=0x7634d8) returned 1 [0052.038] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.038] CryptHashData (hHash=0x763458, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.038] CryptGetHashParam (in: hHash=0x763458, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.038] CryptDestroyHash (hHash=0x763458) returned 1 [0052.038] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.038] CryptHashData (hHash=0x763818, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.038] CryptGetHashParam (in: hHash=0x763818, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.038] CryptDestroyHash (hHash=0x763818) returned 1 [0052.038] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.038] CryptHashData (hHash=0x763818, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.038] CryptGetHashParam (in: hHash=0x763818, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.038] CryptDestroyHash (hHash=0x763818) returned 1 [0052.038] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.038] CryptHashData (hHash=0x763558, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.038] CryptGetHashParam (in: hHash=0x763558, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.038] CryptDestroyHash (hHash=0x763558) returned 1 [0052.038] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.038] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.038] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.038] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.038] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.038] CryptHashData (hHash=0x763918, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.038] CryptGetHashParam (in: hHash=0x763918, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.038] CryptDestroyHash (hHash=0x763918) returned 1 [0052.038] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.038] CryptHashData (hHash=0x7637d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.038] CryptGetHashParam (in: hHash=0x7637d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.038] CryptDestroyHash (hHash=0x7637d8) returned 1 [0052.038] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.038] CryptHashData (hHash=0x763718, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.038] CryptGetHashParam (in: hHash=0x763718, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.038] CryptDestroyHash (hHash=0x763718) returned 1 [0052.038] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.038] CryptHashData (hHash=0x7637d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.038] CryptGetHashParam (in: hHash=0x7637d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.038] CryptDestroyHash (hHash=0x7637d8) returned 1 [0052.038] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.038] CryptHashData (hHash=0x7637d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.038] CryptGetHashParam (in: hHash=0x7637d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.038] CryptDestroyHash (hHash=0x7637d8) returned 1 [0052.038] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.039] CryptHashData (hHash=0x763718, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.039] CryptGetHashParam (in: hHash=0x763718, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.039] CryptDestroyHash (hHash=0x763718) returned 1 [0052.039] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.039] CryptHashData (hHash=0x763718, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.039] CryptGetHashParam (in: hHash=0x763718, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.039] CryptDestroyHash (hHash=0x763718) returned 1 [0052.039] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.039] CryptHashData (hHash=0x763458, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.039] CryptGetHashParam (in: hHash=0x763458, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.039] CryptDestroyHash (hHash=0x763458) returned 1 [0052.039] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.039] CryptHashData (hHash=0x7637d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.039] CryptGetHashParam (in: hHash=0x7637d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.039] CryptDestroyHash (hHash=0x7637d8) returned 1 [0052.039] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.039] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.039] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.039] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.039] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.039] CryptHashData (hHash=0x763a98, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.039] CryptGetHashParam (in: hHash=0x763a98, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.039] CryptDestroyHash (hHash=0x763a98) returned 1 [0052.039] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.039] CryptHashData (hHash=0x763458, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.039] CryptGetHashParam (in: hHash=0x763458, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.039] CryptDestroyHash (hHash=0x763458) returned 1 [0052.039] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.039] CryptHashData (hHash=0x7637d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.039] CryptGetHashParam (in: hHash=0x7637d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.039] CryptDestroyHash (hHash=0x7637d8) returned 1 [0052.039] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.039] CryptHashData (hHash=0x763918, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.039] CryptGetHashParam (in: hHash=0x763918, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.039] CryptDestroyHash (hHash=0x763918) returned 1 [0052.039] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.039] CryptHashData (hHash=0x7635d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.039] CryptGetHashParam (in: hHash=0x7635d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.039] CryptDestroyHash (hHash=0x7635d8) returned 1 [0052.039] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.039] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.039] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.040] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.040] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.040] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.040] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.040] CryptDestroyHash (hHash=0x763418) returned 1 [0052.040] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.040] CryptHashData (hHash=0x7637d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.040] CryptGetHashParam (in: hHash=0x7637d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.040] CryptDestroyHash (hHash=0x7637d8) returned 1 [0052.040] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.040] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.040] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.040] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.040] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.040] CryptHashData (hHash=0x763358, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.040] CryptGetHashParam (in: hHash=0x763358, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.040] CryptDestroyHash (hHash=0x763358) returned 1 [0052.040] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.040] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.040] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.040] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.040] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.040] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.040] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.040] CryptDestroyHash (hHash=0x763418) returned 1 [0052.040] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.040] CryptHashData (hHash=0x763318, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.040] CryptGetHashParam (in: hHash=0x763318, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.040] CryptDestroyHash (hHash=0x763318) returned 1 [0052.040] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.040] CryptHashData (hHash=0x763ad8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.040] CryptGetHashParam (in: hHash=0x763ad8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.040] CryptDestroyHash (hHash=0x763ad8) returned 1 [0052.040] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.040] CryptHashData (hHash=0x7634d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.040] CryptGetHashParam (in: hHash=0x7634d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.040] CryptDestroyHash (hHash=0x7634d8) returned 1 [0052.040] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.040] CryptHashData (hHash=0x7634d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.040] CryptGetHashParam (in: hHash=0x7634d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.040] CryptDestroyHash (hHash=0x7634d8) returned 1 [0052.040] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.040] CryptHashData (hHash=0x763318, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.041] CryptGetHashParam (in: hHash=0x763318, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.041] CryptDestroyHash (hHash=0x763318) returned 1 [0052.041] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.041] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.041] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.041] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.041] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.041] CryptHashData (hHash=0x763458, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.041] CryptGetHashParam (in: hHash=0x763458, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.041] CryptDestroyHash (hHash=0x763458) returned 1 [0052.041] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.041] CryptHashData (hHash=0x763318, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.041] CryptGetHashParam (in: hHash=0x763318, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.041] CryptDestroyHash (hHash=0x763318) returned 1 [0052.041] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.041] CryptHashData (hHash=0x7637d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.041] CryptGetHashParam (in: hHash=0x7637d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.041] CryptDestroyHash (hHash=0x7637d8) returned 1 [0052.041] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.041] CryptHashData (hHash=0x7634d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.041] CryptGetHashParam (in: hHash=0x7634d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.041] CryptDestroyHash (hHash=0x7634d8) returned 1 [0052.041] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.041] CryptHashData (hHash=0x763318, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.041] CryptGetHashParam (in: hHash=0x763318, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.041] CryptDestroyHash (hHash=0x763318) returned 1 [0052.041] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.041] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.041] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.041] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.041] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.041] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.041] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.041] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.041] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.041] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.041] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.041] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.041] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.041] CryptHashData (hHash=0x7634d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.041] CryptGetHashParam (in: hHash=0x7634d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.041] CryptDestroyHash (hHash=0x7634d8) returned 1 [0052.041] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.042] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.042] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.042] CryptDestroyHash (hHash=0x763418) returned 1 [0052.042] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.042] CryptHashData (hHash=0x763958, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.042] CryptGetHashParam (in: hHash=0x763958, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.042] CryptDestroyHash (hHash=0x763958) returned 1 [0052.042] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.042] CryptHashData (hHash=0x763458, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.042] CryptGetHashParam (in: hHash=0x763458, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.042] CryptDestroyHash (hHash=0x763458) returned 1 [0052.042] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.042] CryptHashData (hHash=0x763558, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.042] CryptGetHashParam (in: hHash=0x763558, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.042] CryptDestroyHash (hHash=0x763558) returned 1 [0052.042] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.042] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.042] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.042] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.042] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.042] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.042] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.042] CryptDestroyHash (hHash=0x763418) returned 1 [0052.042] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.042] CryptHashData (hHash=0x7635d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.042] CryptGetHashParam (in: hHash=0x7635d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.042] CryptDestroyHash (hHash=0x7635d8) returned 1 [0052.042] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.042] CryptHashData (hHash=0x763598, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.042] CryptGetHashParam (in: hHash=0x763598, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.042] CryptDestroyHash (hHash=0x763598) returned 1 [0052.042] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.042] CryptHashData (hHash=0x7637d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.042] CryptGetHashParam (in: hHash=0x7637d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.042] CryptDestroyHash (hHash=0x7637d8) returned 1 [0052.042] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.042] CryptHashData (hHash=0x763958, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.042] CryptGetHashParam (in: hHash=0x763958, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.042] CryptDestroyHash (hHash=0x763958) returned 1 [0052.042] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.042] CryptHashData (hHash=0x7637d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.042] CryptGetHashParam (in: hHash=0x7637d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.042] CryptDestroyHash (hHash=0x7637d8) returned 1 [0052.043] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.043] CryptHashData (hHash=0x763558, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.043] CryptGetHashParam (in: hHash=0x763558, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.043] CryptDestroyHash (hHash=0x763558) returned 1 [0052.043] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.043] CryptHashData (hHash=0x763518, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.043] CryptGetHashParam (in: hHash=0x763518, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.043] CryptDestroyHash (hHash=0x763518) returned 1 [0052.043] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.043] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.043] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.043] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.043] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.043] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.043] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.043] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.043] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.043] CryptHashData (hHash=0x7634d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.043] CryptGetHashParam (in: hHash=0x7634d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.043] CryptDestroyHash (hHash=0x7634d8) returned 1 [0052.043] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.043] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.043] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.043] CryptDestroyHash (hHash=0x763418) returned 1 [0052.043] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.043] CryptHashData (hHash=0x7635d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.043] CryptGetHashParam (in: hHash=0x7635d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.043] CryptDestroyHash (hHash=0x7635d8) returned 1 [0052.043] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.043] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.043] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.043] CryptDestroyHash (hHash=0x763418) returned 1 [0052.043] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.043] CryptHashData (hHash=0x763558, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.043] CryptGetHashParam (in: hHash=0x763558, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.043] CryptDestroyHash (hHash=0x763558) returned 1 [0052.043] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.043] CryptHashData (hHash=0x7637d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.043] CryptGetHashParam (in: hHash=0x7637d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.043] CryptDestroyHash (hHash=0x7637d8) returned 1 [0052.043] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.043] CryptHashData (hHash=0x763958, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.043] CryptGetHashParam (in: hHash=0x763958, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.044] CryptDestroyHash (hHash=0x763958) returned 1 [0052.044] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.044] CryptHashData (hHash=0x763458, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.044] CryptGetHashParam (in: hHash=0x763458, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.044] CryptDestroyHash (hHash=0x763458) returned 1 [0052.044] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.044] CryptHashData (hHash=0x763358, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.044] CryptGetHashParam (in: hHash=0x763358, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.044] CryptDestroyHash (hHash=0x763358) returned 1 [0052.044] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.044] CryptHashData (hHash=0x763718, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.044] CryptGetHashParam (in: hHash=0x763718, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.044] CryptDestroyHash (hHash=0x763718) returned 1 [0052.044] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.044] CryptHashData (hHash=0x763ad8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.044] CryptGetHashParam (in: hHash=0x763ad8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.044] CryptDestroyHash (hHash=0x763ad8) returned 1 [0052.044] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.044] CryptHashData (hHash=0x763718, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.044] CryptGetHashParam (in: hHash=0x763718, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.044] CryptDestroyHash (hHash=0x763718) returned 1 [0052.044] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.044] CryptHashData (hHash=0x763318, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.044] CryptGetHashParam (in: hHash=0x763318, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.044] CryptDestroyHash (hHash=0x763318) returned 1 [0052.044] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.044] CryptHashData (hHash=0x763718, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.044] CryptGetHashParam (in: hHash=0x763718, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.044] CryptDestroyHash (hHash=0x763718) returned 1 [0052.044] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.044] CryptHashData (hHash=0x763918, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.044] CryptGetHashParam (in: hHash=0x763918, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.044] CryptDestroyHash (hHash=0x763918) returned 1 [0052.044] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.044] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.044] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.044] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.044] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.044] CryptHashData (hHash=0x7637d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.044] CryptGetHashParam (in: hHash=0x7637d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.044] CryptDestroyHash (hHash=0x7637d8) returned 1 [0052.044] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.045] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.045] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.045] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.045] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.045] CryptHashData (hHash=0x763718, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.045] CryptGetHashParam (in: hHash=0x763718, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.045] CryptDestroyHash (hHash=0x763718) returned 1 [0052.045] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.045] CryptHashData (hHash=0x763a98, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.045] CryptGetHashParam (in: hHash=0x763a98, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.045] CryptDestroyHash (hHash=0x763a98) returned 1 [0052.045] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.045] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.045] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.045] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.045] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.045] CryptHashData (hHash=0x763518, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.045] CryptGetHashParam (in: hHash=0x763518, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.045] CryptDestroyHash (hHash=0x763518) returned 1 [0052.045] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.045] CryptHashData (hHash=0x763958, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.045] CryptGetHashParam (in: hHash=0x763958, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.045] CryptDestroyHash (hHash=0x763958) returned 1 [0052.045] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.045] CryptHashData (hHash=0x763718, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.045] CryptGetHashParam (in: hHash=0x763718, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.045] CryptDestroyHash (hHash=0x763718) returned 1 [0052.045] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.045] CryptHashData (hHash=0x763458, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.045] CryptGetHashParam (in: hHash=0x763458, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.045] CryptDestroyHash (hHash=0x763458) returned 1 [0052.045] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.045] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.045] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.045] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.045] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.045] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.045] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.045] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.045] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.045] CryptHashData (hHash=0x763858, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.045] CryptGetHashParam (in: hHash=0x763858, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.045] CryptDestroyHash (hHash=0x763858) returned 1 [0052.046] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.046] CryptHashData (hHash=0x7635d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.046] CryptGetHashParam (in: hHash=0x7635d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.046] CryptDestroyHash (hHash=0x7635d8) returned 1 [0052.046] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.046] CryptHashData (hHash=0x763958, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.046] CryptGetHashParam (in: hHash=0x763958, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.046] CryptDestroyHash (hHash=0x763958) returned 1 [0052.046] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.046] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.046] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.046] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.046] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.046] CryptHashData (hHash=0x7637d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.046] CryptGetHashParam (in: hHash=0x7637d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.046] CryptDestroyHash (hHash=0x7637d8) returned 1 [0052.046] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.046] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.046] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.046] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.046] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.046] CryptHashData (hHash=0x763958, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.046] CryptGetHashParam (in: hHash=0x763958, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.046] CryptDestroyHash (hHash=0x763958) returned 1 [0052.046] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.046] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.046] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.046] CryptDestroyHash (hHash=0x763418) returned 1 [0052.046] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.046] CryptHashData (hHash=0x763518, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.046] CryptGetHashParam (in: hHash=0x763518, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.046] CryptDestroyHash (hHash=0x763518) returned 1 [0052.046] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.046] CryptHashData (hHash=0x763958, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.046] CryptGetHashParam (in: hHash=0x763958, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.046] CryptDestroyHash (hHash=0x763958) returned 1 [0052.046] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.046] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.046] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.046] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.046] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.046] CryptHashData (hHash=0x763818, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.046] CryptGetHashParam (in: hHash=0x763818, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.047] CryptDestroyHash (hHash=0x763818) returned 1 [0052.047] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.047] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.047] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.047] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.047] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.047] CryptHashData (hHash=0x7637d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.047] CryptGetHashParam (in: hHash=0x7637d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.047] CryptDestroyHash (hHash=0x7637d8) returned 1 [0052.047] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.047] CryptHashData (hHash=0x763718, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.047] CryptGetHashParam (in: hHash=0x763718, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.047] CryptDestroyHash (hHash=0x763718) returned 1 [0052.047] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.047] CryptHashData (hHash=0x763418, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.047] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.047] CryptDestroyHash (hHash=0x763418) returned 1 [0052.047] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.047] CryptHashData (hHash=0x763918, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.047] CryptGetHashParam (in: hHash=0x763918, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.047] CryptDestroyHash (hHash=0x763918) returned 1 [0052.047] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.047] CryptHashData (hHash=0x763358, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.047] CryptGetHashParam (in: hHash=0x763358, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.047] CryptDestroyHash (hHash=0x763358) returned 1 [0052.047] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.047] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.047] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.047] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.047] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.047] CryptHashData (hHash=0x763458, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.047] CryptGetHashParam (in: hHash=0x763458, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.047] CryptDestroyHash (hHash=0x763458) returned 1 [0052.047] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.047] CryptHashData (hHash=0x763858, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.047] CryptGetHashParam (in: hHash=0x763858, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.047] CryptDestroyHash (hHash=0x763858) returned 1 [0052.047] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.047] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.047] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.047] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.047] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.047] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.048] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.048] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.048] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.048] CryptHashData (hHash=0x763458, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.048] CryptGetHashParam (in: hHash=0x763458, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.048] CryptDestroyHash (hHash=0x763458) returned 1 [0052.048] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.048] CryptHashData (hHash=0x7634d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.048] CryptGetHashParam (in: hHash=0x7634d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.048] CryptDestroyHash (hHash=0x7634d8) returned 1 [0052.048] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.048] CryptHashData (hHash=0x7637d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.048] CryptGetHashParam (in: hHash=0x7637d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.048] CryptDestroyHash (hHash=0x7637d8) returned 1 [0052.048] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.048] CryptHashData (hHash=0x763a58, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.048] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.048] CryptDestroyHash (hHash=0x763a58) returned 1 [0052.048] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.048] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.048] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.048] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.048] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.048] CryptHashData (hHash=0x7636d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.048] CryptGetHashParam (in: hHash=0x7636d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.048] CryptDestroyHash (hHash=0x7636d8) returned 1 [0052.048] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.079] CryptHashData (hHash=0x763318, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.079] CryptGetHashParam (in: hHash=0x763318, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.079] CryptDestroyHash (hHash=0x763318) returned 1 [0052.079] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.079] CryptHashData (hHash=0x7634d8, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.079] CryptGetHashParam (in: hHash=0x7634d8, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.079] CryptDestroyHash (hHash=0x7634d8) returned 1 [0052.079] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.079] CryptHashData (hHash=0x763958, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.079] CryptGetHashParam (in: hHash=0x763958, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.079] CryptDestroyHash (hHash=0x763958) returned 1 [0052.079] CryptCreateHash (in: hProv=0x76f1d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d960 | out: phHash=0x19d960) returned 1 [0052.079] CryptHashData (hHash=0x763a98, pbData=0x19d934, dwDataLen=0x2, dwFlags=0x0) returned 1 [0052.079] CryptGetHashParam (in: hHash=0x763a98, dwParam=0x2, pbData=0x19d924, pdwDataLen=0x19d958, dwFlags=0x0 | out: pbData=0x19d924, pdwDataLen=0x19d958) returned 1 [0052.079] CryptDestroyHash (hHash=0x763a98) returned 1 [0085.287] FreeLibrary (hLibModule=0x75260000) returned 1 [0085.328] LoadLibraryA (lpLibFileName="Advapi32.dll") returned 0x75260000 [0085.329] GetProcAddress (hModule=0x75260000, lpProcName="CryptAcquireContextA") returned 0x7527fc40 [0085.329] GetProcAddress (hModule=0x75260000, lpProcName="CryptCreateHash") returned 0x7527eed0 [0085.329] GetProcAddress (hModule=0x75260000, lpProcName="CryptHashData") returned 0x7527eef0 [0085.330] GetProcAddress (hModule=0x75260000, lpProcName="CryptGetHashParam") returned 0x7527ee70 [0085.330] GetProcAddress (hModule=0x75260000, lpProcName="CryptDestroyHash") returned 0x7527f0e0 [0085.330] GetProcAddress (hModule=0x75260000, lpProcName="CryptReleaseContext") returned 0x7527fbc0 [0085.330] CryptAcquireContextA (in: phProv=0x19d6a4, szContainer=0x0, szProvider="Microsoft Base Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19d6a4*=0x73f960) returned 1 [0085.332] CryptCreateHash (in: hProv=0x73f960, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d6a0 | out: phHash=0x19d6a0) returned 1 [0085.332] CryptHashData (hHash=0x763418, pbData=0x19d90c, dwDataLen=0x3, dwFlags=0x0) returned 1 [0085.332] CryptGetHashParam (in: hHash=0x763418, dwParam=0x2, pbData=0x19d67c, pdwDataLen=0x19d69c, dwFlags=0x0 | out: pbData=0x19d67c, pdwDataLen=0x19d69c) returned 1 [0085.332] CryptReleaseContext (hProv=0x73f960, dwFlags=0x0) returned 1 [0085.332] CryptDestroyHash (hHash=0x763418) returned 0 [0085.332] LoadLibraryA (lpLibFileName="Advapi32.dll") returned 0x75260000 [0085.333] GetProcAddress (hModule=0x75260000, lpProcName="CryptAcquireContextA") returned 0x7527fc40 [0085.333] GetProcAddress (hModule=0x75260000, lpProcName="CryptCreateHash") returned 0x7527eed0 [0085.333] GetProcAddress (hModule=0x75260000, lpProcName="CryptHashData") returned 0x7527eef0 [0085.333] GetProcAddress (hModule=0x75260000, lpProcName="CryptGetHashParam") returned 0x7527ee70 [0085.333] GetProcAddress (hModule=0x75260000, lpProcName="CryptDestroyHash") returned 0x7527f0e0 [0085.333] GetProcAddress (hModule=0x75260000, lpProcName="CryptReleaseContext") returned 0x7527fbc0 [0085.333] CryptAcquireContextA (in: phProv=0x19d6a4, szContainer=0x0, szProvider="Microsoft Base Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19d6a4*=0x73f960) returned 1 [0085.334] CryptCreateHash (in: hProv=0x73f960, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d6a0 | out: phHash=0x19d6a0) returned 1 [0085.334] CryptHashData (hHash=0x763818, pbData=0x19d90c, dwDataLen=0x3, dwFlags=0x0) returned 1 [0085.334] CryptGetHashParam (in: hHash=0x763818, dwParam=0x2, pbData=0x19d67c, pdwDataLen=0x19d69c, dwFlags=0x0 | out: pbData=0x19d67c, pdwDataLen=0x19d69c) returned 1 [0085.334] CryptReleaseContext (hProv=0x73f960, dwFlags=0x0) returned 1 [0085.334] CryptDestroyHash (hHash=0x763818) returned 0 [0085.334] LoadLibraryA (lpLibFileName="Advapi32.dll") returned 0x75260000 [0085.334] GetProcAddress (hModule=0x75260000, lpProcName="CryptAcquireContextA") returned 0x7527fc40 [0085.334] GetProcAddress (hModule=0x75260000, lpProcName="CryptCreateHash") returned 0x7527eed0 [0085.334] GetProcAddress (hModule=0x75260000, lpProcName="CryptHashData") returned 0x7527eef0 [0085.334] GetProcAddress (hModule=0x75260000, lpProcName="CryptGetHashParam") returned 0x7527ee70 [0085.334] GetProcAddress (hModule=0x75260000, lpProcName="CryptDestroyHash") returned 0x7527f0e0 [0085.334] GetProcAddress (hModule=0x75260000, lpProcName="CryptReleaseContext") returned 0x7527fbc0 [0085.334] CryptAcquireContextA (in: phProv=0x19d6a4, szContainer=0x0, szProvider="Microsoft Base Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19d6a4*=0x73f960) returned 1 [0085.335] CryptCreateHash (in: hProv=0x73f960, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d6a0 | out: phHash=0x19d6a0) returned 1 [0085.335] CryptHashData (hHash=0x763a58, pbData=0x19d90c, dwDataLen=0x3, dwFlags=0x0) returned 1 [0085.335] CryptGetHashParam (in: hHash=0x763a58, dwParam=0x2, pbData=0x19d67c, pdwDataLen=0x19d69c, dwFlags=0x0 | out: pbData=0x19d67c, pdwDataLen=0x19d69c) returned 1 [0085.335] CryptReleaseContext (hProv=0x73f960, dwFlags=0x0) returned 1 [0085.335] CryptDestroyHash (hHash=0x763a58) returned 0 [0085.335] LoadLibraryA (lpLibFileName="Advapi32.dll") returned 0x75260000 [0085.335] GetProcAddress (hModule=0x75260000, lpProcName="CryptAcquireContextA") returned 0x7527fc40 [0085.335] GetProcAddress (hModule=0x75260000, lpProcName="CryptCreateHash") returned 0x7527eed0 [0085.335] GetProcAddress (hModule=0x75260000, lpProcName="CryptHashData") returned 0x7527eef0 [0085.335] GetProcAddress (hModule=0x75260000, lpProcName="CryptGetHashParam") returned 0x7527ee70 [0085.336] GetProcAddress (hModule=0x75260000, lpProcName="CryptDestroyHash") returned 0x7527f0e0 [0085.336] GetProcAddress (hModule=0x75260000, lpProcName="CryptReleaseContext") returned 0x7527fbc0 [0085.336] CryptAcquireContextA (in: phProv=0x19d6a4, szContainer=0x0, szProvider="Microsoft Base Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19d6a4*=0x73f960) returned 1 [0085.336] CryptCreateHash (in: hProv=0x73f960, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d6a0 | out: phHash=0x19d6a0) returned 1 [0085.336] CryptHashData (hHash=0x763718, pbData=0x19d90c, dwDataLen=0x3, dwFlags=0x0) returned 1 [0085.336] CryptGetHashParam (in: hHash=0x763718, dwParam=0x2, pbData=0x19d67c, pdwDataLen=0x19d69c, dwFlags=0x0 | out: pbData=0x19d67c, pdwDataLen=0x19d69c) returned 1 [0085.336] CryptReleaseContext (hProv=0x73f960, dwFlags=0x0) returned 1 [0085.336] CryptDestroyHash (hHash=0x763718) returned 0 [0085.336] LoadLibraryA (lpLibFileName="Advapi32.dll") returned 0x75260000 [0085.337] GetProcAddress (hModule=0x75260000, lpProcName="CryptAcquireContextA") returned 0x7527fc40 [0085.337] GetProcAddress (hModule=0x75260000, lpProcName="CryptCreateHash") returned 0x7527eed0 [0085.337] GetProcAddress (hModule=0x75260000, lpProcName="CryptHashData") returned 0x7527eef0 [0085.337] GetProcAddress (hModule=0x75260000, lpProcName="CryptGetHashParam") returned 0x7527ee70 [0085.337] GetProcAddress (hModule=0x75260000, lpProcName="CryptDestroyHash") returned 0x7527f0e0 [0085.337] GetProcAddress (hModule=0x75260000, lpProcName="CryptReleaseContext") returned 0x7527fbc0 [0085.337] CryptAcquireContextA (in: phProv=0x19d6a4, szContainer=0x0, szProvider="Microsoft Base Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19d6a4*=0x73f960) returned 1 [0085.338] CryptCreateHash (in: hProv=0x73f960, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d6a0 | out: phHash=0x19d6a0) returned 1 [0085.338] CryptHashData (hHash=0x7634d8, pbData=0x19d90c, dwDataLen=0x3, dwFlags=0x0) returned 1 [0085.338] CryptGetHashParam (in: hHash=0x7634d8, dwParam=0x2, pbData=0x19d67c, pdwDataLen=0x19d69c, dwFlags=0x0 | out: pbData=0x19d67c, pdwDataLen=0x19d69c) returned 1 [0085.338] CryptReleaseContext (hProv=0x73f960, dwFlags=0x0) returned 1 [0085.338] CryptDestroyHash (hHash=0x7634d8) returned 0 [0085.338] LoadLibraryA (lpLibFileName="Advapi32.dll") returned 0x75260000 [0085.338] GetProcAddress (hModule=0x75260000, lpProcName="CryptAcquireContextA") returned 0x7527fc40 [0085.338] GetProcAddress (hModule=0x75260000, lpProcName="CryptCreateHash") returned 0x7527eed0 [0085.338] GetProcAddress (hModule=0x75260000, lpProcName="CryptHashData") returned 0x7527eef0 [0085.338] GetProcAddress (hModule=0x75260000, lpProcName="CryptGetHashParam") returned 0x7527ee70 [0085.338] GetProcAddress (hModule=0x75260000, lpProcName="CryptDestroyHash") returned 0x7527f0e0 [0085.338] GetProcAddress (hModule=0x75260000, lpProcName="CryptReleaseContext") returned 0x7527fbc0 [0085.338] CryptAcquireContextA (in: phProv=0x19d6a4, szContainer=0x0, szProvider="Microsoft Base Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19d6a4*=0x73f960) returned 1 [0085.339] CryptCreateHash (in: hProv=0x73f960, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d6a0 | out: phHash=0x19d6a0) returned 1 [0085.339] CryptHashData (hHash=0x763ad8, pbData=0x19d90c, dwDataLen=0x3, dwFlags=0x0) returned 1 [0085.339] CryptGetHashParam (in: hHash=0x763ad8, dwParam=0x2, pbData=0x19d67c, pdwDataLen=0x19d69c, dwFlags=0x0 | out: pbData=0x19d67c, pdwDataLen=0x19d69c) returned 1 [0085.339] CryptReleaseContext (hProv=0x73f960, dwFlags=0x0) returned 1 [0085.339] CryptDestroyHash (hHash=0x763ad8) returned 0 [0085.339] LoadLibraryA (lpLibFileName="Advapi32.dll") returned 0x75260000 [0085.339] GetProcAddress (hModule=0x75260000, lpProcName="CryptAcquireContextA") returned 0x7527fc40 [0085.339] GetProcAddress (hModule=0x75260000, lpProcName="CryptCreateHash") returned 0x7527eed0 [0085.339] GetProcAddress (hModule=0x75260000, lpProcName="CryptHashData") returned 0x7527eef0 [0085.339] GetProcAddress (hModule=0x75260000, lpProcName="CryptGetHashParam") returned 0x7527ee70 [0085.340] GetProcAddress (hModule=0x75260000, lpProcName="CryptDestroyHash") returned 0x7527f0e0 [0085.340] GetProcAddress (hModule=0x75260000, lpProcName="CryptReleaseContext") returned 0x7527fbc0 [0085.340] CryptAcquireContextA (in: phProv=0x19d6a4, szContainer=0x0, szProvider="Microsoft Base Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19d6a4*=0x73f960) returned 1 [0085.340] CryptCreateHash (in: hProv=0x73f960, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x19d6a0 | out: phHash=0x19d6a0) returned 1 [0085.340] CryptHashData (hHash=0x763958, pbData=0x19d90c, dwDataLen=0x4, dwFlags=0x0) returned 1 [0085.340] CryptGetHashParam (in: hHash=0x763958, dwParam=0x2, pbData=0x19d67c, pdwDataLen=0x19d69c, dwFlags=0x0 | out: pbData=0x19d67c, pdwDataLen=0x19d69c) returned 1 [0085.340] CryptReleaseContext (hProv=0x73f960, dwFlags=0x0) returned 1 [0085.340] CryptDestroyHash (hHash=0x763958) returned 0 [0085.340] LoadLibraryA (lpLibFileName="Kernel32.dll") returned 0x73b80000 [0085.341] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x72da0000 [0085.464] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x75260000 [0085.464] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x754e0000 [0085.464] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x755f0000 [0085.464] LoadLibraryA (lpLibFileName="Iphlpapi.dll") returned 0x72d70000 [0085.578] GetProcAddress (hModule=0x73b80000, lpProcName="VirtualFree") returned 0x73b969d0 [0085.578] GetProcAddress (hModule=0x75260000, lpProcName="CryptExportKey") returned 0x7527f700 [0085.578] GetProcAddress (hModule=0x73b80000, lpProcName="DeleteFileW") returned 0x73beed40 [0085.578] GetProcAddress (hModule=0x73b80000, lpProcName="GetLastError") returned 0x73b95010 [0085.578] GetProcAddress (hModule=0x73b80000, lpProcName="GetDriveTypeW") returned 0x73beeed0 [0085.579] GetProcAddress (hModule=0x73b80000, lpProcName="GetCommandLineW") returned 0x73b94cc0 [0085.579] GetProcAddress (hModule=0x73b80000, lpProcName="GetStartupInfoW") returned 0x73b95320 [0085.579] GetProcAddress (hModule=0x73b80000, lpProcName="FindNextFileW") returned 0x73beee40 [0085.579] GetProcAddress (hModule=0x73b80000, lpProcName="VirtualAlloc") returned 0x73b96970 [0085.579] GetProcAddress (hModule=0x75260000, lpProcName="GetUserNameA") returned 0x75282180 [0085.579] GetProcAddress (hModule=0x73b80000, lpProcName="ExitProcess") returned 0x73b93cb0 [0085.579] GetProcAddress (hModule=0x73b80000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x73b96b50 [0085.580] GetProcAddress (hModule=0x73b80000, lpProcName="CreateProcessA") returned 0x73b945b0 [0085.580] GetProcAddress (hModule=0x72d70000, lpProcName="GetIpNetTable") returned 0x72d827d0 [0085.580] GetProcAddress (hModule=0x73b80000, lpProcName="GetVersionExW") returned 0x73b956f0 [0085.580] GetProcAddress (hModule=0x73b80000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x73b96b30 [0085.580] GetProcAddress (hModule=0x73b80000, lpProcName="GetSystemDefaultLangID") returned 0x73b953d0 [0085.580] GetProcAddress (hModule=0x75260000, lpProcName="GetUserNameW") returned 0x7527f890 [0085.580] GetProcAddress (hModule=0x73b80000, lpProcName="ReadFile") returned 0x73bef090 [0085.580] GetProcAddress (hModule=0x75260000, lpProcName="RegQueryValueExA") returned 0x7527f020 [0085.581] GetProcAddress (hModule=0x73b80000, lpProcName="CloseHandle") returned 0x73beeab0 [0085.581] GetProcAddress (hModule=0x75260000, lpProcName="RegSetValueExW") returned 0x7527f530 [0085.581] GetProcAddress (hModule=0x75260000, lpProcName="RegCloseKey") returned 0x7527ed60 [0085.581] GetProcAddress (hModule=0x73b80000, lpProcName="CopyFileA") returned 0x73bcceb0 [0085.581] GetProcAddress (hModule=0x73b80000, lpProcName="SetFileAttributesW") returned 0x73bef100 [0085.581] GetProcAddress (hModule=0x73b80000, lpProcName="WinExec") returned 0x73bd2b00 [0085.581] GetProcAddress (hModule=0x75260000, lpProcName="CryptDeriveKey") returned 0x75292c90 [0085.581] GetProcAddress (hModule=0x75260000, lpProcName="CryptGenKey") returned 0x75283430 [0085.582] GetProcAddress (hModule=0x73b80000, lpProcName="Sleep") returned 0x73b96760 [0085.582] GetProcAddress (hModule=0x73b80000, lpProcName="GetCurrentProcess") returned 0x73beea10 [0085.582] GetProcAddress (hModule=0x755f0000, lpProcName="ShellExecuteW") returned 0x757542e0 [0085.582] GetProcAddress (hModule=0x73b80000, lpProcName="GetFileSize") returned 0x73beef30 [0085.582] GetProcAddress (hModule=0x73b80000, lpProcName="GlobalAlloc") returned 0x73b95750 [0085.582] GetProcAddress (hModule=0x73b80000, lpProcName="FindClose") returned 0x73beed70 [0085.582] GetProcAddress (hModule=0x73b80000, lpProcName="WaitForMultipleObjects") returned 0x73beec80 [0085.583] GetProcAddress (hModule=0x73b80000, lpProcName="GetModuleFileNameA") returned 0x73b95070 [0085.583] GetProcAddress (hModule=0x755f0000, lpProcName="ShellExecuteA") returned 0x757f3ef0 [0085.583] GetProcAddress (hModule=0x73b80000, lpProcName="GetModuleHandleA") returned 0x73b950b0 [0085.583] GetProcAddress (hModule=0x73b80000, lpProcName="GetModuleFileNameW") returned 0x73b95090 [0085.583] GetProcAddress (hModule=0x73b80000, lpProcName="CreateFileA") returned 0x73beed00 [0085.583] GetProcAddress (hModule=0x73b80000, lpProcName="GetFileSizeEx") returned 0x73beef40 [0085.583] GetProcAddress (hModule=0x73b80000, lpProcName="WriteFile") returned 0x73bef180 [0085.583] GetProcAddress (hModule=0x73b80000, lpProcName="GetLogicalDrives") returned 0x73b90d20 [0085.584] GetProcAddress (hModule=0x72da0000, lpProcName="WNetEnumResourceA") returned 0x72dac6d0 [0085.584] GetProcAddress (hModule=0x75260000, lpProcName="RegOpenKeyExW") returned 0x7527e580 [0085.584] GetProcAddress (hModule=0x72da0000, lpProcName="WNetCloseEnum") returned 0x72da2640 [0085.584] GetProcAddress (hModule=0x73b80000, lpProcName="GetWindowsDirectoryW") returned 0x73b95730 [0085.584] GetProcAddress (hModule=0x73b80000, lpProcName="SetFileAttributesA") returned 0x73bef0f0 [0085.584] GetProcAddress (hModule=0x75260000, lpProcName="RegOpenKeyExA") returned 0x7527f210 [0085.584] GetProcAddress (hModule=0x73b80000, lpProcName="SetFilePointer") returned 0x73bef120 [0085.584] GetProcAddress (hModule=0x73b80000, lpProcName="GetTickCount") returned 0x73bedd50 [0085.585] GetProcAddress (hModule=0x73b80000, lpProcName="GetFileAttributesW") returned 0x73beef10 [0085.585] GetProcAddress (hModule=0x73b80000, lpProcName="FindFirstFileW") returned 0x73beedf0 [0085.585] GetProcAddress (hModule=0x75260000, lpProcName="CryptAcquireContextW") returned 0x7527fa40 [0085.585] GetProcAddress (hModule=0x73b80000, lpProcName="MoveFileExW") returned 0x73b94370 [0085.585] GetProcAddress (hModule=0x72da0000, lpProcName="WNetOpenEnumA") returned 0x72dad140 [0085.585] GetProcAddress (hModule=0x754e0000, lpProcName="CoInitialize") returned 0x75516a60 [0085.585] GetProcAddress (hModule=0x75260000, lpProcName="CryptDecrypt") returned 0x75283350 [0085.586] GetProcAddress (hModule=0x75260000, lpProcName="CryptImportKey") returned 0x7527f6a0 [0085.586] GetProcAddress (hModule=0x73b80000, lpProcName="SetFilePointerEx") returned 0x73bef130 [0085.586] GetProcAddress (hModule=0x73b80000, lpProcName="CopyFileW") returned 0x73bef3b0 [0085.586] GetProcAddress (hModule=0x73b80000, lpProcName="FreeLibrary") returned 0x73b94c40 [0085.586] GetProcAddress (hModule=0x73b80000, lpProcName="CreateProcessW") returned 0x73b94610 [0085.586] GetProcAddress (hModule=0x73b80000, lpProcName="CreateDirectoryW") returned 0x73beece0 [0085.586] GetProcAddress (hModule=0x73b80000, lpProcName="CreateThread") returned 0x73b946b0 [0085.586] GetProcAddress (hModule=0x75260000, lpProcName="CryptDestroyKey") returned 0x7527fa60 [0085.587] GetProcAddress (hModule=0x754e0000, lpProcName="CoCreateInstance") returned 0x74a57490 [0085.587] GetProcAddress (hModule=0x73b80000, lpProcName="CreateFileW") returned 0x73beed10 [0085.587] GetProcAddress (hModule=0x73b80000, lpProcName="GetFileAttributesA") returned 0x73beeee0 [0085.587] GetProcAddress (hModule=0x75260000, lpProcName="CryptEncrypt") returned 0x75292cf0 [0085.587] GetProcAddress (hModule=0x75260000, lpProcName="RegDeleteValueW") returned 0x75280580 [0085.587] GetProcAddress (hModule=0x75260000, lpProcName="EnumServicesStatusW") returned 0x752a4350 [0085.587] GetProcAddress (hModule=0x75260000, lpProcName="GetTokenInformation") returned 0x7527ee90 [0085.588] GetProcAddress (hModule=0x75260000, lpProcName="ImpersonateSelf") returned 0x75280960 [0085.588] GetProcAddress (hModule=0x75260000, lpProcName="LookupPrivilegeValueW") returned 0x75278c80 [0085.588] GetProcAddress (hModule=0x75260000, lpProcName="OpenProcessToken") returned 0x7527efb0 [0085.588] GetProcAddress (hModule=0x75260000, lpProcName="OpenSCManagerW") returned 0x75280540 [0085.588] GetProcAddress (hModule=0x75260000, lpProcName="OpenThreadToken") returned 0x7527eeb0 [0085.588] GetProcAddress (hModule=0x75260000, lpProcName="AdjustTokenPrivileges") returned 0x7527ffa0 [0085.588] GetProcAddress (hModule=0x73b80000, lpProcName="VirtualAllocEx") returned 0x73b96990 [0085.588] GetProcAddress (hModule=0x75260000, lpProcName="LookupAccountSidW") returned 0x7527f100 [0085.588] GetProcAddress (hModule=0x755f0000, lpProcName="CommandLineToArgvW") returned 0x7574cc20 [0085.589] GetProcAddress (hModule=0x73b80000, lpProcName="WriteProcessMemory") returned 0x73b96b70 [0085.589] GetProcAddress (hModule=0x73b80000, lpProcName="VirtualFreeEx") returned 0x73b969f0 [0085.589] GetProcAddress (hModule=0x73b80000, lpProcName="CreateRemoteThread") returned 0x73b94670 [0085.589] GetProcAddress (hModule=0x72d70000, lpProcName="GetAdaptersAddresses") returned 0x72d76190 [0085.589] GetProcAddress (hModule=0x72d70000, lpProcName="IcmpCloseHandle") returned 0x72d7dfa0 [0085.589] GetProcAddress (hModule=0x72d70000, lpProcName="IcmpCreateFile") returned 0x72d90590 [0085.589] GetProcAddress (hModule=0x72d70000, lpProcName="IcmpSendEcho") returned 0x72d90ab0 [0085.589] SetLastError (dwErrCode=0x0) [0085.589] GetCommandLineW () returned="\"C:\\Users\\FD1HVy\\Desktop\\YeSVw.exe\" " [0085.590] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\FD1HVy\\Desktop\\YeSVw.exe\" ", pNumArgs=0x19f7b0 | out: pNumArgs=0x19f7b0) returned 0x7e75f8*="C:\\Users\\FD1HVy\\Desktop\\YeSVw.exe" [0085.590] GetLastError () returned 0x0 [0085.590] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x19e988, nSize=0x3e8 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\YeSVw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\yesvw.exe")) returned 0x21 [0085.590] GetTickCount () returned 0x1156b0b [0085.594] GetLastError () returned 0x0 [0085.602] SetLastError (dwErrCode=0x0) [0085.602] GetLastError () returned 0x0 [0085.602] SetLastError (dwErrCode=0x0) [0085.602] GetLastError () returned 0x0 [0085.602] SetLastError (dwErrCode=0x0) [0085.602] GetLastError () returned 0x0 [0085.602] SetLastError (dwErrCode=0x0) [0085.602] GetLastError () returned 0x0 [0085.602] SetLastError (dwErrCode=0x0) [0085.602] GetLastError () returned 0x0 [0085.602] SetLastError (dwErrCode=0x0) [0085.602] GetLastError () returned 0x0 [0085.602] SetLastError (dwErrCode=0x0) [0085.602] GetLastError () returned 0x0 [0085.602] SetLastError (dwErrCode=0x0) [0085.602] GetLastError () returned 0x0 [0085.603] SetLastError (dwErrCode=0x0) [0085.603] GetLastError () returned 0x0 [0085.603] SetLastError (dwErrCode=0x0) [0085.603] GetLastError () returned 0x0 [0085.603] SetLastError (dwErrCode=0x0) [0085.603] GetLastError () returned 0x0 [0085.603] SetLastError (dwErrCode=0x0) [0085.603] GetLastError () returned 0x0 [0085.603] SetLastError (dwErrCode=0x0) [0085.603] GetLastError () returned 0x0 [0085.603] SetLastError (dwErrCode=0x0) [0085.603] GetLastError () returned 0x0 [0085.603] SetLastError (dwErrCode=0x0) [0085.603] GetLastError () returned 0x0 [0085.603] SetLastError (dwErrCode=0x0) [0085.603] GetLastError () returned 0x0 [0085.603] SetLastError (dwErrCode=0x0) [0085.603] GetLastError () returned 0x0 [0085.603] SetLastError (dwErrCode=0x0) [0085.603] GetLastError () returned 0x0 [0085.603] SetLastError (dwErrCode=0x0) [0085.603] GetLastError () returned 0x0 [0085.603] SetLastError (dwErrCode=0x0) [0085.603] GetLastError () returned 0x0 [0085.603] SetLastError (dwErrCode=0x0) [0085.603] GetLastError () returned 0x0 [0085.603] SetLastError (dwErrCode=0x0) [0085.603] GetLastError () returned 0x0 [0085.603] SetLastError (dwErrCode=0x0) [0085.603] GetLastError () returned 0x0 [0085.603] SetLastError (dwErrCode=0x0) [0085.603] GetLastError () returned 0x0 [0085.603] SetLastError (dwErrCode=0x0) [0085.603] GetLastError () returned 0x0 [0085.604] SetLastError (dwErrCode=0x0) [0085.604] GetLastError () returned 0x0 [0085.604] SetLastError (dwErrCode=0x0) [0085.604] GetLastError () returned 0x0 [0085.604] SetLastError (dwErrCode=0x0) [0085.604] GetLastError () returned 0x0 [0085.604] SetLastError (dwErrCode=0x0) [0085.604] GetLastError () returned 0x0 [0085.604] SetLastError (dwErrCode=0x0) [0085.604] GetLastError () returned 0x0 [0085.604] SetLastError (dwErrCode=0x0) [0085.604] GetLastError () returned 0x0 [0085.604] SetLastError (dwErrCode=0x0) [0085.604] GetLastError () returned 0x0 [0085.604] SetLastError (dwErrCode=0x0) [0085.604] GetLastError () returned 0x0 [0085.604] SetLastError (dwErrCode=0x0) [0085.604] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\YeSVw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\yesvw.exe"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\SCcawBEQYlan.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\sccawbeqylan.exe"), bFailIfExists=0) returned 1 [0085.895] SetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\SCcawBEQYlan.exe", dwFileAttributes=0x2) returned 1 [0085.895] ShellExecuteW (hwnd=0x0, lpOperation=0x0, lpFile="C:\\Users\\FD1HVy\\Desktop\\SCcawBEQYlan.exe", lpParameters="8 LAN", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0091.846] Sleep (dwMilliseconds=0x1388) [0096.859] GetTickCount () returned 0x115970c [0096.864] GetLastError () returned 0x0 [0096.874] SetLastError (dwErrCode=0x0) [0096.874] GetLastError () returned 0x0 [0096.874] SetLastError (dwErrCode=0x0) [0096.874] GetLastError () returned 0x0 [0096.874] SetLastError (dwErrCode=0x0) [0096.874] GetLastError () returned 0x0 [0096.874] SetLastError (dwErrCode=0x0) [0096.874] GetLastError () returned 0x0 [0096.874] SetLastError (dwErrCode=0x0) [0096.874] GetLastError () returned 0x0 [0096.874] SetLastError (dwErrCode=0x0) [0096.874] GetLastError () returned 0x0 [0096.874] SetLastError (dwErrCode=0x0) [0096.874] GetLastError () returned 0x0 [0096.874] SetLastError (dwErrCode=0x0) [0096.874] GetLastError () returned 0x0 [0096.874] SetLastError (dwErrCode=0x0) [0096.874] GetLastError () returned 0x0 [0096.874] SetLastError (dwErrCode=0x0) [0096.874] GetLastError () returned 0x0 [0096.875] SetLastError (dwErrCode=0x0) [0096.875] GetLastError () returned 0x0 [0096.875] SetLastError (dwErrCode=0x0) [0096.875] GetLastError () returned 0x0 [0096.875] SetLastError (dwErrCode=0x0) [0096.875] GetLastError () returned 0x0 [0096.875] SetLastError (dwErrCode=0x0) [0096.875] GetLastError () returned 0x0 [0096.875] SetLastError (dwErrCode=0x0) [0096.875] GetLastError () returned 0x0 [0096.875] SetLastError (dwErrCode=0x0) [0096.875] GetLastError () returned 0x0 [0096.875] SetLastError (dwErrCode=0x0) [0096.875] GetLastError () returned 0x0 [0096.875] SetLastError (dwErrCode=0x0) [0096.875] GetLastError () returned 0x0 [0096.875] SetLastError (dwErrCode=0x0) [0096.875] GetLastError () returned 0x0 [0096.875] SetLastError (dwErrCode=0x0) [0096.875] GetLastError () returned 0x0 [0096.875] SetLastError (dwErrCode=0x0) [0096.875] GetLastError () returned 0x0 [0096.875] SetLastError (dwErrCode=0x0) [0096.875] GetLastError () returned 0x0 [0096.875] SetLastError (dwErrCode=0x0) [0096.875] GetLastError () returned 0x0 [0096.875] SetLastError (dwErrCode=0x0) [0096.875] GetLastError () returned 0x0 [0096.875] SetLastError (dwErrCode=0x0) [0096.875] GetLastError () returned 0x0 [0096.875] SetLastError (dwErrCode=0x0) [0096.875] GetLastError () returned 0x0 [0096.876] SetLastError (dwErrCode=0x0) [0096.876] GetLastError () returned 0x0 [0096.876] SetLastError (dwErrCode=0x0) [0096.876] GetLastError () returned 0x0 [0096.876] SetLastError (dwErrCode=0x0) [0096.876] GetLastError () returned 0x0 [0096.876] SetLastError (dwErrCode=0x0) [0096.876] GetLastError () returned 0x0 [0096.876] SetLastError (dwErrCode=0x0) [0096.876] GetLastError () returned 0x0 [0096.876] SetLastError (dwErrCode=0x0) [0096.876] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\YeSVw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\yesvw.exe"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\LhzeuvWtslan.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\lhzeuvwtslan.exe"), bFailIfExists=0) returned 1 [0097.179] SetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\LhzeuvWtslan.exe", dwFileAttributes=0x2) returned 1 [0097.179] ShellExecuteW (hwnd=0x0, lpOperation=0x0, lpFile="C:\\Users\\FD1HVy\\Desktop\\LhzeuvWtslan.exe", lpParameters="8 LAN", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0097.295] Sleep (dwMilliseconds=0x1388) [0102.402] LocalFree (hMem=0x7e75f8) returned 0x0 [0102.402] GetVersionExW (in: lpVersionInformation=0x19f694*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x19f694*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0102.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35004060, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ac [0102.407] SetLastError (dwErrCode=0x0) [0102.408] GetCurrentThread () returned 0xfffffffe [0102.408] OpenThreadToken (in: ThreadHandle=0xfffffffe, DesiredAccess=0x28, OpenAsSelf=0, TokenHandle=0x19e164 | out: TokenHandle=0x19e164*=0x0) returned 0 [0102.408] GetLastError () returned 0x3f0 [0102.408] ImpersonateSelf (ImpersonationLevel=0x2) returned 1 [0102.408] GetCurrentThread () returned 0xfffffffe [0102.408] OpenThreadToken (in: ThreadHandle=0xfffffffe, DesiredAccess=0x28, OpenAsSelf=0, TokenHandle=0x19e164 | out: TokenHandle=0x19e164*=0x380) returned 1 [0102.412] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeBackupPrivilege", lpLuid=0x19d8c4 | out: lpLuid=0x19d8c4*(LowPart=0x11, HighPart=0)) returned 1 [0102.414] AdjustTokenPrivileges (in: TokenHandle=0x380, DisableAllPrivileges=0, NewState=0x19d8b4*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x11, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0102.415] GetLastError () returned 0x0 [0102.415] GetVersionExW (in: lpVersionInformation=0x19d7c4*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x19d7c4*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0102.415] GetWindowsDirectoryW (in: lpBuffer=0x35158318, uSize=0x64 | out: lpBuffer="C:\\WINDOWS") returned 0xa [0102.415] GetWindowsDirectoryW (in: lpBuffer=0x351584c8, uSize=0x140 | out: lpBuffer="C:\\WINDOWS") returned 0xa [0102.424] CryptAcquireContextW (in: phProv=0x351584c0, szContainer="AES_unique_", szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0x10 | out: phProv=0x351584c0*=0x0) returned 0 [0102.923] CryptAcquireContextW (in: phProv=0x351584c0, szContainer="AES_unique_", szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0x20 | out: phProv=0x351584c0*=0x0) returned 0 [0102.935] CryptAcquireContextW (in: phProv=0x351584c0, szContainer="AES_unique_", szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0x28 | out: phProv=0x351584c0*=0x265f4d8) returned 1 [0102.941] CryptImportKey (in: hProv=0x265f4d8, pbData=0x35018e10, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x1, phKey=0x351584c4 | out: phKey=0x351584c4*=0x763c58) returned 1 [0102.942] Sleep (dwMilliseconds=0x3e8) [0104.085] WinExec (lpCmdLine="cmd.exe /c \"WMIC.exe shadowcopy delete\"", uCmdShow=0x0) returned 0x21 [0104.569] WinExec (lpCmdLine="cmd.exe /c \"vssadmin.exe Delete Shadows /all /quiet\"", uCmdShow=0x0) returned 0x21 [0104.582] WinExec (lpCmdLine="cmd.exe /c \"bcdedit /set {default} recoveryenabled No & bcdedit /set {default}\"", uCmdShow=0x0) returned 0x21 [0104.595] WinExec (lpCmdLine="cmd.exe /c \"bootstatuspolicy ignoreallfailures\"", uCmdShow=0x0) returned 0x21 [0104.607] GetLogicalDrives () returned 0x4 [0104.607] WinExec (lpCmdLine="icacls \"C:\\*\" /grant Everyone:F /T /C /Qÿ", uCmdShow=0x0) returned 0x21 [0105.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35004060, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x464 [0105.048] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x42d0000 [0105.048] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x43d0000 [0105.049] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x43e0000 [0105.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x44e0000 [0105.049] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x44f0000 [0105.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x45f0000 [0105.050] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x4600000 [0105.050] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4700000 [0105.050] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x4710000 [0105.050] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4810000 [0105.050] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x4820000 [0105.051] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4920000 [0105.051] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x4930000 [0105.051] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4a30000 [0105.051] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x4a40000 [0105.051] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4b40000 [0105.052] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x4b50000 [0105.052] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4c50000 [0105.052] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x4c60000 [0105.052] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4d60000 [0105.053] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x4d70000 [0105.053] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4e70000 [0105.053] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x4e80000 [0105.053] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4f80000 [0105.053] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x4f90000 [0105.054] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x5090000 [0105.054] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x50a0000 [0105.054] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x51a0000 [0105.054] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x51b0000 [0105.055] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x52b0000 [0105.055] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x52c0000 [0105.055] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x53c0000 [0105.055] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x53d0000 [0105.056] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x54d0000 [0105.056] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x54e0000 [0105.056] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x55e0000 [0105.056] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x55f0000 [0105.056] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x56f0000 [0105.057] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x5700000 [0105.057] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x5800000 [0105.057] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x5810000 [0105.057] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x5910000 [0105.058] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x5920000 [0105.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x5a20000 [0105.058] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x5a30000 [0105.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x5b30000 [0105.059] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x5b40000 [0105.059] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x5c40000 [0105.059] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x5c50000 [0105.059] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x5d50000 [0105.060] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x5d60000 [0105.060] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x5e60000 [0105.060] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e70000 [0105.060] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x5f70000 [0105.061] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x5f80000 [0105.061] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x6080000 [0105.061] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x6090000 [0105.061] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x6190000 [0105.062] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x61a0000 [0105.062] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x62a0000 [0105.062] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x62b0000 [0105.062] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x63b0000 [0105.063] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x63c0000 [0105.063] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x64c0000 [0105.063] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x64d0000 [0105.063] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x65d0000 [0105.064] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x65e0000 [0105.064] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x66e0000 [0105.064] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x66f0000 [0105.064] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x67f0000 [0105.065] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x6800000 [0105.065] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x6900000 [0105.065] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x6910000 [0105.065] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x6a10000 [0105.066] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x6a20000 [0105.066] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x6b20000 [0105.066] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x6b30000 [0105.066] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x6c30000 [0105.067] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x6c40000 [0105.067] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x6d40000 [0105.067] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x6d50000 [0105.068] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x6e50000 [0105.068] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x6e60000 [0105.068] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x6f60000 [0105.068] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x6f70000 [0105.069] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x7070000 [0105.069] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x7080000 [0105.507] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x71b0000 [0105.508] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x71c0000 [0105.508] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x72c0000 [0105.508] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x72d0000 [0105.509] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x73d0000 [0105.509] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x73e0000 [0105.509] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x74e0000 [0105.509] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x74f0000 [0105.510] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x75f0000 [0105.510] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x7600000 [0105.510] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x7700000 [0105.511] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x7710000 [0105.511] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x7810000 [0105.511] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x7820000 [0105.512] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x7920000 [0105.513] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x7930000 [0105.514] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x7a30000 [0105.514] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x7a40000 [0105.514] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x7b40000 [0105.514] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x7b50000 [0105.515] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x7c50000 [0105.515] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x7c60000 [0105.515] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x7d60000 [0105.516] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x7d70000 [0105.516] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x7e70000 [0105.516] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x7e80000 [0105.517] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x7f80000 [0105.517] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x7f90000 [0105.517] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x8090000 [0105.518] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x80a0000 [0105.518] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x81a0000 [0105.518] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x81b0000 [0105.518] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x82b0000 [0105.519] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x82c0000 [0105.519] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x83c0000 [0105.519] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x83d0000 [0105.520] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x84d0000 [0105.520] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x84e0000 [0105.520] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x85e0000 [0105.521] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x85f0000 [0105.521] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x86f0000 [0105.521] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x8700000 [0105.522] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x8800000 [0105.522] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x8810000 [0105.522] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x8910000 [0105.523] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x8920000 [0105.523] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x8a20000 [0105.524] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x8a30000 [0105.524] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x8b30000 [0105.524] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x8b40000 [0105.525] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x8c40000 [0105.525] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x8c50000 [0105.525] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x8d50000 [0105.525] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x8d60000 [0105.526] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x8e60000 [0105.526] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x8e70000 [0105.526] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x8f70000 [0105.527] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x8f80000 [0105.527] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x9080000 [0105.527] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x9090000 [0105.528] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x9190000 [0105.528] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x91a0000 [0105.528] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x92a0000 [0105.529] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x92b0000 [0105.529] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x93b0000 [0105.529] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x93c0000 [0105.530] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x94c0000 [0105.530] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x94d0000 [0105.530] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x95d0000 [0105.531] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x95e0000 [0105.531] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x96e0000 [0105.532] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x96f0000 [0105.532] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x97f0000 [0105.532] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x9800000 [0105.533] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x9900000 [0105.533] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x9910000 [0105.533] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x9a10000 [0105.534] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x9a20000 [0105.534] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x9b20000 [0105.534] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x9b30000 [0105.535] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x9c30000 [0105.535] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x9c40000 [0105.535] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x9d40000 [0105.536] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x9d50000 [0105.536] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x9e50000 [0105.537] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x9e60000 [0105.537] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x9f60000 [0105.537] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x9f70000 [0105.538] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xa070000 [0105.538] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0xa080000 [0105.538] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xa180000 [0105.539] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0xa190000 [0105.539] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0xa290000 [0105.540] GetTempPathW (in: nBufferLength=0x1388, lpBuffer=0x351544d8 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\") returned 0x23 [0105.540] SetLastError (dwErrCode=0x0) [0105.540] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\RyukReadMe.html" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0107.963] GetLastError () returned 0x0 [0107.963] WriteFile (in: hFile=0x470, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19d8d0, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19d8d0*=0x273, lpOverlapped=0x0) returned 1 [0107.964] CloseHandle (hObject=0x470) returned 1 [0107.965] GetLogicalDrives () returned 0x4 [0107.966] GetDriveTypeW (lpRootPathName="C:") returned 0x3 [0107.966] FindFirstFileW (in: lpFileName="C:\\*.*", lpFindFileData=0x19d608 | out: lpFindFileData=0x19d608*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x2f24e80 [0107.966] SetLastError (dwErrCode=0x0) [0107.966] CreateFileW (lpFileName="C:\\RyukReadMe.html" (normalized: "c:\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x528 [0108.198] GetLastError () returned 0x0 [0108.198] WriteFile (in: hFile=0x528, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19d204, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19d204*=0x273, lpOverlapped=0x0) returned 1 [0108.199] CloseHandle (hObject=0x528) returned 1 [0108.199] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\*.*", lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24b40 [0108.201] FindNextFileW (in: hFindFile=0x2f24b40, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.201] FindNextFileW (in: hFindFile=0x2f24b40, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0108.201] SetLastError (dwErrCode=0x0) [0108.201] CreateFileW (lpFileName="C:\\$GetCurrent\\RyukReadMe.html" (normalized: "c:\\$getcurrent\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x530 [0108.202] GetLastError () returned 0x0 [0108.202] WriteFile (in: hFile=0x530, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb38, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb38*=0x273, lpOverlapped=0x0) returned 1 [0108.203] CloseHandle (hObject=0x530) returned 1 [0108.203] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\Logs\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24bc0 [0108.207] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.207] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1 [0108.207] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0108.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350200f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52c [0108.208] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0108.209] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1 [0108.209] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0108.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350237c4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x534 [0108.210] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0108.210] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1 [0108.210] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0108.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35026e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45c [0108.211] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0108.212] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0 [0108.212] FindClose (in: hFindFile=0x2f24bc0 | out: hFindFile=0x2f24bc0) returned 1 [0108.213] SetLastError (dwErrCode=0x0) [0108.213] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\RyukReadMe.html" (normalized: "c:\\$getcurrent\\logs\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x530 [0108.213] GetLastError () returned 0x0 [0108.213] WriteFile (in: hFile=0x530, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0108.214] CloseHandle (hObject=0x530) returned 1 [0108.214] FindNextFileW (in: hFindFile=0x2f24b40, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0108.214] SetLastError (dwErrCode=0x0) [0108.214] CreateFileW (lpFileName="C:\\$GetCurrent\\RyukReadMe.html" (normalized: "c:\\$getcurrent\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x530 [0108.215] GetLastError () returned 0xb7 [0108.215] CloseHandle (hObject=0x530) returned 1 [0108.215] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24b80 [0108.218] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.218] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1 [0108.218] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1 [0108.218] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1 [0108.218] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0108.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3502a55c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53c [0108.219] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0108.220] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1 [0108.220] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0108.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3502dc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x540 [0108.221] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0108.221] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1 [0108.221] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0108.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350312f4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x538 [0108.222] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0108.223] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0 [0108.223] FindClose (in: hFindFile=0x2f24b80 | out: hFindFile=0x2f24b80) returned 1 [0108.223] SetLastError (dwErrCode=0x0) [0108.223] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\RyukReadMe.html" (normalized: "c:\\$getcurrent\\safeos\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x530 [0108.224] GetLastError () returned 0x0 [0108.224] WriteFile (in: hFile=0x530, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0108.225] CloseHandle (hObject=0x530) returned 1 [0108.225] FindNextFileW (in: hFindFile=0x2f24b40, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0108.225] FindClose (in: hFindFile=0x2f24b40 | out: hFindFile=0x2f24b40) returned 1 [0108.225] SetLastError (dwErrCode=0x0) [0108.226] CreateFileW (lpFileName="C:\\$GetCurrent\\RyukReadMe.html" (normalized: "c:\\$getcurrent\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x528 [0108.226] GetLastError () returned 0xb7 [0108.226] CloseHandle (hObject=0x528) returned 1 [0108.226] FindNextFileW (in: hFindFile=0x2f24e80, lpFindFileData=0x19d608 | out: lpFindFileData=0x19d608*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0108.226] SetLastError (dwErrCode=0x0) [0108.226] CreateFileW (lpFileName="C:\\RyukReadMe.html" (normalized: "c:\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x528 [0108.226] GetLastError () returned 0xb7 [0108.226] CloseHandle (hObject=0x528) returned 1 [0108.226] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*.*", lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f246c0 [0108.226] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.226] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0108.226] SetLastError (dwErrCode=0x0) [0108.226] CreateFileW (lpFileName="C:\\$Recycle.Bin\\RyukReadMe.html" (normalized: "c:\\$recycle.bin\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x530 [0108.227] GetLastError () returned 0x0 [0108.227] WriteFile (in: hFile=0x530, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb38, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb38*=0x273, lpOverlapped=0x0) returned 1 [0108.228] CloseHandle (hObject=0x530) returned 1 [0108.229] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24740 [0108.229] FindNextFileW (in: hFindFile=0x2f24740, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.229] FindNextFileW (in: hFindFile=0x2f24740, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0108.229] FindNextFileW (in: hFindFile=0x2f24740, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0108.229] FindClose (in: hFindFile=0x2f24740 | out: hFindFile=0x2f24740) returned 1 [0108.229] SetLastError (dwErrCode=0x0) [0108.229] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\RyukReadMe.html" (normalized: "c:\\$recycle.bin\\s-1-5-18\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x530 [0108.230] GetLastError () returned 0x0 [0108.230] WriteFile (in: hFile=0x530, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0108.232] CloseHandle (hObject=0x530) returned 1 [0108.232] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0108.232] SetLastError (dwErrCode=0x0) [0108.232] CreateFileW (lpFileName="C:\\$Recycle.Bin\\RyukReadMe.html" (normalized: "c:\\$recycle.bin\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x530 [0108.232] GetLastError () returned 0xb7 [0108.232] CloseHandle (hObject=0x530) returned 1 [0108.232] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f248c0 [0108.232] FindNextFileW (in: hFindFile=0x2f248c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.232] FindNextFileW (in: hFindFile=0x2f248c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0108.232] FindNextFileW (in: hFindFile=0x2f248c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0108.232] FindClose (in: hFindFile=0x2f248c0 | out: hFindFile=0x2f248c0) returned 1 [0108.232] SetLastError (dwErrCode=0x0) [0108.232] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\RyukReadMe.html" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x530 [0108.234] GetLastError () returned 0x0 [0108.234] WriteFile (in: hFile=0x530, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0108.235] CloseHandle (hObject=0x530) returned 1 [0108.235] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0108.235] FindClose (in: hFindFile=0x2f246c0 | out: hFindFile=0x2f246c0) returned 1 [0108.235] SetLastError (dwErrCode=0x0) [0108.235] CreateFileW (lpFileName="C:\\$Recycle.Bin\\RyukReadMe.html" (normalized: "c:\\$recycle.bin\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x528 [0108.235] GetLastError () returned 0xb7 [0108.235] CloseHandle (hObject=0x528) returned 1 [0108.235] FindNextFileW (in: hFindFile=0x2f24e80, lpFindFileData=0x19d608 | out: lpFindFileData=0x19d608*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0108.235] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0108.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350200f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x548 [0108.661] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0108.661] FindNextFileW (in: hFindFile=0x2f24e80, lpFindFileData=0x19d608 | out: lpFindFileData=0x19d608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0108.661] SetLastError (dwErrCode=0x0) [0108.662] CreateFileW (lpFileName="C:\\RyukReadMe.html" (normalized: "c:\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x528 [0108.662] GetLastError () returned 0xb7 [0108.662] CloseHandle (hObject=0x528) returned 1 [0108.662] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\*.*", lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24800 [0108.664] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.665] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1025", cAlternateFileName="")) returned 1 [0108.665] SetLastError (dwErrCode=0x0) [0108.665] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x544 [0108.665] GetLastError () returned 0x0 [0108.665] WriteFile (in: hFile=0x544, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb38, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb38*=0x273, lpOverlapped=0x0) returned 1 [0108.666] CloseHandle (hObject=0x544) returned 1 [0108.666] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24a00 [0108.667] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.667] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0108.667] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0108.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350237c4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x530 [0108.668] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0108.669] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0108.669] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0108.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35026e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54c [0108.670] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0108.670] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0108.670] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0108.670] FindClose (in: hFindFile=0x2f24a00 | out: hFindFile=0x2f24a00) returned 1 [0108.670] SetLastError (dwErrCode=0x0) [0108.670] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\1025\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x544 [0108.673] GetLastError () returned 0x0 [0108.673] WriteFile (in: hFile=0x544, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0108.673] CloseHandle (hObject=0x544) returned 1 [0108.674] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028", cAlternateFileName="")) returned 1 [0108.674] SetLastError (dwErrCode=0x0) [0108.674] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x544 [0108.674] GetLastError () returned 0xb7 [0108.674] CloseHandle (hObject=0x544) returned 1 [0108.674] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24840 [0108.674] FindNextFileW (in: hFindFile=0x2f24840, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.675] FindNextFileW (in: hFindFile=0x2f24840, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0108.675] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0108.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3502a55c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x550 [0108.676] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0108.676] FindNextFileW (in: hFindFile=0x2f24840, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0108.676] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0108.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3502dc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x554 [0108.677] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0108.678] FindNextFileW (in: hFindFile=0x2f24840, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0108.678] FindNextFileW (in: hFindFile=0x2f24840, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0108.678] FindClose (in: hFindFile=0x2f24840 | out: hFindFile=0x2f24840) returned 1 [0108.678] SetLastError (dwErrCode=0x0) [0108.678] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\1028\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x544 [0108.679] GetLastError () returned 0x0 [0108.679] WriteFile (in: hFile=0x544, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0108.680] CloseHandle (hObject=0x544) returned 1 [0108.680] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1029", cAlternateFileName="")) returned 1 [0108.680] SetLastError (dwErrCode=0x0) [0108.681] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x544 [0108.681] GetLastError () returned 0xb7 [0108.681] CloseHandle (hObject=0x544) returned 1 [0108.681] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f248c0 [0108.681] FindNextFileW (in: hFindFile=0x2f248c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.681] FindNextFileW (in: hFindFile=0x2f248c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0108.681] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0108.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350312f4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x558 [0108.682] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0108.683] FindNextFileW (in: hFindFile=0x2f248c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0108.683] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0108.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350349c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c [0108.684] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0108.685] FindNextFileW (in: hFindFile=0x2f248c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0108.685] FindNextFileW (in: hFindFile=0x2f248c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0108.685] FindClose (in: hFindFile=0x2f248c0 | out: hFindFile=0x2f248c0) returned 1 [0108.685] SetLastError (dwErrCode=0x0) [0108.685] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\1029\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x544 [0108.687] GetLastError () returned 0x0 [0108.687] WriteFile (in: hFile=0x544, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0108.688] CloseHandle (hObject=0x544) returned 1 [0108.688] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1030", cAlternateFileName="")) returned 1 [0108.688] SetLastError (dwErrCode=0x0) [0108.689] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x544 [0108.689] GetLastError () returned 0xb7 [0108.689] CloseHandle (hObject=0x544) returned 1 [0108.689] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24840 [0108.689] FindNextFileW (in: hFindFile=0x2f24840, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.690] FindNextFileW (in: hFindFile=0x2f24840, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0108.690] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0108.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503808c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x560 [0108.691] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0108.691] FindNextFileW (in: hFindFile=0x2f24840, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0108.691] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0108.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503b758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564 [0108.692] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0108.693] FindNextFileW (in: hFindFile=0x2f24840, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0108.693] FindNextFileW (in: hFindFile=0x2f24840, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0108.693] FindClose (in: hFindFile=0x2f24840 | out: hFindFile=0x2f24840) returned 1 [0108.693] SetLastError (dwErrCode=0x0) [0108.693] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\1030\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x544 [0108.695] GetLastError () returned 0x0 [0108.695] WriteFile (in: hFile=0x544, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0108.696] CloseHandle (hObject=0x544) returned 1 [0108.696] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031", cAlternateFileName="")) returned 1 [0108.696] SetLastError (dwErrCode=0x0) [0108.696] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x544 [0108.696] GetLastError () returned 0xb7 [0108.696] CloseHandle (hObject=0x544) returned 1 [0108.696] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24840 [0108.697] FindNextFileW (in: hFindFile=0x2f24840, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.697] FindNextFileW (in: hFindFile=0x2f24840, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0108.697] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0108.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503ee24, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568 [0108.698] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0108.698] FindNextFileW (in: hFindFile=0x2f24840, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0108.699] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0108.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350424f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x56c [0108.700] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0108.700] FindNextFileW (in: hFindFile=0x2f24840, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0108.700] FindNextFileW (in: hFindFile=0x2f24840, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0108.700] FindClose (in: hFindFile=0x2f24840 | out: hFindFile=0x2f24840) returned 1 [0108.700] SetLastError (dwErrCode=0x0) [0108.700] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\1031\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x544 [0109.463] GetLastError () returned 0x0 [0109.463] WriteFile (in: hFile=0x544, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0109.481] CloseHandle (hObject=0x544) returned 1 [0109.482] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1032", cAlternateFileName="")) returned 1 [0109.482] SetLastError (dwErrCode=0x0) [0109.482] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x544 [0109.482] GetLastError () returned 0xb7 [0109.482] CloseHandle (hObject=0x544) returned 1 [0109.482] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24740 [0109.484] FindNextFileW (in: hFindFile=0x2f24740, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.484] FindNextFileW (in: hFindFile=0x2f24740, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0109.484] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0109.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350200f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x574 [0109.485] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.486] FindNextFileW (in: hFindFile=0x2f24740, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0109.486] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0109.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350237c4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0109.487] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.487] FindNextFileW (in: hFindFile=0x2f24740, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0109.487] FindNextFileW (in: hFindFile=0x2f24740, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0109.487] FindClose (in: hFindFile=0x2f24740 | out: hFindFile=0x2f24740) returned 1 [0109.487] SetLastError (dwErrCode=0x0) [0109.487] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\1032\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0109.490] GetLastError () returned 0x0 [0109.490] WriteFile (in: hFile=0x570, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0109.491] CloseHandle (hObject=0x570) returned 1 [0109.491] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0109.491] SetLastError (dwErrCode=0x0) [0109.491] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0109.492] GetLastError () returned 0xb7 [0109.492] CloseHandle (hObject=0x570) returned 1 [0109.492] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24ac0 [0109.657] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.657] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0109.657] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0109.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35026e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x544 [0109.661] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.662] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0109.662] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0109.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3502a55c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x57c [0109.662] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.663] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0109.663] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0109.663] FindClose (in: hFindFile=0x2f24ac0 | out: hFindFile=0x2f24ac0) returned 1 [0109.663] SetLastError (dwErrCode=0x0) [0109.663] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\1033\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0109.665] GetLastError () returned 0x0 [0109.666] WriteFile (in: hFile=0x570, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0109.667] CloseHandle (hObject=0x570) returned 1 [0109.667] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1035", cAlternateFileName="")) returned 1 [0109.667] SetLastError (dwErrCode=0x0) [0109.667] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0109.667] GetLastError () returned 0xb7 [0109.667] CloseHandle (hObject=0x570) returned 1 [0109.667] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f246c0 [0109.667] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.667] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0109.667] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0109.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3502dc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0109.668] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.669] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0109.669] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0109.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350312f4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x584 [0109.669] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.670] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0109.670] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0109.670] FindClose (in: hFindFile=0x2f246c0 | out: hFindFile=0x2f246c0) returned 1 [0109.670] SetLastError (dwErrCode=0x0) [0109.670] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\1035\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0109.672] GetLastError () returned 0x0 [0109.672] WriteFile (in: hFile=0x570, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0109.673] CloseHandle (hObject=0x570) returned 1 [0109.673] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0109.673] SetLastError (dwErrCode=0x0) [0109.673] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0109.673] GetLastError () returned 0xb7 [0109.673] CloseHandle (hObject=0x570) returned 1 [0109.674] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24d00 [0109.674] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.674] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0109.674] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0109.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350349c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588 [0109.675] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.676] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0109.676] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0109.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503808c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x58c [0109.677] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.677] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0109.677] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0109.677] FindClose (in: hFindFile=0x2f24d00 | out: hFindFile=0x2f24d00) returned 1 [0109.677] SetLastError (dwErrCode=0x0) [0109.677] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\1036\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0109.679] GetLastError () returned 0x0 [0109.679] WriteFile (in: hFile=0x570, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0109.679] CloseHandle (hObject=0x570) returned 1 [0109.680] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1037", cAlternateFileName="")) returned 1 [0109.680] SetLastError (dwErrCode=0x0) [0109.680] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0109.680] GetLastError () returned 0xb7 [0109.680] CloseHandle (hObject=0x570) returned 1 [0109.680] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24a00 [0109.680] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.680] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0109.681] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0109.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503b758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x590 [0109.681] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.682] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0109.682] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0109.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503ee24, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x594 [0109.683] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.683] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0109.683] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0109.683] FindClose (in: hFindFile=0x2f24a00 | out: hFindFile=0x2f24a00) returned 1 [0109.683] SetLastError (dwErrCode=0x0) [0109.683] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\1037\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0109.685] GetLastError () returned 0x0 [0109.685] WriteFile (in: hFile=0x570, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0109.686] CloseHandle (hObject=0x570) returned 1 [0109.686] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1038", cAlternateFileName="")) returned 1 [0109.686] SetLastError (dwErrCode=0x0) [0109.686] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0109.686] GetLastError () returned 0xb7 [0109.686] CloseHandle (hObject=0x570) returned 1 [0109.687] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f247c0 [0109.687] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.687] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0109.687] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0109.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350424f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598 [0109.688] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.688] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0109.688] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0109.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35045bbc, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x59c [0109.689] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.690] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0109.690] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0109.690] FindClose (in: hFindFile=0x2f247c0 | out: hFindFile=0x2f247c0) returned 1 [0109.690] SetLastError (dwErrCode=0x0) [0109.690] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\1038\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x520 [0110.424] GetLastError () returned 0x0 [0110.424] WriteFile (in: hFile=0x520, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0110.425] CloseHandle (hObject=0x520) returned 1 [0110.425] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040", cAlternateFileName="")) returned 1 [0110.425] SetLastError (dwErrCode=0x0) [0110.425] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x520 [0110.425] GetLastError () returned 0xb7 [0110.425] CloseHandle (hObject=0x520) returned 1 [0110.426] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24cc0 [0110.432] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.432] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0110.432] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0110.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350200f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x508 [0110.433] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.434] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0110.434] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0110.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350237c4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b8 [0110.435] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.435] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0110.436] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0110.436] FindClose (in: hFindFile=0x2f24cc0 | out: hFindFile=0x2f24cc0) returned 1 [0110.436] SetLastError (dwErrCode=0x0) [0110.436] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\1040\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5b4 [0110.439] GetLastError () returned 0x0 [0110.439] WriteFile (in: hFile=0x5b4, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0110.440] CloseHandle (hObject=0x5b4) returned 1 [0110.440] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041", cAlternateFileName="")) returned 1 [0110.441] SetLastError (dwErrCode=0x0) [0110.441] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5b4 [0110.441] GetLastError () returned 0xb7 [0110.441] CloseHandle (hObject=0x5b4) returned 1 [0110.441] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24a80 [0110.441] FindNextFileW (in: hFindFile=0x2f24a80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.441] FindNextFileW (in: hFindFile=0x2f24a80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0110.441] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0110.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35026e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5bc [0110.442] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.442] FindNextFileW (in: hFindFile=0x2f24a80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0110.443] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0110.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3502a55c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a8 [0110.443] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.444] FindNextFileW (in: hFindFile=0x2f24a80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0110.444] FindNextFileW (in: hFindFile=0x2f24a80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0110.444] FindClose (in: hFindFile=0x2f24a80 | out: hFindFile=0x2f24a80) returned 1 [0110.444] SetLastError (dwErrCode=0x0) [0110.444] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\1041\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x520 [0110.469] GetLastError () returned 0x0 [0110.469] WriteFile (in: hFile=0x520, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0110.470] CloseHandle (hObject=0x520) returned 1 [0110.470] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042", cAlternateFileName="")) returned 1 [0110.470] SetLastError (dwErrCode=0x0) [0110.470] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x520 [0110.470] GetLastError () returned 0xb7 [0110.470] CloseHandle (hObject=0x520) returned 1 [0110.470] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24840 [0110.471] FindNextFileW (in: hFindFile=0x2f24840, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.471] FindNextFileW (in: hFindFile=0x2f24840, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0110.471] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0110.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3502dc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b4 [0110.472] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.472] FindNextFileW (in: hFindFile=0x2f24840, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0110.472] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0110.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350312f4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac [0110.473] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.473] FindNextFileW (in: hFindFile=0x2f24840, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0110.473] FindNextFileW (in: hFindFile=0x2f24840, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0110.473] FindClose (in: hFindFile=0x2f24840 | out: hFindFile=0x2f24840) returned 1 [0110.474] SetLastError (dwErrCode=0x0) [0110.474] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\1042\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x520 [0110.475] GetLastError () returned 0x0 [0110.475] WriteFile (in: hFile=0x520, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0110.476] CloseHandle (hObject=0x520) returned 1 [0110.476] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043", cAlternateFileName="")) returned 1 [0110.476] SetLastError (dwErrCode=0x0) [0110.476] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x520 [0110.477] GetLastError () returned 0xb7 [0110.477] CloseHandle (hObject=0x520) returned 1 [0110.477] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24b80 [0110.477] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.477] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0110.477] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0110.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350349c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0 [0110.478] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.478] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0110.478] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0110.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503808c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x570 [0110.479] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.480] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0110.480] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0110.480] FindClose (in: hFindFile=0x2f24b80 | out: hFindFile=0x2f24b80) returned 1 [0110.480] SetLastError (dwErrCode=0x0) [0110.480] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\1043\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x520 [0110.482] GetLastError () returned 0x0 [0110.482] WriteFile (in: hFile=0x520, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0110.483] CloseHandle (hObject=0x520) returned 1 [0110.483] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044", cAlternateFileName="")) returned 1 [0110.483] SetLastError (dwErrCode=0x0) [0110.483] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x520 [0110.483] GetLastError () returned 0xb7 [0110.483] CloseHandle (hObject=0x520) returned 1 [0110.483] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24980 [0110.484] FindNextFileW (in: hFindFile=0x2f24980, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.484] FindNextFileW (in: hFindFile=0x2f24980, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0110.484] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0110.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503b758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a0 [0110.485] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.485] FindNextFileW (in: hFindFile=0x2f24980, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0110.485] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0110.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503ee24, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a4 [0110.486] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.487] FindNextFileW (in: hFindFile=0x2f24980, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0110.487] FindNextFileW (in: hFindFile=0x2f24980, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0110.487] FindClose (in: hFindFile=0x2f24980 | out: hFindFile=0x2f24980) returned 1 [0110.487] SetLastError (dwErrCode=0x0) [0110.487] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\1044\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x520 [0110.489] GetLastError () returned 0x0 [0110.489] WriteFile (in: hFile=0x520, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0110.490] CloseHandle (hObject=0x520) returned 1 [0110.490] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1045", cAlternateFileName="")) returned 1 [0110.490] SetLastError (dwErrCode=0x0) [0110.490] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x520 [0110.490] GetLastError () returned 0xb7 [0110.490] CloseHandle (hObject=0x520) returned 1 [0110.490] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24d80 [0110.939] FindNextFileW (in: hFindFile=0x2f24d80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.939] FindNextFileW (in: hFindFile=0x2f24d80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0110.939] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0110.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350200f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e4 [0110.944] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.945] FindNextFileW (in: hFindFile=0x2f24d80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0110.945] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0110.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350424f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d0 [0110.946] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.946] FindNextFileW (in: hFindFile=0x2f24d80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0110.946] FindNextFileW (in: hFindFile=0x2f24d80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0110.946] FindClose (in: hFindFile=0x2f24d80 | out: hFindFile=0x2f24d80) returned 1 [0110.946] SetLastError (dwErrCode=0x0) [0110.947] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\1045\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e8 [0110.949] GetLastError () returned 0x0 [0110.949] WriteFile (in: hFile=0x5e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0110.951] CloseHandle (hObject=0x5e8) returned 1 [0110.951] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046", cAlternateFileName="")) returned 1 [0110.951] SetLastError (dwErrCode=0x0) [0110.951] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e8 [0110.951] GetLastError () returned 0xb7 [0110.951] CloseHandle (hObject=0x5e8) returned 1 [0110.951] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24740 [0110.952] FindNextFileW (in: hFindFile=0x2f24740, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.952] FindNextFileW (in: hFindFile=0x2f24740, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0110.952] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0110.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35045bbc, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d8 [0110.953] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.953] FindNextFileW (in: hFindFile=0x2f24740, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0110.953] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0110.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35049288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5dc [0110.954] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.955] FindNextFileW (in: hFindFile=0x2f24740, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0110.955] FindNextFileW (in: hFindFile=0x2f24740, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0110.955] FindClose (in: hFindFile=0x2f24740 | out: hFindFile=0x2f24740) returned 1 [0110.955] SetLastError (dwErrCode=0x0) [0110.955] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\1046\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x600 [0110.956] GetLastError () returned 0x0 [0110.957] WriteFile (in: hFile=0x600, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0110.957] CloseHandle (hObject=0x600) returned 1 [0110.958] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049", cAlternateFileName="")) returned 1 [0110.958] SetLastError (dwErrCode=0x0) [0110.958] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x600 [0110.958] GetLastError () returned 0xb7 [0110.958] CloseHandle (hObject=0x600) returned 1 [0110.958] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24c80 [0110.958] FindNextFileW (in: hFindFile=0x2f24c80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.958] FindNextFileW (in: hFindFile=0x2f24c80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0110.958] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0110.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3504c954, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5fc [0110.959] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.960] FindNextFileW (in: hFindFile=0x2f24c80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0110.960] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0110.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35050020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f8 [0110.961] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.961] FindNextFileW (in: hFindFile=0x2f24c80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0110.961] FindNextFileW (in: hFindFile=0x2f24c80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0110.961] FindClose (in: hFindFile=0x2f24c80 | out: hFindFile=0x2f24c80) returned 1 [0110.961] SetLastError (dwErrCode=0x0) [0110.961] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\1049\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x600 [0110.964] GetLastError () returned 0x0 [0110.964] WriteFile (in: hFile=0x600, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0110.965] CloseHandle (hObject=0x600) returned 1 [0110.965] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1053", cAlternateFileName="")) returned 1 [0110.965] SetLastError (dwErrCode=0x0) [0110.965] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x600 [0110.965] GetLastError () returned 0xb7 [0110.965] CloseHandle (hObject=0x600) returned 1 [0110.965] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24d80 [0110.966] FindNextFileW (in: hFindFile=0x2f24d80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.966] FindNextFileW (in: hFindFile=0x2f24d80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0110.966] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0110.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350536ec, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x604 [0110.967] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.967] FindNextFileW (in: hFindFile=0x2f24d80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0110.967] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0110.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35056db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x444 [0110.968] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.969] FindNextFileW (in: hFindFile=0x2f24d80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0110.969] FindNextFileW (in: hFindFile=0x2f24d80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0110.969] FindClose (in: hFindFile=0x2f24d80 | out: hFindFile=0x2f24d80) returned 1 [0110.969] SetLastError (dwErrCode=0x0) [0110.969] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\1053\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x600 [0110.971] GetLastError () returned 0x0 [0110.971] WriteFile (in: hFile=0x600, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0110.972] CloseHandle (hObject=0x600) returned 1 [0110.972] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1055", cAlternateFileName="")) returned 1 [0110.972] SetLastError (dwErrCode=0x0) [0110.972] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x600 [0110.972] GetLastError () returned 0xb7 [0110.972] CloseHandle (hObject=0x600) returned 1 [0110.972] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24ac0 [0110.972] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.972] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0110.972] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0110.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3505a484, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60c [0110.973] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.974] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0110.974] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0110.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3505db50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x610 [0110.975] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.975] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0110.975] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0110.976] FindClose (in: hFindFile=0x2f24ac0 | out: hFindFile=0x2f24ac0) returned 1 [0110.976] SetLastError (dwErrCode=0x0) [0110.976] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\1055\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x600 [0110.977] GetLastError () returned 0x0 [0110.977] WriteFile (in: hFile=0x600, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0110.978] CloseHandle (hObject=0x600) returned 1 [0110.978] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1 [0110.979] SetLastError (dwErrCode=0x0) [0110.979] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x600 [0110.979] GetLastError () returned 0xb7 [0110.979] CloseHandle (hObject=0x600) returned 1 [0110.979] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24c40 [0110.979] FindNextFileW (in: hFindFile=0x2f24c40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.979] FindNextFileW (in: hFindFile=0x2f24c40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0110.979] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0110.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3506121c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x608 [0110.980] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.981] FindNextFileW (in: hFindFile=0x2f24c40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0110.981] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0110.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350648e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x520 [0110.982] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.982] FindNextFileW (in: hFindFile=0x2f24c40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0110.982] FindNextFileW (in: hFindFile=0x2f24c40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0110.982] FindClose (in: hFindFile=0x2f24c40 | out: hFindFile=0x2f24c40) returned 1 [0110.982] SetLastError (dwErrCode=0x0) [0110.982] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\2052\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x600 [0112.036] GetLastError () returned 0x0 [0112.036] WriteFile (in: hFile=0x600, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0112.055] CloseHandle (hObject=0x600) returned 1 [0112.055] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2070", cAlternateFileName="")) returned 1 [0112.055] SetLastError (dwErrCode=0x0) [0112.055] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x600 [0112.055] GetLastError () returned 0xb7 [0112.055] CloseHandle (hObject=0x600) returned 1 [0112.056] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24980 [0112.056] FindNextFileW (in: hFindFile=0x2f24980, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.056] FindNextFileW (in: hFindFile=0x2f24980, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0112.056] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350200f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x518 [0112.057] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.058] FindNextFileW (in: hFindFile=0x2f24980, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0112.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350237c4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e8 [0112.059] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.059] FindNextFileW (in: hFindFile=0x2f24980, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0112.059] FindNextFileW (in: hFindFile=0x2f24980, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0112.059] FindClose (in: hFindFile=0x2f24980 | out: hFindFile=0x2f24980) returned 1 [0112.059] SetLastError (dwErrCode=0x0) [0112.059] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\2070\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f4 [0112.062] GetLastError () returned 0x0 [0112.062] WriteFile (in: hFile=0x5f4, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0112.063] CloseHandle (hObject=0x5f4) returned 1 [0112.063] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3076", cAlternateFileName="")) returned 1 [0112.063] SetLastError (dwErrCode=0x0) [0112.063] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f4 [0112.063] GetLastError () returned 0xb7 [0112.063] CloseHandle (hObject=0x5f4) returned 1 [0112.063] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f246c0 [0112.063] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.063] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0112.063] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35026e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x600 [0112.066] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.066] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0112.066] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3502a55c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c8 [0112.067] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.068] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0112.068] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0112.068] FindClose (in: hFindFile=0x2f246c0 | out: hFindFile=0x2f246c0) returned 1 [0112.068] SetLastError (dwErrCode=0x0) [0112.068] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\3076\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f4 [0112.069] GetLastError () returned 0x0 [0112.069] WriteFile (in: hFile=0x5f4, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0112.070] CloseHandle (hObject=0x5f4) returned 1 [0112.070] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0112.070] SetLastError (dwErrCode=0x0) [0112.070] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f4 [0112.071] GetLastError () returned 0xb7 [0112.071] CloseHandle (hObject=0x5f4) returned 1 [0112.071] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24d00 [0112.071] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.071] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0112.071] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3502dc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c4 [0112.072] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.072] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0112.072] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350312f4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c0 [0112.073] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.074] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0112.074] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0112.074] FindClose (in: hFindFile=0x2f24d00 | out: hFindFile=0x2f24d00) returned 1 [0112.074] SetLastError (dwErrCode=0x0) [0112.074] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\3082\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f4 [0112.076] GetLastError () returned 0x0 [0112.076] WriteFile (in: hFile=0x5f4, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0112.077] CloseHandle (hObject=0x5f4) returned 1 [0112.077] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0112.077] SetLastError (dwErrCode=0x0) [0112.077] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f4 [0112.077] GetLastError () returned 0xb7 [0112.077] CloseHandle (hObject=0x5f4) returned 1 [0112.077] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f247c0 [0112.078] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.078] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0112.078] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350349c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cc [0112.079] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.079] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0112.079] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.080] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503808c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x614 [0112.080] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.081] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0112.081] FindClose (in: hFindFile=0x2f247c0 | out: hFindFile=0x2f247c0) returned 1 [0112.081] SetLastError (dwErrCode=0x0) [0112.081] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\client\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f4 [0112.081] GetLastError () returned 0x0 [0112.081] WriteFile (in: hFile=0x5f4, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0112.082] CloseHandle (hObject=0x5f4) returned 1 [0112.082] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1 [0112.082] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503b758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f4 [0112.083] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.084] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1 [0112.084] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503ee24, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x618 [0112.085] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.085] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extended", cAlternateFileName="")) returned 1 [0112.085] SetLastError (dwErrCode=0x0) [0112.085] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0112.085] GetLastError () returned 0xb7 [0112.085] CloseHandle (hObject=0x620) returned 1 [0112.085] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24cc0 [0112.086] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.086] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0112.086] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350424f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61c [0112.087] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.087] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0112.087] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.088] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35045bbc, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x624 [0112.088] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.089] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0112.089] FindClose (in: hFindFile=0x2f24cc0 | out: hFindFile=0x2f24cc0) returned 1 [0112.618] SetLastError (dwErrCode=0x0) [0112.618] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\extended\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0112.619] GetLastError () returned 0x0 [0112.619] WriteFile (in: hFile=0x620, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0112.620] CloseHandle (hObject=0x620) returned 1 [0112.620] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graphics", cAlternateFileName="")) returned 1 [0112.620] SetLastError (dwErrCode=0x0) [0112.620] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0112.620] GetLastError () returned 0xb7 [0112.620] CloseHandle (hObject=0x620) returned 1 [0112.620] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24e40 [0112.624] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.624] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1 [0112.624] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350200f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62c [0112.626] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.626] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1 [0112.627] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350237c4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x630 [0112.628] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.628] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1 [0112.628] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35026e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x634 [0112.629] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.630] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1 [0112.630] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3502a55c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x638 [0112.630] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.631] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1 [0112.631] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3502dc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63c [0112.632] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.632] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1 [0112.632] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350312f4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x640 [0112.633] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.634] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1 [0112.634] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350349c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x644 [0112.635] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.635] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1 [0112.635] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503808c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x648 [0112.636] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.637] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1 [0112.637] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503b758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64c [0112.638] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.638] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1 [0112.638] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503ee24, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x650 [0112.639] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.639] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1 [0112.639] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350424f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x654 [0112.640] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.641] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1 [0112.641] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35049288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x658 [0112.642] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.642] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1 [0112.642] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3504c954, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65c [0112.792] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.795] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1 [0112.795] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35050020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x660 [0112.797] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.797] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1 [0112.797] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350536ec, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x664 [0112.798] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.799] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0 [0112.799] FindClose (in: hFindFile=0x2f24e40 | out: hFindFile=0x2f24e40) returned 1 [0112.800] SetLastError (dwErrCode=0x0) [0112.800] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\graphics\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0112.801] GetLastError () returned 0x0 [0112.801] WriteFile (in: hFile=0x620, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0112.802] CloseHandle (hObject=0x620) returned 1 [0112.802] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.bmp", cAlternateFileName="")) returned 1 [0112.802] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0112.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35056db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x620 [0112.803] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.805] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1 [0112.805] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0113.079] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350200f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x448 [0113.254] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.255] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1 [0113.255] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0113.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350237c4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x478 [0113.256] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.257] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1 [0113.257] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0113.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35026e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43c [0113.258] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.258] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1 [0113.258] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0113.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3502a55c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x514 [0113.259] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.260] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1 [0113.260] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0113.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3502dc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x628 [0113.261] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.261] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1 [0113.262] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0113.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350312f4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x668 [0113.263] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.264] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0113.264] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0113.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350349c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0113.265] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.265] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1 [0113.265] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0113.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503808c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x670 [0113.266] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.267] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1 [0113.267] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0113.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503b758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x674 [0113.268] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.268] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2f90ea6, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd2f90ea6, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd2f90ea6, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x0, dwReserved1=0x0, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0113.268] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0113.268] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1 [0113.268] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1 [0113.268] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1 [0113.268] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0113.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503ee24, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x678 [0113.269] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.270] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1 [0113.270] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0113.270] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0113.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350424f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x67c [0113.271] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.271] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0113.271] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x0, dwReserved1=0x0, cFileName="Strings.xml", cAlternateFileName="")) returned 1 [0113.271] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0113.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35045bbc, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x680 [0113.272] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.273] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0113.273] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0113.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35049288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x684 [0113.274] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.274] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1 [0113.274] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0113.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3504c954, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x688 [0113.275] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.276] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0113.276] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0113.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35050020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x68c [0113.277] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.277] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1 [0113.277] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0113.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350536ec, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x690 [0113.278] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.279] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0113.279] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0113.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35056db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x694 [0113.280] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.280] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0113.280] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0113.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3505a484, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x698 [0113.281] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.281] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0 [0113.282] FindClose (in: hFindFile=0x2f24800 | out: hFindFile=0x2f24800) returned 1 [0113.282] SetLastError (dwErrCode=0x0) [0113.282] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.html" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x528 [0113.282] GetLastError () returned 0xb7 [0113.282] CloseHandle (hObject=0x528) returned 1 [0113.282] FindNextFileW (in: hFindFile=0x2f24e80, lpFindFileData=0x19d608 | out: lpFindFileData=0x19d608*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0113.282] SetLastError (dwErrCode=0x0) [0113.282] CreateFileW (lpFileName="C:\\RyukReadMe.html" (normalized: "c:\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x528 [0113.282] GetLastError () returned 0xb7 [0113.282] CloseHandle (hObject=0x528) returned 1 [0113.282] FindFirstFileW (in: lpFileName="C:\\Boot\\*.*", lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24780 [0113.283] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.284] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x6d72d3cf, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6d72d3cf, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0113.284] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0113.284] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3505db50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x69c [0113.285] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.285] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0113.285] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0113.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3506121c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6a0 [0113.287] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.287] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0113.287] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0113.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350648e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6a4 [0113.289] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.289] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0113.289] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0113.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35067fb4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6a8 [0113.290] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.291] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0113.291] SetLastError (dwErrCode=0x0) [0113.291] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0114.252] GetLastError () returned 0x0 [0114.252] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb38, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb38*=0x273, lpOverlapped=0x0) returned 1 [0114.517] CloseHandle (hObject=0x6e8) returned 1 [0114.522] FindFirstFileW (in: lpFileName="C:\\Boot\\bg-BG\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f249c0 [0115.046] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.047] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.047] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.047] FindClose (in: hFindFile=0x2f249c0 | out: hFindFile=0x2f249c0) returned 1 [0115.047] SetLastError (dwErrCode=0x0) [0115.047] CreateFileW (lpFileName="C:\\Boot\\bg-BG\\RyukReadMe.html" (normalized: "c:\\boot\\bg-bg\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c0 [0115.047] GetLastError () returned 0x0 [0115.047] WriteFile (in: hFile=0x6c0, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0115.048] CloseHandle (hObject=0x6c0) returned 1 [0115.048] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0115.048] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0115.048] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0115.048] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0115.048] SetLastError (dwErrCode=0x0) [0115.048] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c0 [0115.048] GetLastError () returned 0xb7 [0115.049] CloseHandle (hObject=0x6c0) returned 1 [0115.049] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24700 [0115.050] FindNextFileW (in: hFindFile=0x2f24700, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.050] FindNextFileW (in: hFindFile=0x2f24700, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.050] FindNextFileW (in: hFindFile=0x2f24700, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.050] FindNextFileW (in: hFindFile=0x2f24700, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.050] FindClose (in: hFindFile=0x2f24700 | out: hFindFile=0x2f24700) returned 1 [0115.050] SetLastError (dwErrCode=0x0) [0115.050] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\RyukReadMe.html" (normalized: "c:\\boot\\cs-cz\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.052] GetLastError () returned 0x0 [0115.052] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0115.053] CloseHandle (hObject=0x6e8) returned 1 [0115.053] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0115.053] SetLastError (dwErrCode=0x0) [0115.054] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.054] GetLastError () returned 0xb7 [0115.054] CloseHandle (hObject=0x6e8) returned 1 [0115.054] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24940 [0115.054] FindNextFileW (in: hFindFile=0x2f24940, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.054] FindNextFileW (in: hFindFile=0x2f24940, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.054] FindNextFileW (in: hFindFile=0x2f24940, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.055] FindNextFileW (in: hFindFile=0x2f24940, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.055] FindClose (in: hFindFile=0x2f24940 | out: hFindFile=0x2f24940) returned 1 [0115.058] SetLastError (dwErrCode=0x0) [0115.058] CreateFileW (lpFileName="C:\\Boot\\da-DK\\RyukReadMe.html" (normalized: "c:\\boot\\da-dk\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.058] GetLastError () returned 0x0 [0115.058] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0115.059] CloseHandle (hObject=0x6e8) returned 1 [0115.059] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0115.059] SetLastError (dwErrCode=0x0) [0115.059] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.059] GetLastError () returned 0xb7 [0115.059] CloseHandle (hObject=0x6e8) returned 1 [0115.060] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f246c0 [0115.060] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.060] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.060] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.060] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.060] FindClose (in: hFindFile=0x2f246c0 | out: hFindFile=0x2f246c0) returned 1 [0115.060] SetLastError (dwErrCode=0x0) [0115.060] CreateFileW (lpFileName="C:\\Boot\\de-DE\\RyukReadMe.html" (normalized: "c:\\boot\\de-de\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.060] GetLastError () returned 0x0 [0115.060] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0115.061] CloseHandle (hObject=0x6e8) returned 1 [0115.061] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0115.061] SetLastError (dwErrCode=0x0) [0115.061] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.061] GetLastError () returned 0xb7 [0115.061] CloseHandle (hObject=0x6e8) returned 1 [0115.061] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f246c0 [0115.062] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.062] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.062] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.062] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.062] FindClose (in: hFindFile=0x2f246c0 | out: hFindFile=0x2f246c0) returned 1 [0115.062] SetLastError (dwErrCode=0x0) [0115.062] CreateFileW (lpFileName="C:\\Boot\\el-GR\\RyukReadMe.html" (normalized: "c:\\boot\\el-gr\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.063] GetLastError () returned 0x0 [0115.063] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0115.063] CloseHandle (hObject=0x6e8) returned 1 [0115.064] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1 [0115.064] SetLastError (dwErrCode=0x0) [0115.064] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.064] GetLastError () returned 0xb7 [0115.064] CloseHandle (hObject=0x6e8) returned 1 [0115.064] FindFirstFileW (in: lpFileName="C:\\Boot\\en-GB\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24940 [0115.064] FindNextFileW (in: hFindFile=0x2f24940, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.064] FindNextFileW (in: hFindFile=0x2f24940, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.065] FindNextFileW (in: hFindFile=0x2f24940, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.065] FindClose (in: hFindFile=0x2f24940 | out: hFindFile=0x2f24940) returned 1 [0115.065] SetLastError (dwErrCode=0x0) [0115.065] CreateFileW (lpFileName="C:\\Boot\\en-GB\\RyukReadMe.html" (normalized: "c:\\boot\\en-gb\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.088] GetLastError () returned 0x0 [0115.088] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0115.089] CloseHandle (hObject=0x6e8) returned 1 [0115.089] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0115.089] SetLastError (dwErrCode=0x0) [0115.089] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.089] GetLastError () returned 0xb7 [0115.089] CloseHandle (hObject=0x6e8) returned 1 [0115.089] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24980 [0115.089] FindNextFileW (in: hFindFile=0x2f24980, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.089] FindNextFileW (in: hFindFile=0x2f24980, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.089] FindNextFileW (in: hFindFile=0x2f24980, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.090] FindNextFileW (in: hFindFile=0x2f24980, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.090] FindClose (in: hFindFile=0x2f24980 | out: hFindFile=0x2f24980) returned 1 [0115.090] SetLastError (dwErrCode=0x0) [0115.090] CreateFileW (lpFileName="C:\\Boot\\en-US\\RyukReadMe.html" (normalized: "c:\\boot\\en-us\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.090] GetLastError () returned 0x0 [0115.090] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0115.091] CloseHandle (hObject=0x6e8) returned 1 [0115.091] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0115.091] SetLastError (dwErrCode=0x0) [0115.091] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.091] GetLastError () returned 0xb7 [0115.091] CloseHandle (hObject=0x6e8) returned 1 [0115.091] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24cc0 [0115.092] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.092] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.092] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.092] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.092] FindClose (in: hFindFile=0x2f24cc0 | out: hFindFile=0x2f24cc0) returned 1 [0115.092] SetLastError (dwErrCode=0x0) [0115.092] CreateFileW (lpFileName="C:\\Boot\\es-ES\\RyukReadMe.html" (normalized: "c:\\boot\\es-es\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.092] GetLastError () returned 0x0 [0115.092] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0115.093] CloseHandle (hObject=0x6e8) returned 1 [0115.093] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1 [0115.094] SetLastError (dwErrCode=0x0) [0115.094] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.094] GetLastError () returned 0xb7 [0115.094] CloseHandle (hObject=0x6e8) returned 1 [0115.094] FindFirstFileW (in: lpFileName="C:\\Boot\\es-MX\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24800 [0115.094] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.094] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.094] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.094] FindClose (in: hFindFile=0x2f24800 | out: hFindFile=0x2f24800) returned 1 [0115.095] SetLastError (dwErrCode=0x0) [0115.095] CreateFileW (lpFileName="C:\\Boot\\es-MX\\RyukReadMe.html" (normalized: "c:\\boot\\es-mx\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.095] GetLastError () returned 0x0 [0115.095] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0115.096] CloseHandle (hObject=0x6e8) returned 1 [0115.096] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0115.096] SetLastError (dwErrCode=0x0) [0115.096] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.096] GetLastError () returned 0xb7 [0115.096] CloseHandle (hObject=0x6e8) returned 1 [0115.096] FindFirstFileW (in: lpFileName="C:\\Boot\\et-EE\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24b80 [0115.096] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.096] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.096] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.096] FindClose (in: hFindFile=0x2f24b80 | out: hFindFile=0x2f24b80) returned 1 [0115.097] SetLastError (dwErrCode=0x0) [0115.097] CreateFileW (lpFileName="C:\\Boot\\et-EE\\RyukReadMe.html" (normalized: "c:\\boot\\et-ee\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.098] GetLastError () returned 0x0 [0115.098] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0115.098] CloseHandle (hObject=0x6e8) returned 1 [0115.099] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0115.099] SetLastError (dwErrCode=0x0) [0115.099] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.099] GetLastError () returned 0xb7 [0115.099] CloseHandle (hObject=0x6e8) returned 1 [0115.099] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24b80 [0115.100] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.100] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.100] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.100] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.100] FindClose (in: hFindFile=0x2f24b80 | out: hFindFile=0x2f24b80) returned 1 [0115.100] SetLastError (dwErrCode=0x0) [0115.100] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\RyukReadMe.html" (normalized: "c:\\boot\\fi-fi\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.100] GetLastError () returned 0x0 [0115.100] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0115.101] CloseHandle (hObject=0x6e8) returned 1 [0115.101] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0115.101] SetLastError (dwErrCode=0x0) [0115.101] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.101] GetLastError () returned 0xb7 [0115.101] CloseHandle (hObject=0x6e8) returned 1 [0115.101] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24b80 [0115.674] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.674] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0115.674] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0115.674] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0115.674] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0115.674] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgunn_boot.ttf", cAlternateFileName="MALGUN~1.TTF")) returned 1 [0115.674] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgun_boot.ttf", cAlternateFileName="MALGUN~2.TTF")) returned 1 [0115.674] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryon_boot.ttf", cAlternateFileName="MEIRYO~1.TTF")) returned 1 [0115.674] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryo_boot.ttf", cAlternateFileName="MEIRYO~2.TTF")) returned 1 [0115.674] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjhn_boot.ttf", cAlternateFileName="MSJHN_~1.TTF")) returned 1 [0115.674] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjh_boot.ttf", cAlternateFileName="MSJH_B~1.TTF")) returned 1 [0115.674] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyhn_boot.ttf", cAlternateFileName="MSYHN_~1.TTF")) returned 1 [0115.674] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyh_boot.ttf", cAlternateFileName="MSYH_B~1.TTF")) returned 1 [0115.674] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="segmono_boot.ttf", cAlternateFileName="SEGMON~1.TTF")) returned 1 [0115.677] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoen_slboot.ttf", cAlternateFileName="SEGOEN~1.TTF")) returned 1 [0115.677] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoe_slboot.ttf", cAlternateFileName="SEGOE_~1.TTF")) returned 1 [0115.677] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0115.677] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0115.677] FindClose (in: hFindFile=0x2f24b80 | out: hFindFile=0x2f24b80) returned 1 [0115.678] SetLastError (dwErrCode=0x0) [0115.678] CreateFileW (lpFileName="C:\\Boot\\Fonts\\RyukReadMe.html" (normalized: "c:\\boot\\fonts\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.679] GetLastError () returned 0x0 [0115.679] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0115.680] CloseHandle (hObject=0x6e8) returned 1 [0115.680] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0115.680] SetLastError (dwErrCode=0x0) [0115.680] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.681] GetLastError () returned 0xb7 [0115.681] CloseHandle (hObject=0x6e8) returned 1 [0115.681] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-CA\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24b80 [0115.681] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.681] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.681] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.682] FindClose (in: hFindFile=0x2f24b80 | out: hFindFile=0x2f24b80) returned 1 [0115.682] SetLastError (dwErrCode=0x0) [0115.682] CreateFileW (lpFileName="C:\\Boot\\fr-CA\\RyukReadMe.html" (normalized: "c:\\boot\\fr-ca\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.682] GetLastError () returned 0x0 [0115.682] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0115.683] CloseHandle (hObject=0x6e8) returned 1 [0115.683] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0115.683] SetLastError (dwErrCode=0x0) [0115.683] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.683] GetLastError () returned 0xb7 [0115.683] CloseHandle (hObject=0x6e8) returned 1 [0115.683] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f246c0 [0115.683] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.683] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.683] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.683] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.684] FindClose (in: hFindFile=0x2f246c0 | out: hFindFile=0x2f246c0) returned 1 [0115.684] SetLastError (dwErrCode=0x0) [0115.684] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\RyukReadMe.html" (normalized: "c:\\boot\\fr-fr\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.684] GetLastError () returned 0x0 [0115.684] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0115.685] CloseHandle (hObject=0x6e8) returned 1 [0115.685] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0115.685] SetLastError (dwErrCode=0x0) [0115.685] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.686] GetLastError () returned 0xb7 [0115.686] CloseHandle (hObject=0x6e8) returned 1 [0115.686] FindFirstFileW (in: lpFileName="C:\\Boot\\hr-HR\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f247c0 [0115.686] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.686] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.686] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.686] FindClose (in: hFindFile=0x2f247c0 | out: hFindFile=0x2f247c0) returned 1 [0115.686] SetLastError (dwErrCode=0x0) [0115.687] CreateFileW (lpFileName="C:\\Boot\\hr-HR\\RyukReadMe.html" (normalized: "c:\\boot\\hr-hr\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.687] GetLastError () returned 0x0 [0115.687] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0115.688] CloseHandle (hObject=0x6e8) returned 1 [0115.688] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0115.688] SetLastError (dwErrCode=0x0) [0115.688] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.688] GetLastError () returned 0xb7 [0115.688] CloseHandle (hObject=0x6e8) returned 1 [0115.688] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24800 [0115.688] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.688] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.688] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.688] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.688] FindClose (in: hFindFile=0x2f24800 | out: hFindFile=0x2f24800) returned 1 [0115.689] SetLastError (dwErrCode=0x0) [0115.689] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\RyukReadMe.html" (normalized: "c:\\boot\\hu-hu\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.689] GetLastError () returned 0x0 [0115.689] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0115.690] CloseHandle (hObject=0x6e8) returned 1 [0115.690] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0115.690] SetLastError (dwErrCode=0x0) [0115.690] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.690] GetLastError () returned 0xb7 [0115.690] CloseHandle (hObject=0x6e8) returned 1 [0115.690] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24d00 [0115.691] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.691] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.691] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.691] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.691] FindClose (in: hFindFile=0x2f24d00 | out: hFindFile=0x2f24d00) returned 1 [0115.691] SetLastError (dwErrCode=0x0) [0115.691] CreateFileW (lpFileName="C:\\Boot\\it-IT\\RyukReadMe.html" (normalized: "c:\\boot\\it-it\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.691] GetLastError () returned 0x0 [0115.691] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0115.692] CloseHandle (hObject=0x6e8) returned 1 [0115.692] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0115.692] SetLastError (dwErrCode=0x0) [0115.692] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.693] GetLastError () returned 0xb7 [0115.693] CloseHandle (hObject=0x6e8) returned 1 [0115.693] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24b80 [0115.693] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.693] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.693] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.693] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.693] FindClose (in: hFindFile=0x2f24b80 | out: hFindFile=0x2f24b80) returned 1 [0115.693] SetLastError (dwErrCode=0x0) [0115.694] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\RyukReadMe.html" (normalized: "c:\\boot\\ja-jp\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.694] GetLastError () returned 0x0 [0115.694] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0115.695] CloseHandle (hObject=0x6e8) returned 1 [0115.695] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0115.695] SetLastError (dwErrCode=0x0) [0115.695] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.695] GetLastError () returned 0xb7 [0115.695] CloseHandle (hObject=0x6e8) returned 1 [0115.696] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f247c0 [0115.696] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.696] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.696] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.696] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.696] FindClose (in: hFindFile=0x2f247c0 | out: hFindFile=0x2f247c0) returned 1 [0115.696] SetLastError (dwErrCode=0x0) [0115.696] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\RyukReadMe.html" (normalized: "c:\\boot\\ko-kr\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.697] GetLastError () returned 0x0 [0115.697] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0115.697] CloseHandle (hObject=0x6e8) returned 1 [0115.698] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0115.698] SetLastError (dwErrCode=0x0) [0115.698] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.698] GetLastError () returned 0xb7 [0115.698] CloseHandle (hObject=0x6e8) returned 1 [0115.698] FindFirstFileW (in: lpFileName="C:\\Boot\\lt-LT\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24e40 [0115.698] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.698] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.698] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.698] FindClose (in: hFindFile=0x2f24e40 | out: hFindFile=0x2f24e40) returned 1 [0115.698] SetLastError (dwErrCode=0x0) [0115.698] CreateFileW (lpFileName="C:\\Boot\\lt-LT\\RyukReadMe.html" (normalized: "c:\\boot\\lt-lt\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.699] GetLastError () returned 0x0 [0115.699] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0115.699] CloseHandle (hObject=0x6e8) returned 1 [0115.700] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0115.700] SetLastError (dwErrCode=0x0) [0115.700] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.700] GetLastError () returned 0xb7 [0115.700] CloseHandle (hObject=0x6e8) returned 1 [0115.700] FindFirstFileW (in: lpFileName="C:\\Boot\\lv-LV\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24cc0 [0115.700] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.701] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.701] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.701] FindClose (in: hFindFile=0x2f24cc0 | out: hFindFile=0x2f24cc0) returned 1 [0115.701] SetLastError (dwErrCode=0x0) [0115.701] CreateFileW (lpFileName="C:\\Boot\\lv-LV\\RyukReadMe.html" (normalized: "c:\\boot\\lv-lv\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.701] GetLastError () returned 0x0 [0115.701] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0115.702] CloseHandle (hObject=0x6e8) returned 1 [0115.702] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0115.702] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0115.702] SetLastError (dwErrCode=0x0) [0115.702] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.702] GetLastError () returned 0xb7 [0115.702] CloseHandle (hObject=0x6e8) returned 1 [0115.702] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f246c0 [0115.703] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.703] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.703] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.703] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.703] FindClose (in: hFindFile=0x2f246c0 | out: hFindFile=0x2f246c0) returned 1 [0115.703] SetLastError (dwErrCode=0x0) [0115.703] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\RyukReadMe.html" (normalized: "c:\\boot\\nb-no\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.704] GetLastError () returned 0x0 [0115.704] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0115.705] CloseHandle (hObject=0x6e8) returned 1 [0115.705] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0115.705] SetLastError (dwErrCode=0x0) [0115.705] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.705] GetLastError () returned 0xb7 [0115.705] CloseHandle (hObject=0x6e8) returned 1 [0115.705] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24e40 [0115.705] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.705] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.705] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.706] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.706] FindClose (in: hFindFile=0x2f24e40 | out: hFindFile=0x2f24e40) returned 1 [0115.706] SetLastError (dwErrCode=0x0) [0115.706] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\RyukReadMe.html" (normalized: "c:\\boot\\nl-nl\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.706] GetLastError () returned 0x0 [0115.706] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0115.707] CloseHandle (hObject=0x6e8) returned 1 [0115.707] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0115.707] SetLastError (dwErrCode=0x0) [0115.707] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.707] GetLastError () returned 0xb7 [0115.707] CloseHandle (hObject=0x6e8) returned 1 [0115.707] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24d00 [0115.708] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.708] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.708] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.708] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.708] FindClose (in: hFindFile=0x2f24d00 | out: hFindFile=0x2f24d00) returned 1 [0115.708] SetLastError (dwErrCode=0x0) [0115.708] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\RyukReadMe.html" (normalized: "c:\\boot\\pl-pl\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.708] GetLastError () returned 0x0 [0115.708] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0115.709] CloseHandle (hObject=0x6e8) returned 1 [0115.709] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0115.709] SetLastError (dwErrCode=0x0) [0115.709] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.710] GetLastError () returned 0xb7 [0115.710] CloseHandle (hObject=0x6e8) returned 1 [0115.710] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f247c0 [0115.710] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.710] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.710] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.710] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.710] FindClose (in: hFindFile=0x2f247c0 | out: hFindFile=0x2f247c0) returned 1 [0115.711] SetLastError (dwErrCode=0x0) [0115.711] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\RyukReadMe.html" (normalized: "c:\\boot\\pt-br\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.711] GetLastError () returned 0x0 [0115.711] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0115.712] CloseHandle (hObject=0x6e8) returned 1 [0115.712] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0115.712] SetLastError (dwErrCode=0x0) [0115.712] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.712] GetLastError () returned 0xb7 [0115.712] CloseHandle (hObject=0x6e8) returned 1 [0115.712] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f247c0 [0116.307] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.307] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0116.307] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0116.307] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0116.308] FindClose (in: hFindFile=0x2f247c0 | out: hFindFile=0x2f247c0) returned 1 [0116.308] SetLastError (dwErrCode=0x0) [0116.308] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\RyukReadMe.html" (normalized: "c:\\boot\\pt-pt\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4 [0116.309] GetLastError () returned 0x0 [0116.309] WriteFile (in: hFile=0x6e4, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0116.309] CloseHandle (hObject=0x6e4) returned 1 [0116.310] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qps-ploc", cAlternateFileName="")) returned 1 [0116.310] SetLastError (dwErrCode=0x0) [0116.310] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4 [0116.310] GetLastError () returned 0xb7 [0116.310] CloseHandle (hObject=0x6e4) returned 1 [0116.310] FindFirstFileW (in: lpFileName="C:\\Boot\\qps-ploc\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24c80 [0116.310] FindNextFileW (in: hFindFile=0x2f24c80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.310] FindNextFileW (in: hFindFile=0x2f24c80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0116.310] FindNextFileW (in: hFindFile=0x2f24c80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0116.310] FindNextFileW (in: hFindFile=0x2f24c80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0116.310] FindClose (in: hFindFile=0x2f24c80 | out: hFindFile=0x2f24c80) returned 1 [0116.310] SetLastError (dwErrCode=0x0) [0116.310] CreateFileW (lpFileName="C:\\Boot\\qps-ploc\\RyukReadMe.html" (normalized: "c:\\boot\\qps-ploc\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4 [0116.311] GetLastError () returned 0x0 [0116.311] WriteFile (in: hFile=0x6e4, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0116.311] CloseHandle (hObject=0x6e4) returned 1 [0116.312] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0116.312] SetLastError (dwErrCode=0x0) [0116.312] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4 [0116.312] GetLastError () returned 0xb7 [0116.312] CloseHandle (hObject=0x6e4) returned 1 [0116.312] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24e40 [0116.313] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.313] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll", cAlternateFileName="")) returned 1 [0116.313] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0116.313] SetLastError (dwErrCode=0x0) [0116.313] CreateFileW (lpFileName="C:\\Boot\\Resources\\RyukReadMe.html" (normalized: "c:\\boot\\resources\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6dc [0116.313] GetLastError () returned 0x0 [0116.313] WriteFile (in: hFile=0x6dc, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19c46c, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19c46c*=0x273, lpOverlapped=0x0) returned 1 [0116.314] CloseHandle (hObject=0x6dc) returned 1 [0116.314] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\en-US\\*.*", lpFindFileData=0x19c1a4 | out: lpFindFileData=0x19c1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f247c0 [0116.314] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c1a4 | out: lpFindFileData=0x19c1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.314] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c1a4 | out: lpFindFileData=0x19c1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1 [0116.314] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c1a4 | out: lpFindFileData=0x19c1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 0 [0116.314] FindClose (in: hFindFile=0x2f247c0 | out: hFindFile=0x2f247c0) returned 1 [0116.314] SetLastError (dwErrCode=0x0) [0116.314] CreateFileW (lpFileName="C:\\Boot\\Resources\\en-US\\RyukReadMe.html" (normalized: "c:\\boot\\resources\\en-us\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6dc [0116.315] GetLastError () returned 0x0 [0116.315] WriteFile (in: hFile=0x6dc, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19c45c, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19c45c*=0x273, lpOverlapped=0x0) returned 1 [0116.316] CloseHandle (hObject=0x6dc) returned 1 [0116.316] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0116.316] FindClose (in: hFindFile=0x2f24e40 | out: hFindFile=0x2f24e40) returned 1 [0116.316] SetLastError (dwErrCode=0x0) [0116.316] CreateFileW (lpFileName="C:\\Boot\\Resources\\RyukReadMe.html" (normalized: "c:\\boot\\resources\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4 [0116.316] GetLastError () returned 0xb7 [0116.316] CloseHandle (hObject=0x6e4) returned 1 [0116.316] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0116.316] SetLastError (dwErrCode=0x0) [0116.317] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4 [0116.317] GetLastError () returned 0xb7 [0116.317] CloseHandle (hObject=0x6e4) returned 1 [0116.317] FindFirstFileW (in: lpFileName="C:\\Boot\\ro-RO\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f247c0 [0116.317] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.317] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0116.317] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0116.318] FindClose (in: hFindFile=0x2f247c0 | out: hFindFile=0x2f247c0) returned 1 [0116.318] SetLastError (dwErrCode=0x0) [0116.318] CreateFileW (lpFileName="C:\\Boot\\ro-RO\\RyukReadMe.html" (normalized: "c:\\boot\\ro-ro\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4 [0116.318] GetLastError () returned 0x0 [0116.318] WriteFile (in: hFile=0x6e4, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0116.319] CloseHandle (hObject=0x6e4) returned 1 [0116.319] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0116.320] SetLastError (dwErrCode=0x0) [0116.320] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4 [0116.320] GetLastError () returned 0xb7 [0116.320] CloseHandle (hObject=0x6e4) returned 1 [0116.320] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24700 [0116.320] FindNextFileW (in: hFindFile=0x2f24700, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.320] FindNextFileW (in: hFindFile=0x2f24700, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0116.321] FindNextFileW (in: hFindFile=0x2f24700, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0116.321] FindNextFileW (in: hFindFile=0x2f24700, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0116.321] FindClose (in: hFindFile=0x2f24700 | out: hFindFile=0x2f24700) returned 1 [0116.321] SetLastError (dwErrCode=0x0) [0116.321] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\RyukReadMe.html" (normalized: "c:\\boot\\ru-ru\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4 [0116.321] GetLastError () returned 0x0 [0116.321] WriteFile (in: hFile=0x6e4, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0116.322] CloseHandle (hObject=0x6e4) returned 1 [0116.322] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd62532bd, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd62532bd, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd673de7d, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x0, dwReserved1=0x0, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0116.322] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0116.322] SetLastError (dwErrCode=0x0) [0116.322] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4 [0116.322] GetLastError () returned 0xb7 [0116.322] CloseHandle (hObject=0x6e4) returned 1 [0116.322] FindFirstFileW (in: lpFileName="C:\\Boot\\sk-SK\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f246c0 [0116.322] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.323] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0116.323] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0116.323] FindClose (in: hFindFile=0x2f246c0 | out: hFindFile=0x2f246c0) returned 1 [0116.323] SetLastError (dwErrCode=0x0) [0116.323] CreateFileW (lpFileName="C:\\Boot\\sk-SK\\RyukReadMe.html" (normalized: "c:\\boot\\sk-sk\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4 [0116.323] GetLastError () returned 0x0 [0116.323] WriteFile (in: hFile=0x6e4, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0116.324] CloseHandle (hObject=0x6e4) returned 1 [0116.324] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0116.324] SetLastError (dwErrCode=0x0) [0116.324] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4 [0116.324] GetLastError () returned 0xb7 [0116.324] CloseHandle (hObject=0x6e4) returned 1 [0116.324] FindFirstFileW (in: lpFileName="C:\\Boot\\sl-SI\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24b80 [0116.325] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.325] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0116.325] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0116.325] FindClose (in: hFindFile=0x2f24b80 | out: hFindFile=0x2f24b80) returned 1 [0116.325] SetLastError (dwErrCode=0x0) [0116.325] CreateFileW (lpFileName="C:\\Boot\\sl-SI\\RyukReadMe.html" (normalized: "c:\\boot\\sl-si\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4 [0116.325] GetLastError () returned 0x0 [0116.325] WriteFile (in: hFile=0x6e4, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0116.326] CloseHandle (hObject=0x6e4) returned 1 [0116.326] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0116.326] SetLastError (dwErrCode=0x0) [0116.326] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4 [0116.326] GetLastError () returned 0xb7 [0116.326] CloseHandle (hObject=0x6e4) returned 1 [0116.327] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24b80 [0116.327] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.327] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0116.327] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0116.327] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0116.327] FindClose (in: hFindFile=0x2f24b80 | out: hFindFile=0x2f24b80) returned 1 [0116.327] SetLastError (dwErrCode=0x0) [0116.327] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-CS\\RyukReadMe.html" (normalized: "c:\\boot\\sr-latn-cs\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4 [0116.329] GetLastError () returned 0x0 [0116.329] WriteFile (in: hFile=0x6e4, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0116.330] CloseHandle (hObject=0x6e4) returned 1 [0116.330] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1 [0116.330] SetLastError (dwErrCode=0x0) [0116.330] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4 [0116.330] GetLastError () returned 0xb7 [0116.331] CloseHandle (hObject=0x6e4) returned 1 [0116.331] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-RS\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24e40 [0116.331] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.331] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0116.331] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0116.331] FindClose (in: hFindFile=0x2f24e40 | out: hFindFile=0x2f24e40) returned 1 [0116.331] SetLastError (dwErrCode=0x0) [0116.331] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-RS\\RyukReadMe.html" (normalized: "c:\\boot\\sr-latn-rs\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4 [0116.332] GetLastError () returned 0x0 [0116.332] WriteFile (in: hFile=0x6e4, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0116.333] CloseHandle (hObject=0x6e4) returned 1 [0116.333] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0116.333] SetLastError (dwErrCode=0x0) [0116.333] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4 [0116.333] GetLastError () returned 0xb7 [0116.333] CloseHandle (hObject=0x6e4) returned 1 [0116.333] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24c80 [0116.334] FindNextFileW (in: hFindFile=0x2f24c80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.334] FindNextFileW (in: hFindFile=0x2f24c80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0116.334] FindNextFileW (in: hFindFile=0x2f24c80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0116.334] FindNextFileW (in: hFindFile=0x2f24c80, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0116.334] FindClose (in: hFindFile=0x2f24c80 | out: hFindFile=0x2f24c80) returned 1 [0116.334] SetLastError (dwErrCode=0x0) [0116.334] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\RyukReadMe.html" (normalized: "c:\\boot\\sv-se\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4 [0116.334] GetLastError () returned 0x0 [0116.334] WriteFile (in: hFile=0x6e4, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0116.335] CloseHandle (hObject=0x6e4) returned 1 [0116.335] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0116.335] SetLastError (dwErrCode=0x0) [0116.335] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4 [0116.335] GetLastError () returned 0xb7 [0116.335] CloseHandle (hObject=0x6e4) returned 1 [0116.335] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f247c0 [0116.336] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.336] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0116.336] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0116.336] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0116.336] FindClose (in: hFindFile=0x2f247c0 | out: hFindFile=0x2f247c0) returned 1 [0116.336] SetLastError (dwErrCode=0x0) [0116.336] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\RyukReadMe.html" (normalized: "c:\\boot\\tr-tr\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4 [0116.336] GetLastError () returned 0x0 [0116.336] WriteFile (in: hFile=0x6e4, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0116.337] CloseHandle (hObject=0x6e4) returned 1 [0116.337] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0116.337] SetLastError (dwErrCode=0x0) [0116.337] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4 [0116.337] GetLastError () returned 0xb7 [0116.337] CloseHandle (hObject=0x6e4) returned 1 [0116.337] FindFirstFileW (in: lpFileName="C:\\Boot\\uk-UA\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24c00 [0116.339] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.339] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0116.339] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0116.339] FindClose (in: hFindFile=0x2f24c00 | out: hFindFile=0x2f24c00) returned 1 [0116.339] SetLastError (dwErrCode=0x0) [0116.339] CreateFileW (lpFileName="C:\\Boot\\uk-UA\\RyukReadMe.html" (normalized: "c:\\boot\\uk-ua\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4 [0116.340] GetLastError () returned 0x0 [0116.340] WriteFile (in: hFile=0x6e4, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0116.340] CloseHandle (hObject=0x6e4) returned 1 [0116.341] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x0, dwReserved1=0x0, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1 [0116.341] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4190000 [0116.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350237c4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6e4 [0116.342] VirtualFree (lpAddress=0x4190000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.343] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0116.343] SetLastError (dwErrCode=0x0) [0116.343] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6dc [0116.343] GetLastError () returned 0xb7 [0116.343] CloseHandle (hObject=0x6dc) returned 1 [0116.343] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f247c0 [0116.677] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.677] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0116.677] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0116.677] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0116.677] FindClose (in: hFindFile=0x2f247c0 | out: hFindFile=0x2f247c0) returned 1 [0116.677] SetLastError (dwErrCode=0x0) [0116.677] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\RyukReadMe.html" (normalized: "c:\\boot\\zh-cn\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6dc [0116.677] GetLastError () returned 0x0 [0116.677] WriteFile (in: hFile=0x6dc, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0116.678] CloseHandle (hObject=0x6dc) returned 1 [0116.678] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0116.678] SetLastError (dwErrCode=0x0) [0116.678] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6dc [0116.678] GetLastError () returned 0xb7 [0116.678] CloseHandle (hObject=0x6dc) returned 1 [0116.678] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f249c0 [0116.679] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.679] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0116.679] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0116.679] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0116.679] FindClose (in: hFindFile=0x2f249c0 | out: hFindFile=0x2f249c0) returned 1 [0116.679] SetLastError (dwErrCode=0x0) [0116.679] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\RyukReadMe.html" (normalized: "c:\\boot\\zh-hk\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6dc [0116.681] GetLastError () returned 0x0 [0116.681] WriteFile (in: hFile=0x6dc, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0116.682] CloseHandle (hObject=0x6dc) returned 1 [0116.682] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0116.682] SetLastError (dwErrCode=0x0) [0116.682] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6dc [0116.682] GetLastError () returned 0xb7 [0116.682] CloseHandle (hObject=0x6dc) returned 1 [0116.682] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f247c0 [0116.683] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.683] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0116.683] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0116.683] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0116.683] FindClose (in: hFindFile=0x2f247c0 | out: hFindFile=0x2f247c0) returned 1 [0116.683] SetLastError (dwErrCode=0x0) [0116.683] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\RyukReadMe.html" (normalized: "c:\\boot\\zh-tw\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6dc [0116.683] GetLastError () returned 0x0 [0116.683] WriteFile (in: hFile=0x6dc, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb28, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb28*=0x273, lpOverlapped=0x0) returned 1 [0116.684] CloseHandle (hObject=0x6dc) returned 1 [0116.684] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0116.684] FindClose (in: hFindFile=0x2f24780 | out: hFindFile=0x2f24780) returned 1 [0116.684] SetLastError (dwErrCode=0x0) [0116.684] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.html" (normalized: "c:\\boot\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x528 [0116.684] GetLastError () returned 0xb7 [0116.684] CloseHandle (hObject=0x528) returned 1 [0116.684] FindNextFileW (in: hFindFile=0x2f24e80, lpFindFileData=0x19d608 | out: lpFindFileData=0x19d608*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0116.684] FindNextFileW (in: hFindFile=0x2f24e80, lpFindFileData=0x19d608 | out: lpFindFileData=0x19d608*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0116.685] FindNextFileW (in: hFindFile=0x2f24e80, lpFindFileData=0x19d608 | out: lpFindFileData=0x19d608*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0116.685] FindNextFileW (in: hFindFile=0x2f24e80, lpFindFileData=0x19d608 | out: lpFindFileData=0x19d608*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0116.685] SetLastError (dwErrCode=0x0) [0116.685] CreateFileW (lpFileName="C:\\RyukReadMe.html" (normalized: "c:\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x528 [0116.685] GetLastError () returned 0xb7 [0116.685] CloseHandle (hObject=0x528) returned 1 [0116.685] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*.*", lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f246c0 [0116.686] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.686] FindNextFileW (in: hFindFile=0x2f246c0, lpFindFileData=0x19cf3c | out: lpFindFileData=0x19cf3c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xd7b844b1, ftCreationTime.dwHighDateTime=0x1d2a02f, ftLastAccessTime.dwLowDateTime=0xd7b844b1, ftLastAccessTime.dwHighDateTime=0x1d2a02f, ftLastWriteTime.dwLowDateTime=0xd7b844b1, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0116.686] SetLastError (dwErrCode=0x0) [0116.686] CreateFileW (lpFileName="C:\\Documents and Settings\\RyukReadMe.html" (normalized: "c:\\documents and settings\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6dc [0116.687] GetLastError () returned 0x0 [0116.687] WriteFile (in: hFile=0x6dc, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19cb38, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19cb38*=0x273, lpOverlapped=0x0) returned 1 [0116.688] CloseHandle (hObject=0x6dc) returned 1 [0116.688] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\*.*", lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24980 [0116.689] FindNextFileW (in: hFindFile=0x2f24980, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.689] FindNextFileW (in: hFindFile=0x2f24980, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0116.689] SetLastError (dwErrCode=0x0) [0116.689] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0116.690] GetLastError () returned 0x0 [0116.690] WriteFile (in: hFile=0x6e8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19c46c, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19c46c*=0x273, lpOverlapped=0x0) returned 1 [0116.691] CloseHandle (hObject=0x6e8) returned 1 [0116.692] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Adobe\\*.*", lpFindFileData=0x19c1a4 | out: lpFindFileData=0x19c1a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24bc0 [0116.692] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x19c1a4 | out: lpFindFileData=0x19c1a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.692] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x19c1a4 | out: lpFindFileData=0x19c1a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0116.692] SetLastError (dwErrCode=0x0) [0116.692] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6bc [0116.692] GetLastError () returned 0x0 [0116.692] WriteFile (in: hFile=0x6bc, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19bda0, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19bda0*=0x273, lpOverlapped=0x0) returned 1 [0116.693] CloseHandle (hObject=0x6bc) returned 1 [0116.693] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Adobe\\ARM\\*.*", lpFindFileData=0x19bad8 | out: lpFindFileData=0x19bad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f249c0 [0116.695] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19bad8 | out: lpFindFileData=0x19bad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.695] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19bad8 | out: lpFindFileData=0x19bad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_15.007.20033", cAlternateFileName="READER~1.200")) returned 1 [0116.695] SetLastError (dwErrCode=0x0) [0116.695] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c0 [0116.695] GetLastError () returned 0x0 [0116.695] WriteFile (in: hFile=0x6c0, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19b6d4, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19b6d4*=0x273, lpOverlapped=0x0) returned 1 [0116.696] CloseHandle (hObject=0x6c0) returned 1 [0116.696] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Adobe\\ARM\\Reader_15.007.20033\\*.*", lpFindFileData=0x19b40c | out: lpFindFileData=0x19b40c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24940 [0116.697] FindNextFileW (in: hFindFile=0x2f24940, lpFindFileData=0x19b40c | out: lpFindFileData=0x19b40c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.697] FindNextFileW (in: hFindFile=0x2f24940, lpFindFileData=0x19b40c | out: lpFindFileData=0x19b40c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0116.697] FindClose (in: hFindFile=0x2f24940 | out: hFindFile=0x2f24940) returned 1 [0116.698] SetLastError (dwErrCode=0x0) [0116.698] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Adobe\\ARM\\Reader_15.007.20033\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\adobe\\arm\\reader_15.007.20033\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c0 [0116.698] GetLastError () returned 0x0 [0116.698] WriteFile (in: hFile=0x6c0, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19b6c4, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19b6c4*=0x273, lpOverlapped=0x0) returned 1 [0116.699] CloseHandle (hObject=0x6c0) returned 1 [0116.699] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19bad8 | out: lpFindFileData=0x19bad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xa7140105, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_15.023.20070", cAlternateFileName="READER~2.200")) returned 1 [0116.699] SetLastError (dwErrCode=0x0) [0116.699] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c0 [0116.699] GetLastError () returned 0xb7 [0116.699] CloseHandle (hObject=0x6c0) returned 1 [0116.700] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Adobe\\ARM\\Reader_15.023.20070\\*.*", lpFindFileData=0x19b40c | out: lpFindFileData=0x19b40c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24700 [0116.700] FindNextFileW (in: hFindFile=0x2f24700, lpFindFileData=0x19b40c | out: lpFindFileData=0x19b40c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.700] FindNextFileW (in: hFindFile=0x2f24700, lpFindFileData=0x19b40c | out: lpFindFileData=0x19b40c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0116.700] FindClose (in: hFindFile=0x2f24700 | out: hFindFile=0x2f24700) returned 1 [0116.700] SetLastError (dwErrCode=0x0) [0116.700] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Adobe\\ARM\\Reader_15.023.20070\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\adobe\\arm\\reader_15.023.20070\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c0 [0116.701] GetLastError () returned 0x0 [0116.701] WriteFile (in: hFile=0x6c0, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19b6c4, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19b6c4*=0x273, lpOverlapped=0x0) returned 1 [0116.702] CloseHandle (hObject=0x6c0) returned 1 [0116.702] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19bad8 | out: lpFindFileData=0x19bad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 1 [0116.702] SetLastError (dwErrCode=0x0) [0116.702] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c0 [0116.702] GetLastError () returned 0xb7 [0116.702] CloseHandle (hObject=0x6c0) returned 1 [0116.702] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Adobe\\ARM\\S\\*.*", lpFindFileData=0x19b40c | out: lpFindFileData=0x19b40c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24d80 [0116.702] FindNextFileW (in: hFindFile=0x2f24d80, lpFindFileData=0x19b40c | out: lpFindFileData=0x19b40c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.702] FindNextFileW (in: hFindFile=0x2f24d80, lpFindFileData=0x19b40c | out: lpFindFileData=0x19b40c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0116.702] FindClose (in: hFindFile=0x2f24d80 | out: hFindFile=0x2f24d80) returned 1 [0116.703] SetLastError (dwErrCode=0x0) [0116.703] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Adobe\\ARM\\S\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\adobe\\arm\\s\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c0 [0116.703] GetLastError () returned 0x0 [0116.703] WriteFile (in: hFile=0x6c0, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19b6c4, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x19b6c4*=0x273, lpOverlapped=0x0) returned 1 [0116.704] CloseHandle (hObject=0x6c0) returned 1 [0116.704] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19bad8 | out: lpFindFileData=0x19bad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 0 [0116.705] FindClose (in: hFindFile=0x2f249c0 | out: hFindFile=0x2f249c0) returned 1 [0116.705] SetLastError (dwErrCode=0x0) [0116.705] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6bc [0116.705] GetLastError () returned 0xb7 [0116.705] CloseHandle (hObject=0x6bc) returned 1 [0116.705] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x19c1a4 | out: lpFindFileData=0x19c1a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 0 [0116.705] FindClose (in: hFindFile=0x2f24bc0 | out: hFindFile=0x2f24bc0) returned 1 [0116.705] SetLastError (dwErrCode=0x0) [0116.705] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0116.705] GetLastError () returned 0xb7 [0116.705] CloseHandle (hObject=0x6e8) returned 1 [0116.705] FindNextFileW (in: hFindFile=0x2f24980, lpFindFileData=0x19c870 | out: lpFindFileData=0x19c870*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0116.705] SetLastError (dwErrCode=0x0) [0116.705] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0116.706] GetLastError () returned 0xb7 [0116.706] CloseHandle (hObject=0x6e8) returned 1 [0116.706] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\*.*", lpFindFileData=0x19c1a4 | out: lpFindFileData=0x19c1a4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24940 [0116.706] FindNextFileW (in: hFindFile=0x2f24940, lpFindFileData=0x19c1a4 | out: lpFindFileData=0x19c1a4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.706] FindNextFileW (in: hFindFile=0x2f24940, lpFindFileData=0x19c1a4 | out: lpFindFileData=0x19c1a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0116.706] SetLastError (dwErrCode=0x0) [0116.706] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6bc [0116.706] GetLastError () returned 0xb7 [0116.706] CloseHandle (hObject=0x6bc) returned 1 [0116.707] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Adobe\\*.*", lpFindFileData=0x19bad8 | out: lpFindFileData=0x19bad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24cc0 [0116.707] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x19bad8 | out: lpFindFileData=0x19bad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.707] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x19bad8 | out: lpFindFileData=0x19bad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0116.707] SetLastError (dwErrCode=0x0) [0116.707] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c0 [0116.707] GetLastError () returned 0xb7 [0116.707] CloseHandle (hObject=0x6c0) returned 1 [0116.707] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Adobe\\ARM\\*.*", lpFindFileData=0x19b40c | out: lpFindFileData=0x19b40c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24b80 [0116.707] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19b40c | out: lpFindFileData=0x19b40c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.707] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19b40c | out: lpFindFileData=0x19b40c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_15.007.20033", cAlternateFileName="READER~1.200")) returned 1 [0116.707] SetLastError (dwErrCode=0x0) [0116.707] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6ec [0116.707] GetLastError () returned 0xb7 [0116.707] CloseHandle (hObject=0x6ec) returned 1 [0116.708] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Adobe\\ARM\\Reader_15.007.20033\\*.*", lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f249c0 [0116.708] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.708] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x0, dwReserved1=0x0, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0116.708] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x0, dwReserved1=0x0, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0116.708] FindClose (in: hFindFile=0x2f249c0 | out: hFindFile=0x2f249c0) returned 1 [0116.708] SetLastError (dwErrCode=0x0) [0116.708] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Adobe\\ARM\\Reader_15.007.20033\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\adobe\\arm\\reader_15.007.20033\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6ec [0116.708] GetLastError () returned 0xb7 [0116.708] CloseHandle (hObject=0x6ec) returned 1 [0116.708] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19b40c | out: lpFindFileData=0x19b40c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_15.023.20070", cAlternateFileName="READER~2.200")) returned 1 [0116.708] SetLastError (dwErrCode=0x0) [0116.708] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6ec [0116.708] GetLastError () returned 0xb7 [0116.708] CloseHandle (hObject=0x6ec) returned 1 [0116.708] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Adobe\\ARM\\Reader_15.023.20070\\*.*", lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f247c0 [0116.709] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.709] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x0, dwReserved1=0x0, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0116.709] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x0, dwReserved1=0x0, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0116.709] FindClose (in: hFindFile=0x2f247c0 | out: hFindFile=0x2f247c0) returned 1 [0116.709] SetLastError (dwErrCode=0x0) [0116.709] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Adobe\\ARM\\Reader_15.023.20070\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\adobe\\arm\\reader_15.023.20070\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6ec [0116.709] GetLastError () returned 0xb7 [0116.709] CloseHandle (hObject=0x6ec) returned 1 [0116.709] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19b40c | out: lpFindFileData=0x19b40c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x0, dwReserved1=0x0, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0116.709] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19b40c | out: lpFindFileData=0x19b40c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 1 [0116.709] SetLastError (dwErrCode=0x0) [0116.709] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6ec [0116.709] GetLastError () returned 0xb7 [0116.709] CloseHandle (hObject=0x6ec) returned 1 [0116.709] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Adobe\\ARM\\S\\*.*", lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f249c0 [0116.710] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.710] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x0, dwReserved1=0x0, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0116.710] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x0, dwReserved1=0x0, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0116.710] FindClose (in: hFindFile=0x2f249c0 | out: hFindFile=0x2f249c0) returned 1 [0116.710] SetLastError (dwErrCode=0x0) [0116.710] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Adobe\\ARM\\S\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\adobe\\arm\\s\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6ec [0116.710] GetLastError () returned 0xb7 [0116.710] CloseHandle (hObject=0x6ec) returned 1 [0116.710] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19b40c | out: lpFindFileData=0x19b40c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 0 [0116.710] FindClose (in: hFindFile=0x2f24b80 | out: hFindFile=0x2f24b80) returned 1 [0116.710] SetLastError (dwErrCode=0x0) [0116.710] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c0 [0116.710] GetLastError () returned 0xb7 [0116.710] CloseHandle (hObject=0x6c0) returned 1 [0116.710] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x19bad8 | out: lpFindFileData=0x19bad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x0, dwReserved1=0x0, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0116.710] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x19bad8 | out: lpFindFileData=0x19bad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x0, dwReserved1=0x0, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0116.711] FindClose (in: hFindFile=0x2f24cc0 | out: hFindFile=0x2f24cc0) returned 1 [0116.711] SetLastError (dwErrCode=0x0) [0116.711] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6bc [0116.711] GetLastError () returned 0xb7 [0116.711] CloseHandle (hObject=0x6bc) returned 1 [0116.711] FindNextFileW (in: hFindFile=0x2f24940, lpFindFileData=0x19c1a4 | out: lpFindFileData=0x19c1a4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0116.711] SetLastError (dwErrCode=0x0) [0116.711] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6bc [0116.711] GetLastError () returned 0xb7 [0116.711] CloseHandle (hObject=0x6bc) returned 1 [0116.711] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\*.*", lpFindFileData=0x19bad8 | out: lpFindFileData=0x19bad8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24b80 [0116.711] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19bad8 | out: lpFindFileData=0x19bad8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.711] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19bad8 | out: lpFindFileData=0x19bad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0116.711] SetLastError (dwErrCode=0x0) [0116.711] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c0 [0116.712] GetLastError () returned 0xb7 [0116.712] CloseHandle (hObject=0x6c0) returned 1 [0116.712] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Adobe\\*.*", lpFindFileData=0x19b40c | out: lpFindFileData=0x19b40c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24780 [0116.712] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19b40c | out: lpFindFileData=0x19b40c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.712] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19b40c | out: lpFindFileData=0x19b40c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0116.712] SetLastError (dwErrCode=0x0) [0116.712] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6ec [0116.712] GetLastError () returned 0xb7 [0116.712] CloseHandle (hObject=0x6ec) returned 1 [0116.712] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Adobe\\ARM\\*.*", lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x68002e, dwReserved1=0x6d0074, cFileName=".", cAlternateFileName="")) returned 0x2f24bc0 [0116.712] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x68002e, dwReserved1=0x6d0074, cFileName="..", cAlternateFileName="")) returned 1 [0116.712] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x68002e, dwReserved1=0x6d0074, cFileName="Reader_15.007.20033", cAlternateFileName="READER~1.200")) returned 1 [0116.712] SetLastError (dwErrCode=0x0) [0116.712] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c4 [0116.713] GetLastError () returned 0xb7 [0116.713] CloseHandle (hObject=0x6c4) returned 1 [0116.713] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.007.20033\\*.*", lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65004d, dwReserved1=0x68002e, cFileName=".", cAlternateFileName="")) returned 0x2f24700 [0116.713] FindNextFileW (in: hFindFile=0x2f24700, lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65004d, dwReserved1=0x68002e, cFileName="..", cAlternateFileName="")) returned 1 [0116.713] FindNextFileW (in: hFindFile=0x2f24700, lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x65004d, dwReserved1=0x68002e, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0116.713] FindNextFileW (in: hFindFile=0x2f24700, lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x65004d, dwReserved1=0x68002e, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0116.713] FindClose (in: hFindFile=0x2f24700 | out: hFindFile=0x2f24700) returned 1 [0116.713] SetLastError (dwErrCode=0x0) [0116.713] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.007.20033\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\adobe\\arm\\reader_15.007.20033\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c4 [0116.713] GetLastError () returned 0xb7 [0116.713] CloseHandle (hObject=0x6c4) returned 1 [0116.713] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x68002e, dwReserved1=0x6d0074, cFileName="Reader_15.023.20070", cAlternateFileName="READER~2.200")) returned 1 [0116.713] SetLastError (dwErrCode=0x0) [0116.713] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c4 [0116.714] GetLastError () returned 0xb7 [0116.714] CloseHandle (hObject=0x6c4) returned 1 [0116.714] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.023.20070\\*.*", lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65004d, dwReserved1=0x68002e, cFileName=".", cAlternateFileName="")) returned 0x2f24800 [0116.714] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65004d, dwReserved1=0x68002e, cFileName="..", cAlternateFileName="")) returned 1 [0116.714] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x65004d, dwReserved1=0x68002e, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0116.714] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x65004d, dwReserved1=0x68002e, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0116.714] FindClose (in: hFindFile=0x2f24800 | out: hFindFile=0x2f24800) returned 1 [0116.714] SetLastError (dwErrCode=0x0) [0116.714] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.023.20070\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\adobe\\arm\\reader_15.023.20070\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c4 [0116.714] GetLastError () returned 0xb7 [0116.714] CloseHandle (hObject=0x6c4) returned 1 [0116.714] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x68002e, dwReserved1=0x6d0074, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0116.714] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x68002e, dwReserved1=0x6d0074, cFileName="S", cAlternateFileName="")) returned 1 [0116.714] SetLastError (dwErrCode=0x0) [0116.714] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c4 [0116.715] GetLastError () returned 0xb7 [0116.715] CloseHandle (hObject=0x6c4) returned 1 [0116.715] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Adobe\\ARM\\S\\*.*", lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65004d, dwReserved1=0x68002e, cFileName=".", cAlternateFileName="")) returned 0x2f247c0 [0116.715] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65004d, dwReserved1=0x68002e, cFileName="..", cAlternateFileName="")) returned 1 [0116.715] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x65004d, dwReserved1=0x68002e, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0116.715] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x65004d, dwReserved1=0x68002e, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0116.715] FindClose (in: hFindFile=0x2f247c0 | out: hFindFile=0x2f247c0) returned 1 [0116.715] SetLastError (dwErrCode=0x0) [0116.715] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Adobe\\ARM\\S\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\adobe\\arm\\s\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c4 [0116.715] GetLastError () returned 0xb7 [0116.715] CloseHandle (hObject=0x6c4) returned 1 [0116.715] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x68002e, dwReserved1=0x6d0074, cFileName="S", cAlternateFileName="")) returned 0 [0116.715] FindClose (in: hFindFile=0x2f24bc0 | out: hFindFile=0x2f24bc0) returned 1 [0116.715] SetLastError (dwErrCode=0x0) [0116.715] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6ec [0116.716] GetLastError () returned 0xb7 [0116.716] CloseHandle (hObject=0x6ec) returned 1 [0116.716] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19b40c | out: lpFindFileData=0x19b40c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x0, dwReserved1=0x0, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0116.716] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19b40c | out: lpFindFileData=0x19b40c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x0, dwReserved1=0x0, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0116.716] FindClose (in: hFindFile=0x2f24780 | out: hFindFile=0x2f24780) returned 1 [0116.716] SetLastError (dwErrCode=0x0) [0116.716] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c0 [0116.716] GetLastError () returned 0xb7 [0116.716] CloseHandle (hObject=0x6c0) returned 1 [0116.716] FindNextFileW (in: hFindFile=0x2f24b80, lpFindFileData=0x19bad8 | out: lpFindFileData=0x19bad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0116.716] SetLastError (dwErrCode=0x0) [0116.716] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c0 [0116.717] GetLastError () returned 0xb7 [0116.717] CloseHandle (hObject=0x6c0) returned 1 [0116.717] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\*.*", lpFindFileData=0x19b40c | out: lpFindFileData=0x19b40c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24c80 [0116.718] FindNextFileW (in: hFindFile=0x2f24c80, lpFindFileData=0x19b40c | out: lpFindFileData=0x19b40c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.718] FindNextFileW (in: hFindFile=0x2f24c80, lpFindFileData=0x19b40c | out: lpFindFileData=0x19b40c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0116.718] SetLastError (dwErrCode=0x0) [0116.718] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6ec [0116.718] GetLastError () returned 0xb7 [0116.718] CloseHandle (hObject=0x6ec) returned 1 [0116.718] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Adobe\\*.*", lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x52005c, dwReserved1=0x750079, cFileName=".", cAlternateFileName="")) returned 0x2f24cc0 [0116.718] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x52005c, dwReserved1=0x750079, cFileName="..", cAlternateFileName="")) returned 1 [0116.718] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x52005c, dwReserved1=0x750079, cFileName="ARM", cAlternateFileName="")) returned 1 [0116.718] SetLastError (dwErrCode=0x0) [0116.718] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c4 [0116.719] GetLastError () returned 0xb7 [0116.719] CloseHandle (hObject=0x6c4) returned 1 [0116.719] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\*.*", lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f0064, dwReserved1=0x650062, cFileName=".", cAlternateFileName="")) returned 0x2f249c0 [0116.719] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f0064, dwReserved1=0x650062, cFileName="..", cAlternateFileName="")) returned 1 [0116.719] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f0064, dwReserved1=0x650062, cFileName="Reader_15.007.20033", cAlternateFileName="READER~1.200")) returned 1 [0116.719] SetLastError (dwErrCode=0x0) [0116.719] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d4 [0116.719] GetLastError () returned 0xb7 [0116.719] CloseHandle (hObject=0x6d4) returned 1 [0116.719] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.007.20033\\*.*", lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x6f0064, cFileName=".", cAlternateFileName="")) returned 0x2f24bc0 [0116.719] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x6f0064, cFileName="..", cAlternateFileName="")) returned 1 [0116.719] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x6f0064, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0116.719] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x6f0064, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0116.719] FindClose (in: hFindFile=0x2f24bc0 | out: hFindFile=0x2f24bc0) returned 1 [0116.720] SetLastError (dwErrCode=0x0) [0116.720] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.007.20033\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\adobe\\arm\\reader_15.007.20033\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d4 [0116.721] GetLastError () returned 0xb7 [0116.721] CloseHandle (hObject=0x6d4) returned 1 [0117.271] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f0064, dwReserved1=0x650062, cFileName="Reader_15.023.20070", cAlternateFileName="READER~2.200")) returned 1 [0117.271] SetLastError (dwErrCode=0x0) [0117.271] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x468 [0117.501] GetLastError () returned 0xb7 [0117.502] CloseHandle (hObject=0x468) returned 1 [0117.513] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.023.20070\\*.*", lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x6f0064, cFileName=".", cAlternateFileName="")) returned 0x2f24d00 [0117.526] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x6f0064, cFileName="..", cAlternateFileName="")) returned 1 [0117.526] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x6f0064, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.526] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x6f0064, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0117.526] FindClose (in: hFindFile=0x2f24d00 | out: hFindFile=0x2f24d00) returned 1 [0117.529] SetLastError (dwErrCode=0x0) [0117.530] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.023.20070\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\adobe\\arm\\reader_15.023.20070\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x468 [0117.530] GetLastError () returned 0xb7 [0117.530] CloseHandle (hObject=0x468) returned 1 [0117.530] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x6f0064, dwReserved1=0x650062, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.530] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f0064, dwReserved1=0x650062, cFileName="S", cAlternateFileName="")) returned 1 [0117.530] SetLastError (dwErrCode=0x0) [0117.530] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x468 [0117.530] GetLastError () returned 0xb7 [0117.530] CloseHandle (hObject=0x468) returned 1 [0117.530] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\S\\*.*", lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x6f0064, cFileName=".", cAlternateFileName="")) returned 0x2f24c40 [0117.530] FindNextFileW (in: hFindFile=0x2f24c40, lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x6f0064, cFileName="..", cAlternateFileName="")) returned 1 [0117.530] FindNextFileW (in: hFindFile=0x2f24c40, lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x6f0064, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.531] FindNextFileW (in: hFindFile=0x2f24c40, lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x6f0064, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0117.531] FindClose (in: hFindFile=0x2f24c40 | out: hFindFile=0x2f24c40) returned 1 [0117.531] SetLastError (dwErrCode=0x0) [0117.531] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\S\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\adobe\\arm\\s\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x468 [0117.531] GetLastError () returned 0xb7 [0117.531] CloseHandle (hObject=0x468) returned 1 [0117.531] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f0064, dwReserved1=0x650062, cFileName="S", cAlternateFileName="")) returned 0 [0117.531] FindClose (in: hFindFile=0x2f249c0 | out: hFindFile=0x2f249c0) returned 1 [0117.531] SetLastError (dwErrCode=0x0) [0117.531] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c4 [0117.531] GetLastError () returned 0xb7 [0117.531] CloseHandle (hObject=0x6c4) returned 1 [0117.531] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x52005c, dwReserved1=0x750079, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.531] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x52005c, dwReserved1=0x750079, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0117.531] FindClose (in: hFindFile=0x2f24cc0 | out: hFindFile=0x2f24cc0) returned 1 [0117.532] SetLastError (dwErrCode=0x0) [0117.532] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6ec [0117.532] GetLastError () returned 0xb7 [0117.532] CloseHandle (hObject=0x6ec) returned 1 [0117.532] FindNextFileW (in: hFindFile=0x2f24c80, lpFindFileData=0x19b40c | out: lpFindFileData=0x19b40c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0117.532] SetLastError (dwErrCode=0x0) [0117.532] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6ec [0117.532] GetLastError () returned 0xb7 [0117.532] CloseHandle (hObject=0x6ec) returned 1 [0117.532] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\*.*", lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x52005c, dwReserved1=0x750079, cFileName=".", cAlternateFileName="")) returned 0x2f24780 [0117.532] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x52005c, dwReserved1=0x750079, cFileName="..", cAlternateFileName="")) returned 1 [0117.532] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x52005c, dwReserved1=0x750079, cFileName="Adobe", cAlternateFileName="")) returned 1 [0117.532] SetLastError (dwErrCode=0x0) [0117.532] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c4 [0117.533] GetLastError () returned 0xb7 [0117.533] CloseHandle (hObject=0x6c4) returned 1 [0117.533] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\*.*", lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24e40 [0117.533] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0117.533] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="ARM", cAlternateFileName="")) returned 1 [0117.533] SetLastError (dwErrCode=0x0) [0117.533] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x468 [0117.533] GetLastError () returned 0xb7 [0117.533] CloseHandle (hObject=0x468) returned 1 [0117.533] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\*.*", lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24700 [0117.533] FindNextFileW (in: hFindFile=0x2f24700, lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0117.533] FindNextFileW (in: hFindFile=0x2f24700, lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Reader_15.007.20033", cAlternateFileName="READER~1.200")) returned 1 [0117.534] SetLastError (dwErrCode=0x0) [0117.534] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5ec [0117.534] GetLastError () returned 0xb7 [0117.534] CloseHandle (hObject=0x5ec) returned 1 [0117.534] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.007.20033\\*.*", lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f247c0 [0117.534] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0117.534] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.534] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0117.534] FindClose (in: hFindFile=0x2f247c0 | out: hFindFile=0x2f247c0) returned 1 [0117.534] SetLastError (dwErrCode=0x0) [0117.534] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.007.20033\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\adobe\\arm\\reader_15.007.20033\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5ec [0117.535] GetLastError () returned 0xb7 [0117.535] CloseHandle (hObject=0x5ec) returned 1 [0117.535] FindNextFileW (in: hFindFile=0x2f24700, lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Reader_15.023.20070", cAlternateFileName="READER~2.200")) returned 1 [0117.535] SetLastError (dwErrCode=0x0) [0117.535] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5ec [0117.535] GetLastError () returned 0xb7 [0117.535] CloseHandle (hObject=0x5ec) returned 1 [0117.535] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.023.20070\\*.*", lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f247c0 [0117.535] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0117.535] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.535] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0117.535] FindClose (in: hFindFile=0x2f247c0 | out: hFindFile=0x2f247c0) returned 1 [0117.536] SetLastError (dwErrCode=0x0) [0117.536] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.023.20070\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\adobe\\arm\\reader_15.023.20070\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5ec [0117.536] GetLastError () returned 0xb7 [0117.536] CloseHandle (hObject=0x5ec) returned 1 [0117.536] FindNextFileW (in: hFindFile=0x2f24700, lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.536] FindNextFileW (in: hFindFile=0x2f24700, lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="S", cAlternateFileName="")) returned 1 [0117.536] SetLastError (dwErrCode=0x0) [0117.536] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5ec [0117.536] GetLastError () returned 0xb7 [0117.536] CloseHandle (hObject=0x5ec) returned 1 [0117.536] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\S\\*.*", lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24ac0 [0117.536] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0117.536] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.536] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0117.537] FindClose (in: hFindFile=0x2f24ac0 | out: hFindFile=0x2f24ac0) returned 1 [0117.537] SetLastError (dwErrCode=0x0) [0117.537] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\S\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\adobe\\arm\\s\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5ec [0117.537] GetLastError () returned 0xb7 [0117.537] CloseHandle (hObject=0x5ec) returned 1 [0117.537] FindNextFileW (in: hFindFile=0x2f24700, lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="S", cAlternateFileName="")) returned 0 [0117.537] FindClose (in: hFindFile=0x2f24700 | out: hFindFile=0x2f24700) returned 1 [0117.537] SetLastError (dwErrCode=0x0) [0117.537] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x468 [0117.537] GetLastError () returned 0xb7 [0117.537] CloseHandle (hObject=0x468) returned 1 [0117.537] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.537] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0117.537] FindClose (in: hFindFile=0x2f24e40 | out: hFindFile=0x2f24e40) returned 1 [0117.537] SetLastError (dwErrCode=0x0) [0117.537] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c4 [0117.538] GetLastError () returned 0xb7 [0117.538] CloseHandle (hObject=0x6c4) returned 1 [0117.538] FindNextFileW (in: hFindFile=0x2f24780, lpFindFileData=0x19ad40 | out: lpFindFileData=0x19ad40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x750079, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0117.538] SetLastError (dwErrCode=0x0) [0117.538] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c4 [0117.538] GetLastError () returned 0xb7 [0117.538] CloseHandle (hObject=0x6c4) returned 1 [0117.538] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\*.*", lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f249c0 [0117.538] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0117.538] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Adobe", cAlternateFileName="")) returned 1 [0117.538] SetLastError (dwErrCode=0x0) [0117.538] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x468 [0117.538] GetLastError () returned 0xb7 [0117.538] CloseHandle (hObject=0x468) returned 1 [0117.539] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\*.*", lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24ac0 [0117.539] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0117.539] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="ARM", cAlternateFileName="")) returned 1 [0117.539] SetLastError (dwErrCode=0x0) [0117.539] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5ec [0117.539] GetLastError () returned 0xb7 [0117.539] CloseHandle (hObject=0x5ec) returned 1 [0117.539] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\*.*", lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24e40 [0117.539] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0117.539] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Reader_15.007.20033", cAlternateFileName="READER~1.200")) returned 1 [0117.539] SetLastError (dwErrCode=0x0) [0117.539] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0117.540] GetLastError () returned 0xb7 [0117.540] CloseHandle (hObject=0x700) returned 1 [0117.540] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.007.20033\\*.*", lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f247c0 [0117.540] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0117.540] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.540] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0117.540] FindClose (in: hFindFile=0x2f247c0 | out: hFindFile=0x2f247c0) returned 1 [0117.540] SetLastError (dwErrCode=0x0) [0117.540] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.007.20033\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\reader_15.007.20033\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0117.540] GetLastError () returned 0xb7 [0117.540] CloseHandle (hObject=0x700) returned 1 [0117.540] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Reader_15.023.20070", cAlternateFileName="READER~2.200")) returned 1 [0117.540] SetLastError (dwErrCode=0x0) [0117.540] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0117.541] GetLastError () returned 0xb7 [0117.541] CloseHandle (hObject=0x700) returned 1 [0117.541] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.023.20070\\*.*", lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24bc0 [0117.541] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0117.541] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.541] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0117.541] FindClose (in: hFindFile=0x2f24bc0 | out: hFindFile=0x2f24bc0) returned 1 [0117.541] SetLastError (dwErrCode=0x0) [0117.541] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.023.20070\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\reader_15.023.20070\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0117.541] GetLastError () returned 0xb7 [0117.541] CloseHandle (hObject=0x700) returned 1 [0117.541] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.541] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="S", cAlternateFileName="")) returned 1 [0117.541] SetLastError (dwErrCode=0x0) [0117.541] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0117.542] GetLastError () returned 0xb7 [0117.542] CloseHandle (hObject=0x700) returned 1 [0117.542] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\S\\*.*", lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24700 [0117.542] FindNextFileW (in: hFindFile=0x2f24700, lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0117.542] FindNextFileW (in: hFindFile=0x2f24700, lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.542] FindNextFileW (in: hFindFile=0x2f24700, lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0117.542] FindClose (in: hFindFile=0x2f24700 | out: hFindFile=0x2f24700) returned 1 [0117.542] SetLastError (dwErrCode=0x0) [0117.542] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\S\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\s\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0117.542] GetLastError () returned 0xb7 [0117.542] CloseHandle (hObject=0x700) returned 1 [0117.542] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="S", cAlternateFileName="")) returned 0 [0117.542] FindClose (in: hFindFile=0x2f24e40 | out: hFindFile=0x2f24e40) returned 1 [0117.542] SetLastError (dwErrCode=0x0) [0117.543] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5ec [0117.543] GetLastError () returned 0xb7 [0117.543] CloseHandle (hObject=0x5ec) returned 1 [0117.543] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.543] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0117.543] FindClose (in: hFindFile=0x2f24ac0 | out: hFindFile=0x2f24ac0) returned 1 [0117.543] SetLastError (dwErrCode=0x0) [0117.543] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x468 [0117.543] GetLastError () returned 0xb7 [0117.543] CloseHandle (hObject=0x468) returned 1 [0117.543] FindNextFileW (in: hFindFile=0x2f249c0, lpFindFileData=0x19a674 | out: lpFindFileData=0x19a674*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x69006c, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0117.543] SetLastError (dwErrCode=0x0) [0117.543] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x468 [0117.543] GetLastError () returned 0xb7 [0117.543] CloseHandle (hObject=0x468) returned 1 [0117.544] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\*.*", lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24d80 [0117.544] FindNextFileW (in: hFindFile=0x2f24d80, lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0117.544] FindNextFileW (in: hFindFile=0x2f24d80, lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Adobe", cAlternateFileName="")) returned 1 [0117.544] SetLastError (dwErrCode=0x0) [0117.544] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5ec [0117.544] GetLastError () returned 0xb7 [0117.544] CloseHandle (hObject=0x5ec) returned 1 [0117.544] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\*.*", lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24a40 [0117.544] FindNextFileW (in: hFindFile=0x2f24a40, lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0117.544] FindNextFileW (in: hFindFile=0x2f24a40, lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="ARM", cAlternateFileName="")) returned 1 [0117.544] SetLastError (dwErrCode=0x0) [0117.544] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0117.545] GetLastError () returned 0xb7 [0117.545] CloseHandle (hObject=0x700) returned 1 [0117.545] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\*.*", lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24bc0 [0117.545] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0117.545] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Reader_15.007.20033", cAlternateFileName="READER~1.200")) returned 1 [0117.545] SetLastError (dwErrCode=0x0) [0117.545] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x704 [0117.545] GetLastError () returned 0xb7 [0117.545] CloseHandle (hObject=0x704) returned 1 [0117.545] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.007.20033\\*.*", lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24e40 [0117.546] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0117.546] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.546] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0117.546] FindClose (in: hFindFile=0x2f24e40 | out: hFindFile=0x2f24e40) returned 1 [0117.546] SetLastError (dwErrCode=0x0) [0117.546] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.007.20033\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\reader_15.007.20033\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x704 [0117.546] GetLastError () returned 0xb7 [0117.546] CloseHandle (hObject=0x704) returned 1 [0117.546] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Reader_15.023.20070", cAlternateFileName="READER~2.200")) returned 1 [0117.546] SetLastError (dwErrCode=0x0) [0117.546] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x704 [0117.546] GetLastError () returned 0xb7 [0117.546] CloseHandle (hObject=0x704) returned 1 [0117.546] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.023.20070\\*.*", lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24e40 [0117.547] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0117.547] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.547] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0117.547] FindClose (in: hFindFile=0x2f24e40 | out: hFindFile=0x2f24e40) returned 1 [0117.547] SetLastError (dwErrCode=0x0) [0117.547] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.023.20070\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\reader_15.023.20070\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x704 [0117.547] GetLastError () returned 0xb7 [0117.547] CloseHandle (hObject=0x704) returned 1 [0117.547] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.547] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="S", cAlternateFileName="")) returned 1 [0117.547] SetLastError (dwErrCode=0x0) [0117.547] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x704 [0117.547] GetLastError () returned 0xb7 [0117.547] CloseHandle (hObject=0x704) returned 1 [0117.548] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\S\\*.*", lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24c00 [0117.548] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0117.548] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.548] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0117.548] FindClose (in: hFindFile=0x2f24c00 | out: hFindFile=0x2f24c00) returned 1 [0117.548] SetLastError (dwErrCode=0x0) [0117.548] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\S\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\s\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x704 [0117.548] GetLastError () returned 0xb7 [0117.548] CloseHandle (hObject=0x704) returned 1 [0117.548] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="S", cAlternateFileName="")) returned 0 [0117.548] FindClose (in: hFindFile=0x2f24bc0 | out: hFindFile=0x2f24bc0) returned 1 [0117.548] SetLastError (dwErrCode=0x0) [0117.548] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0117.549] GetLastError () returned 0xb7 [0117.549] CloseHandle (hObject=0x700) returned 1 [0117.549] FindNextFileW (in: hFindFile=0x2f24a40, lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.549] FindNextFileW (in: hFindFile=0x2f24a40, lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0117.549] FindClose (in: hFindFile=0x2f24a40 | out: hFindFile=0x2f24a40) returned 1 [0117.549] SetLastError (dwErrCode=0x0) [0117.549] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5ec [0117.549] GetLastError () returned 0xb7 [0117.549] CloseHandle (hObject=0x5ec) returned 1 [0117.549] FindNextFileW (in: hFindFile=0x2f24d80, lpFindFileData=0x199fa8 | out: lpFindFileData=0x199fa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x700070, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0117.549] SetLastError (dwErrCode=0x0) [0117.549] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5ec [0117.549] GetLastError () returned 0xb7 [0117.549] CloseHandle (hObject=0x5ec) returned 1 [0117.554] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\*.*", lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24e40 [0117.554] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0117.554] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Adobe", cAlternateFileName="")) returned 1 [0117.565] SetLastError (dwErrCode=0x0) [0117.565] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0117.566] GetLastError () returned 0xb7 [0117.566] CloseHandle (hObject=0x700) returned 1 [0117.566] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\*.*", lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24cc0 [0117.566] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0117.566] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="ARM", cAlternateFileName="")) returned 1 [0117.566] SetLastError (dwErrCode=0x0) [0117.566] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x704 [0117.566] GetLastError () returned 0xb7 [0117.566] CloseHandle (hObject=0x704) returned 1 [0117.566] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\*.*", lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24bc0 [0117.567] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0117.567] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Reader_15.007.20033", cAlternateFileName="READER~1.200")) returned 1 [0117.567] SetLastError (dwErrCode=0x0) [0117.567] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x708 [0117.567] GetLastError () returned 0xb7 [0117.567] CloseHandle (hObject=0x708) returned 1 [0117.567] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.007.20033\\*.*", lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24a40 [0117.567] FindNextFileW (in: hFindFile=0x2f24a40, lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0117.567] FindNextFileW (in: hFindFile=0x2f24a40, lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.567] FindNextFileW (in: hFindFile=0x2f24a40, lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0117.567] FindClose (in: hFindFile=0x2f24a40 | out: hFindFile=0x2f24a40) returned 1 [0117.568] SetLastError (dwErrCode=0x0) [0117.568] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.007.20033\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\reader_15.007.20033\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x708 [0117.568] GetLastError () returned 0xb7 [0117.568] CloseHandle (hObject=0x708) returned 1 [0117.568] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Reader_15.023.20070", cAlternateFileName="READER~2.200")) returned 1 [0117.568] SetLastError (dwErrCode=0x0) [0117.568] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x708 [0117.568] GetLastError () returned 0xb7 [0117.568] CloseHandle (hObject=0x708) returned 1 [0117.568] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.023.20070\\*.*", lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24ac0 [0117.568] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0117.569] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.569] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0117.569] FindClose (in: hFindFile=0x2f24ac0 | out: hFindFile=0x2f24ac0) returned 1 [0117.569] SetLastError (dwErrCode=0x0) [0117.569] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.023.20070\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\reader_15.023.20070\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x708 [0117.569] GetLastError () returned 0xb7 [0117.569] CloseHandle (hObject=0x708) returned 1 [0117.569] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.569] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="S", cAlternateFileName="")) returned 1 [0117.569] SetLastError (dwErrCode=0x0) [0117.569] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x708 [0117.569] GetLastError () returned 0xb7 [0117.569] CloseHandle (hObject=0x708) returned 1 [0117.569] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\S\\*.*", lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24a40 [0117.570] FindNextFileW (in: hFindFile=0x2f24a40, lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0117.570] FindNextFileW (in: hFindFile=0x2f24a40, lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.570] FindNextFileW (in: hFindFile=0x2f24a40, lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0117.570] FindClose (in: hFindFile=0x2f24a40 | out: hFindFile=0x2f24a40) returned 1 [0117.570] SetLastError (dwErrCode=0x0) [0117.570] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\S\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\s\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x708 [0117.570] GetLastError () returned 0xb7 [0117.570] CloseHandle (hObject=0x708) returned 1 [0117.570] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="S", cAlternateFileName="")) returned 0 [0117.570] FindClose (in: hFindFile=0x2f24bc0 | out: hFindFile=0x2f24bc0) returned 1 [0117.570] SetLastError (dwErrCode=0x0) [0117.570] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x704 [0117.570] GetLastError () returned 0xb7 [0117.570] CloseHandle (hObject=0x704) returned 1 [0117.571] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.571] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0117.571] FindClose (in: hFindFile=0x2f24cc0 | out: hFindFile=0x2f24cc0) returned 1 [0117.571] SetLastError (dwErrCode=0x0) [0117.571] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0117.571] GetLastError () returned 0xb7 [0117.571] CloseHandle (hObject=0x700) returned 1 [0117.571] FindNextFileW (in: hFindFile=0x2f24e40, lpFindFileData=0x1998dc | out: lpFindFileData=0x1998dc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x69006c, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0117.571] SetLastError (dwErrCode=0x0) [0117.571] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0117.571] GetLastError () returned 0xb7 [0117.571] CloseHandle (hObject=0x700) returned 1 [0117.571] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\*.*", lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24700 [0117.572] FindNextFileW (in: hFindFile=0x2f24700, lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0117.572] FindNextFileW (in: hFindFile=0x2f24700, lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Adobe", cAlternateFileName="")) returned 1 [0117.572] SetLastError (dwErrCode=0x0) [0117.572] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x704 [0117.572] GetLastError () returned 0xb7 [0117.572] CloseHandle (hObject=0x704) returned 1 [0117.572] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\*.*", lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f247c0 [0117.572] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0117.572] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="ARM", cAlternateFileName="")) returned 1 [0117.572] SetLastError (dwErrCode=0x0) [0117.572] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x708 [0117.573] GetLastError () returned 0xb7 [0117.573] CloseHandle (hObject=0x708) returned 1 [0117.573] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\*.*", lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24bc0 [0117.573] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0117.573] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Reader_15.007.20033", cAlternateFileName="READER~1.200")) returned 1 [0117.573] SetLastError (dwErrCode=0x0) [0117.573] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c8 [0117.573] GetLastError () returned 0xb7 [0117.573] CloseHandle (hObject=0x6c8) returned 1 [0117.573] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.007.20033\\*.*", lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24800 [0117.573] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0117.574] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.574] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0117.574] FindClose (in: hFindFile=0x2f24800 | out: hFindFile=0x2f24800) returned 1 [0117.574] SetLastError (dwErrCode=0x0) [0117.574] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.007.20033\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\reader_15.007.20033\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c8 [0117.574] GetLastError () returned 0xb7 [0117.574] CloseHandle (hObject=0x6c8) returned 1 [0117.574] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Reader_15.023.20070", cAlternateFileName="READER~2.200")) returned 1 [0117.574] SetLastError (dwErrCode=0x0) [0117.574] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c8 [0117.574] GetLastError () returned 0xb7 [0117.574] CloseHandle (hObject=0x6c8) returned 1 [0117.574] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.023.20070\\*.*", lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24800 [0117.575] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0117.575] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.575] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0117.575] FindClose (in: hFindFile=0x2f24800 | out: hFindFile=0x2f24800) returned 1 [0117.575] SetLastError (dwErrCode=0x0) [0117.575] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.023.20070\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\reader_15.023.20070\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c8 [0117.575] GetLastError () returned 0xb7 [0117.575] CloseHandle (hObject=0x6c8) returned 1 [0117.575] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.575] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="S", cAlternateFileName="")) returned 1 [0117.575] SetLastError (dwErrCode=0x0) [0117.575] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c8 [0117.575] GetLastError () returned 0xb7 [0117.575] CloseHandle (hObject=0x6c8) returned 1 [0117.575] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\S\\*.*", lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24cc0 [0117.576] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0117.576] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.576] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0117.576] FindClose (in: hFindFile=0x2f24cc0 | out: hFindFile=0x2f24cc0) returned 1 [0117.576] SetLastError (dwErrCode=0x0) [0117.576] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\S\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\s\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c8 [0117.576] GetLastError () returned 0xb7 [0117.576] CloseHandle (hObject=0x6c8) returned 1 [0117.576] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="S", cAlternateFileName="")) returned 0 [0117.576] FindClose (in: hFindFile=0x2f24bc0 | out: hFindFile=0x2f24bc0) returned 1 [0117.576] SetLastError (dwErrCode=0x0) [0117.576] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x708 [0117.577] GetLastError () returned 0xb7 [0117.577] CloseHandle (hObject=0x708) returned 1 [0117.577] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.577] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0117.577] FindClose (in: hFindFile=0x2f247c0 | out: hFindFile=0x2f247c0) returned 1 [0117.577] SetLastError (dwErrCode=0x0) [0117.577] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x704 [0117.577] GetLastError () returned 0xb7 [0117.577] CloseHandle (hObject=0x704) returned 1 [0117.577] FindNextFileW (in: hFindFile=0x2f24700, lpFindFileData=0x199210 | out: lpFindFileData=0x199210*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x700070, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0117.577] SetLastError (dwErrCode=0x0) [0117.577] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x704 [0117.578] GetLastError () returned 0xb7 [0117.578] CloseHandle (hObject=0x704) returned 1 [0117.578] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\*.*", lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f247c0 [0117.578] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0117.578] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Adobe", cAlternateFileName="")) returned 1 [0117.578] SetLastError (dwErrCode=0x0) [0117.578] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x708 [0117.578] GetLastError () returned 0xb7 [0117.578] CloseHandle (hObject=0x708) returned 1 [0117.578] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\*.*", lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24a40 [0117.579] FindNextFileW (in: hFindFile=0x2f24a40, lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0117.579] FindNextFileW (in: hFindFile=0x2f24a40, lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="ARM", cAlternateFileName="")) returned 1 [0117.579] SetLastError (dwErrCode=0x0) [0117.579] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c8 [0117.579] GetLastError () returned 0xb7 [0117.579] CloseHandle (hObject=0x6c8) returned 1 [0117.579] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\*.*", lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24ac0 [0117.579] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0117.579] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Reader_15.007.20033", cAlternateFileName="READER~1.200")) returned 1 [0117.579] SetLastError (dwErrCode=0x0) [0117.579] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6cc [0117.580] GetLastError () returned 0xb7 [0117.580] CloseHandle (hObject=0x6cc) returned 1 [0117.580] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.007.20033\\*.*", lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24800 [0117.581] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0117.581] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0117.581] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0117.581] FindClose (in: hFindFile=0x2f24800 | out: hFindFile=0x2f24800) returned 1 [0118.272] SetLastError (dwErrCode=0x0) [0118.272] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.007.20033\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\reader_15.007.20033\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0118.272] GetLastError () returned 0xb7 [0118.272] CloseHandle (hObject=0x5f0) returned 1 [0118.273] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Reader_15.023.20070", cAlternateFileName="READER~2.200")) returned 1 [0118.273] SetLastError (dwErrCode=0x0) [0118.273] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0118.273] GetLastError () returned 0xb7 [0118.273] CloseHandle (hObject=0x5f0) returned 1 [0118.273] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.023.20070\\*.*", lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24880 [0118.273] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0118.273] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0118.273] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0118.273] FindClose (in: hFindFile=0x2f24880 | out: hFindFile=0x2f24880) returned 1 [0118.274] SetLastError (dwErrCode=0x0) [0118.274] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.023.20070\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\reader_15.023.20070\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0118.274] GetLastError () returned 0xb7 [0118.274] CloseHandle (hObject=0x5f0) returned 1 [0118.274] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0118.274] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="S", cAlternateFileName="")) returned 1 [0118.274] SetLastError (dwErrCode=0x0) [0118.274] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0118.274] GetLastError () returned 0xb7 [0118.274] CloseHandle (hObject=0x5f0) returned 1 [0118.275] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\S\\*.*", lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24800 [0118.275] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0118.275] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0118.275] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0118.275] FindClose (in: hFindFile=0x2f24800 | out: hFindFile=0x2f24800) returned 1 [0118.275] SetLastError (dwErrCode=0x0) [0118.275] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\S\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\s\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0118.276] GetLastError () returned 0xb7 [0118.276] CloseHandle (hObject=0x5f0) returned 1 [0118.276] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="S", cAlternateFileName="")) returned 0 [0118.276] FindClose (in: hFindFile=0x2f24ac0 | out: hFindFile=0x2f24ac0) returned 1 [0118.276] SetLastError (dwErrCode=0x0) [0118.276] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c8 [0118.276] GetLastError () returned 0xb7 [0118.276] CloseHandle (hObject=0x6c8) returned 1 [0118.276] FindNextFileW (in: hFindFile=0x2f24a40, lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0118.276] FindNextFileW (in: hFindFile=0x2f24a40, lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0118.276] FindClose (in: hFindFile=0x2f24a40 | out: hFindFile=0x2f24a40) returned 1 [0118.276] SetLastError (dwErrCode=0x0) [0118.276] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x708 [0118.277] GetLastError () returned 0xb7 [0118.277] CloseHandle (hObject=0x708) returned 1 [0118.277] FindNextFileW (in: hFindFile=0x2f247c0, lpFindFileData=0x198b44 | out: lpFindFileData=0x198b44*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x69006c, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0118.277] SetLastError (dwErrCode=0x0) [0118.277] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x708 [0118.277] GetLastError () returned 0xb7 [0118.277] CloseHandle (hObject=0x708) returned 1 [0118.277] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\*.*", lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24bc0 [0118.278] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0118.278] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Adobe", cAlternateFileName="")) returned 1 [0118.278] SetLastError (dwErrCode=0x0) [0118.278] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c8 [0118.278] GetLastError () returned 0xb7 [0118.278] CloseHandle (hObject=0x6c8) returned 1 [0118.278] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\*.*", lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24800 [0118.278] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0118.278] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="ARM", cAlternateFileName="")) returned 1 [0118.278] SetLastError (dwErrCode=0x0) [0118.278] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0118.279] GetLastError () returned 0xb7 [0118.279] CloseHandle (hObject=0x5f0) returned 1 [0118.279] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\*.*", lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24900 [0118.279] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0118.279] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Reader_15.007.20033", cAlternateFileName="READER~1.200")) returned 1 [0118.279] SetLastError (dwErrCode=0x0) [0118.279] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0118.280] GetLastError () returned 0xb7 [0118.280] CloseHandle (hObject=0x5e0) returned 1 [0118.280] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.007.20033\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24880 [0118.280] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0118.280] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0118.280] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0118.280] FindClose (in: hFindFile=0x2f24880 | out: hFindFile=0x2f24880) returned 1 [0118.280] SetLastError (dwErrCode=0x0) [0118.280] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.007.20033\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\reader_15.007.20033\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0118.281] GetLastError () returned 0xb7 [0118.281] CloseHandle (hObject=0x5e0) returned 1 [0118.281] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Reader_15.023.20070", cAlternateFileName="READER~2.200")) returned 1 [0118.281] SetLastError (dwErrCode=0x0) [0118.281] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0118.281] GetLastError () returned 0xb7 [0118.281] CloseHandle (hObject=0x5e0) returned 1 [0118.281] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.023.20070\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24880 [0118.281] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0118.281] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0118.281] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0118.282] FindClose (in: hFindFile=0x2f24880 | out: hFindFile=0x2f24880) returned 1 [0118.282] SetLastError (dwErrCode=0x0) [0118.282] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.023.20070\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\reader_15.023.20070\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0118.282] GetLastError () returned 0xb7 [0118.282] CloseHandle (hObject=0x5e0) returned 1 [0118.282] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0118.282] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="S", cAlternateFileName="")) returned 1 [0118.282] SetLastError (dwErrCode=0x0) [0118.282] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0118.282] GetLastError () returned 0xb7 [0118.282] CloseHandle (hObject=0x5e0) returned 1 [0118.283] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\S\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24880 [0118.283] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0118.283] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0118.283] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0118.283] FindClose (in: hFindFile=0x2f24880 | out: hFindFile=0x2f24880) returned 1 [0118.283] SetLastError (dwErrCode=0x0) [0118.283] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\S\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\s\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0118.283] GetLastError () returned 0xb7 [0118.283] CloseHandle (hObject=0x5e0) returned 1 [0118.284] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="S", cAlternateFileName="")) returned 0 [0118.284] FindClose (in: hFindFile=0x2f24900 | out: hFindFile=0x2f24900) returned 1 [0118.284] SetLastError (dwErrCode=0x0) [0118.284] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0118.284] GetLastError () returned 0xb7 [0118.284] CloseHandle (hObject=0x5f0) returned 1 [0118.284] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0118.284] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0118.284] FindClose (in: hFindFile=0x2f24800 | out: hFindFile=0x2f24800) returned 1 [0118.284] SetLastError (dwErrCode=0x0) [0118.284] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c8 [0118.284] GetLastError () returned 0xb7 [0118.284] CloseHandle (hObject=0x6c8) returned 1 [0118.285] FindNextFileW (in: hFindFile=0x2f24bc0, lpFindFileData=0x198478 | out: lpFindFileData=0x198478*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x700070, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0118.285] SetLastError (dwErrCode=0x0) [0118.285] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c8 [0118.285] GetLastError () returned 0xb7 [0118.285] CloseHandle (hObject=0x6c8) returned 1 [0118.285] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\*.*", lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24c40 [0118.285] FindNextFileW (in: hFindFile=0x2f24c40, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0118.285] FindNextFileW (in: hFindFile=0x2f24c40, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Adobe", cAlternateFileName="")) returned 1 [0118.285] SetLastError (dwErrCode=0x0) [0118.285] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0118.286] GetLastError () returned 0xb7 [0118.286] CloseHandle (hObject=0x5f0) returned 1 [0118.286] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\*.*", lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24c00 [0118.286] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0118.286] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="ARM", cAlternateFileName="")) returned 1 [0118.286] SetLastError (dwErrCode=0x0) [0118.286] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0118.286] GetLastError () returned 0xb7 [0118.286] CloseHandle (hObject=0x5e0) returned 1 [0118.286] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24800 [0118.287] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0118.287] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Reader_15.007.20033", cAlternateFileName="READER~1.200")) returned 1 [0118.287] SetLastError (dwErrCode=0x0) [0118.287] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0118.287] GetLastError () returned 0xb7 [0118.287] CloseHandle (hObject=0x70c) returned 1 [0118.287] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.007.20033\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24880 [0118.288] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0118.288] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0118.288] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0118.288] FindClose (in: hFindFile=0x2f24880 | out: hFindFile=0x2f24880) returned 1 [0118.288] SetLastError (dwErrCode=0x0) [0118.288] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.007.20033\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\reader_15.007.20033\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.288] GetLastError () returned 0x3 [0118.288] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.288] CloseHandle (hObject=0xffffffff) returned 1 [0118.288] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Reader_15.023.20070", cAlternateFileName="READER~2.200")) returned 1 [0118.288] SetLastError (dwErrCode=0x0) [0118.288] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0118.289] GetLastError () returned 0xb7 [0118.289] CloseHandle (hObject=0x70c) returned 1 [0118.289] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.023.20070\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24900 [0118.289] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0118.289] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0118.289] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0118.289] FindClose (in: hFindFile=0x2f24900 | out: hFindFile=0x2f24900) returned 1 [0118.289] SetLastError (dwErrCode=0x0) [0118.289] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.023.20070\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\reader_15.023.20070\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.289] GetLastError () returned 0x3 [0118.289] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.289] CloseHandle (hObject=0xffffffff) returned 1 [0118.289] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0118.289] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="S", cAlternateFileName="")) returned 1 [0118.289] SetLastError (dwErrCode=0x0) [0118.289] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0118.290] GetLastError () returned 0xb7 [0118.290] CloseHandle (hObject=0x70c) returned 1 [0118.290] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\S\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24880 [0118.290] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0118.290] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0118.290] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0118.290] FindClose (in: hFindFile=0x2f24880 | out: hFindFile=0x2f24880) returned 1 [0118.290] SetLastError (dwErrCode=0x0) [0118.290] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\S\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\s\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0118.291] GetLastError () returned 0xb7 [0118.291] CloseHandle (hObject=0x70c) returned 1 [0118.291] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="S", cAlternateFileName="")) returned 0 [0118.291] FindClose (in: hFindFile=0x2f24800 | out: hFindFile=0x2f24800) returned 1 [0118.291] SetLastError (dwErrCode=0x0) [0118.291] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0118.291] GetLastError () returned 0xb7 [0118.291] CloseHandle (hObject=0x5e0) returned 1 [0118.291] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0118.291] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0118.291] FindClose (in: hFindFile=0x2f24c00 | out: hFindFile=0x2f24c00) returned 1 [0118.291] SetLastError (dwErrCode=0x0) [0118.292] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0118.292] GetLastError () returned 0xb7 [0118.292] CloseHandle (hObject=0x5f0) returned 1 [0118.292] FindNextFileW (in: hFindFile=0x2f24c40, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x69006c, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0118.292] SetLastError (dwErrCode=0x0) [0118.292] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0118.292] GetLastError () returned 0xb7 [0118.292] CloseHandle (hObject=0x5f0) returned 1 [0118.292] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\*.*", lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24800 [0118.293] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0118.293] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Adobe", cAlternateFileName="")) returned 1 [0118.293] SetLastError (dwErrCode=0x0) [0118.293] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0118.293] GetLastError () returned 0xb7 [0118.293] CloseHandle (hObject=0x5e0) returned 1 [0118.293] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24880 [0118.293] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0118.293] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="ARM", cAlternateFileName="")) returned 1 [0118.293] SetLastError (dwErrCode=0x0) [0118.293] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.293] GetLastError () returned 0x3 [0118.294] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.294] CloseHandle (hObject=0xffffffff) returned 1 [0118.294] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24ac0 [0118.294] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.294] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_15.007.20033", cAlternateFileName="READER~1.200")) returned 1 [0118.294] SetLastError (dwErrCode=0x0) [0118.294] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.294] GetLastError () returned 0x3 [0118.294] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0118.294] CloseHandle (hObject=0xffffffff) returned 1 [0118.294] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.007.20033\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.294] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.294] SetLastError (dwErrCode=0x0) [0118.294] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.007.20033\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\reader_15.007.20033\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.294] GetLastError () returned 0x3 [0118.294] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0118.294] CloseHandle (hObject=0xffffffff) returned 1 [0118.294] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_15.023.20070", cAlternateFileName="READER~2.200")) returned 1 [0118.294] SetLastError (dwErrCode=0x0) [0118.295] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.295] GetLastError () returned 0x3 [0118.295] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0118.295] CloseHandle (hObject=0xffffffff) returned 1 [0118.295] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.023.20070\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.295] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.295] SetLastError (dwErrCode=0x0) [0118.295] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\Reader_15.023.20070\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\reader_15.023.20070\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.295] GetLastError () returned 0x3 [0118.295] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0118.295] CloseHandle (hObject=0xffffffff) returned 1 [0118.295] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x0, dwReserved1=0x0, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0118.295] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 1 [0118.295] SetLastError (dwErrCode=0x0) [0118.295] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.295] GetLastError () returned 0x3 [0118.295] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0118.295] CloseHandle (hObject=0xffffffff) returned 1 [0118.295] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\S\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24900 [0118.295] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.295] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x0, dwReserved1=0x0, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0118.296] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x0, dwReserved1=0x0, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0118.296] FindClose (in: hFindFile=0x2f24900 | out: hFindFile=0x2f24900) returned 1 [0118.296] SetLastError (dwErrCode=0x0) [0118.296] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\S\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\s\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.296] GetLastError () returned 0x3 [0118.296] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0118.296] CloseHandle (hObject=0xffffffff) returned 1 [0118.296] FindNextFileW (in: hFindFile=0x2f24ac0, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 0 [0118.296] FindClose (in: hFindFile=0x2f24ac0 | out: hFindFile=0x2f24ac0) returned 1 [0118.296] SetLastError (dwErrCode=0x0) [0118.296] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\ARM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\arm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.296] GetLastError () returned 0x3 [0118.296] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.296] CloseHandle (hObject=0xffffffff) returned 1 [0118.296] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0118.296] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7c1a729, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7c1a729, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 0 [0118.296] FindClose (in: hFindFile=0x2f24880 | out: hFindFile=0x2f24880) returned 1 [0118.296] SetLastError (dwErrCode=0x0) [0118.296] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Adobe\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\adobe\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.296] GetLastError () returned 0x3 [0118.296] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0) returned 0 [0118.296] CloseHandle (hObject=0xffffffff) returned 1 [0118.296] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x700070, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0118.296] SetLastError (dwErrCode=0x0) [0118.297] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0118.297] GetLastError () returned 0xb7 [0118.297] CloseHandle (hObject=0x5e0) returned 1 [0118.297] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x700041, ftCreationTime.dwLowDateTime=0x6c0070, ftCreationTime.dwHighDateTime=0x630069, ftLastAccessTime.dwLowDateTime=0x740061, ftLastAccessTime.dwHighDateTime=0x6f0069, ftLastWriteTime.dwLowDateTime=0x20006e, ftLastWriteTime.dwHighDateTime=0x610044, nFileSizeHigh=0x610074, nFileSizeLow=0x41005c, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="cation D\x01", cAlternateFileName="")) returned 0xffffffff [0118.297] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.297] SetLastError (dwErrCode=0x0) [0118.297] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.297] GetLastError () returned 0x3 [0118.297] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0) returned 0 [0118.297] CloseHandle (hObject=0xffffffff) returned 1 [0118.297] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x700070, cFileName="Comms", cAlternateFileName="")) returned 1 [0118.297] SetLastError (dwErrCode=0x0) [0118.297] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0118.297] GetLastError () returned 0xb7 [0118.297] CloseHandle (hObject=0x5e0) returned 1 [0118.298] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Comms\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24880 [0118.299] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0118.299] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 0 [0118.299] FindClose (in: hFindFile=0x2f24880 | out: hFindFile=0x2f24880) returned 1 [0118.299] SetLastError (dwErrCode=0x0) [0118.299] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Comms\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\comms\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.299] GetLastError () returned 0x3 [0118.299] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0) returned 0 [0118.299] CloseHandle (hObject=0xffffffff) returned 1 [0118.299] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x700070, cFileName="Desktop", cAlternateFileName="")) returned 1 [0118.299] SetLastError (dwErrCode=0x0) [0118.299] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0118.299] GetLastError () returned 0xb7 [0118.299] CloseHandle (hObject=0x5e0) returned 1 [0118.299] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Desktop\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c3ce2c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24900 [0118.300] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c3ce2c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0118.300] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38bb5c78, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38bb5c78, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38bb5c78, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x852, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Acrobat Reader DC.lnk", cAlternateFileName="ACROBA~1.LNK")) returned 1 [0118.300] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa08e58, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fb62ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0118.300] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4c3ce2c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c6308a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x91a, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0118.300] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef84fc3f, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef84fc3f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef84fc3f, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0118.300] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef84fc3f, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef84fc3f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef84fc3f, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 0 [0118.300] FindClose (in: hFindFile=0x2f24900 | out: hFindFile=0x2f24900) returned 1 [0118.300] SetLastError (dwErrCode=0x0) [0118.300] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Desktop\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\desktop\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.300] GetLastError () returned 0x3 [0118.300] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0) returned 0 [0118.300] CloseHandle (hObject=0xffffffff) returned 1 [0118.300] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x700070, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0118.300] SetLastError (dwErrCode=0x0) [0118.301] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0118.301] GetLastError () returned 0xb7 [0118.301] CloseHandle (hObject=0x5e0) returned 1 [0118.301] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Documents\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb1fb672c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb1fb672c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24cc0 [0118.303] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb1fb672c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb1fb672c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0118.303] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fb62ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0118.303] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x69006c, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0118.303] SetLastError (dwErrCode=0x0) [0118.303] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Documents\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\documents\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.303] GetLastError () returned 0x3 [0118.303] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.303] CloseHandle (hObject=0xffffffff) returned 1 [0118.303] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Documents\\My Music\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.303] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.303] SetLastError (dwErrCode=0x0) [0118.303] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Documents\\My Music\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\documents\\my music\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.303] GetLastError () returned 0x3 [0118.303] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.303] CloseHandle (hObject=0xffffffff) returned 1 [0118.303] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x69006c, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0118.303] SetLastError (dwErrCode=0x0) [0118.303] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Documents\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\documents\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.303] GetLastError () returned 0x3 [0118.303] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.303] CloseHandle (hObject=0xffffffff) returned 1 [0118.303] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Documents\\My Pictures\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.304] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.304] SetLastError (dwErrCode=0x0) [0118.304] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Documents\\My Pictures\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\documents\\my pictures\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.304] GetLastError () returned 0x3 [0118.304] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.304] CloseHandle (hObject=0xffffffff) returned 1 [0118.304] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x69006c, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0118.304] SetLastError (dwErrCode=0x0) [0118.304] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Documents\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\documents\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.304] GetLastError () returned 0x3 [0118.304] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.304] CloseHandle (hObject=0xffffffff) returned 1 [0118.304] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Documents\\My Videos\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.304] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.304] SetLastError (dwErrCode=0x0) [0118.304] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Documents\\My Videos\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\documents\\my videos\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.304] GetLastError () returned 0x3 [0118.304] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.304] CloseHandle (hObject=0xffffffff) returned 1 [0118.304] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x69006c, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0118.304] FindClose (in: hFindFile=0x2f24cc0 | out: hFindFile=0x2f24cc0) returned 1 [0118.305] SetLastError (dwErrCode=0x0) [0118.305] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Documents\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\documents\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.305] GetLastError () returned 0x3 [0118.305] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0) returned 0 [0118.305] CloseHandle (hObject=0xffffffff) returned 1 [0118.305] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x700070, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0118.305] SetLastError (dwErrCode=0x0) [0118.305] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0118.305] GetLastError () returned 0xb7 [0118.305] CloseHandle (hObject=0x5e0) returned 1 [0118.306] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24880 [0118.306] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0118.306] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d3d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="AppV", cAlternateFileName="")) returned 1 [0118.306] SetLastError (dwErrCode=0x0) [0118.306] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.306] GetLastError () returned 0x3 [0118.306] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.306] CloseHandle (hObject=0xffffffff) returned 1 [0118.701] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\AppV\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d3d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24c00 [0118.703] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d3d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.704] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup", cAlternateFileName="")) returned 1 [0118.704] SetLastError (dwErrCode=0x0) [0118.704] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\AppV\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\appv\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.705] GetLastError () returned 0x3 [0118.705] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0118.705] CloseHandle (hObject=0xffffffff) returned 1 [0118.705] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\AppV\\Setup\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.705] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.706] SetLastError (dwErrCode=0x0) [0118.706] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\AppV\\Setup\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\appv\\setup\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.722] GetLastError () returned 0x3 [0118.722] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0118.722] CloseHandle (hObject=0xffffffff) returned 1 [0118.722] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup", cAlternateFileName="")) returned 0 [0118.722] FindClose (in: hFindFile=0x2f24c00 | out: hFindFile=0x2f24c00) returned 1 [0118.723] SetLastError (dwErrCode=0x0) [0118.723] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\AppV\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\appv\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.723] GetLastError () returned 0x3 [0118.723] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.723] CloseHandle (hObject=0xffffffff) returned 1 [0118.723] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfa011b19, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xfa011b19, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0118.723] SetLastError (dwErrCode=0x0) [0118.723] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.723] GetLastError () returned 0x3 [0118.723] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.723] CloseHandle (hObject=0xffffffff) returned 1 [0118.723] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.723] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.723] SetLastError (dwErrCode=0x0) [0118.723] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.723] GetLastError () returned 0x3 [0118.723] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.723] CloseHandle (hObject=0xffffffff) returned 1 [0118.723] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Crypto", cAlternateFileName="")) returned 1 [0118.723] SetLastError (dwErrCode=0x0) [0118.723] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.724] GetLastError () returned 0x3 [0118.724] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.724] CloseHandle (hObject=0xffffffff) returned 1 [0118.724] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.724] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.724] SetLastError (dwErrCode=0x0) [0118.724] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.724] GetLastError () returned 0x3 [0118.724] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.724] CloseHandle (hObject=0xffffffff) returned 1 [0118.724] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="DataMart", cAlternateFileName="")) returned 1 [0118.724] SetLastError (dwErrCode=0x0) [0118.724] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.724] GetLastError () returned 0x3 [0118.724] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.724] CloseHandle (hObject=0xffffffff) returned 1 [0118.724] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\DataMart\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.724] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.724] SetLastError (dwErrCode=0x0) [0118.724] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\DataMart\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\datamart\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.724] GetLastError () returned 0x3 [0118.724] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.724] CloseHandle (hObject=0xffffffff) returned 1 [0118.724] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0118.724] SetLastError (dwErrCode=0x0) [0118.724] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.724] GetLastError () returned 0x3 [0118.724] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.724] CloseHandle (hObject=0xffffffff) returned 1 [0118.725] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Device Stage\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.725] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.725] SetLastError (dwErrCode=0x0) [0118.725] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Device Stage\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\device stage\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.725] GetLastError () returned 0x3 [0118.725] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.725] CloseHandle (hObject=0xffffffff) returned 1 [0118.725] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0118.725] SetLastError (dwErrCode=0x0) [0118.725] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.725] GetLastError () returned 0x3 [0118.725] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.725] CloseHandle (hObject=0xffffffff) returned 1 [0118.725] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\DeviceSync\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.725] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.725] SetLastError (dwErrCode=0x0) [0118.725] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\DeviceSync\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\devicesync\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.725] GetLastError () returned 0x3 [0118.725] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.725] CloseHandle (hObject=0xffffffff) returned 1 [0118.725] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Diagnosis", cAlternateFileName="DIAGNO~1")) returned 1 [0118.725] SetLastError (dwErrCode=0x0) [0118.725] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.725] GetLastError () returned 0x3 [0118.725] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.725] CloseHandle (hObject=0xffffffff) returned 1 [0118.725] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.725] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.725] SetLastError (dwErrCode=0x0) [0118.725] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.725] GetLastError () returned 0x3 [0118.725] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.726] CloseHandle (hObject=0xffffffff) returned 1 [0118.726] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71bd25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="DRM", cAlternateFileName="")) returned 1 [0118.726] SetLastError (dwErrCode=0x0) [0118.726] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.726] GetLastError () returned 0x3 [0118.726] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.726] CloseHandle (hObject=0xffffffff) returned 1 [0118.726] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\DRM\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71bd25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24900 [0118.727] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71bd25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.727] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0118.727] SetLastError (dwErrCode=0x0) [0118.727] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\DRM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\drm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.727] GetLastError () returned 0x3 [0118.727] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0118.727] CloseHandle (hObject=0xffffffff) returned 1 [0118.727] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\DRM\\Server\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.727] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.727] SetLastError (dwErrCode=0x0) [0118.727] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\DRM\\Server\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\drm\\server\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.727] GetLastError () returned 0x3 [0118.727] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0118.727] CloseHandle (hObject=0xffffffff) returned 1 [0118.727] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0 [0118.727] FindClose (in: hFindFile=0x2f24900 | out: hFindFile=0x2f24900) returned 1 [0118.728] SetLastError (dwErrCode=0x0) [0118.728] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\DRM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\drm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.728] GetLastError () returned 0x3 [0118.728] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.728] CloseHandle (hObject=0xffffffff) returned 1 [0118.728] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x40368daa, ftLastAccessTime.dwHighDateTime=0x1d39f5f, ftLastWriteTime.dwLowDateTime=0x40368daa, ftLastWriteTime.dwHighDateTime=0x1d39f5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0118.728] SetLastError (dwErrCode=0x0) [0118.728] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.728] GetLastError () returned 0x3 [0118.728] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.728] CloseHandle (hObject=0xffffffff) returned 1 [0118.728] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Event Viewer\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.728] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.728] SetLastError (dwErrCode=0x0) [0118.728] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Event Viewer\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\event viewer\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.728] GetLastError () returned 0x3 [0118.728] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.728] CloseHandle (hObject=0xffffffff) returned 1 [0118.728] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7af95c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0118.728] SetLastError (dwErrCode=0x0) [0118.728] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.728] GetLastError () returned 0x3 [0118.728] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.728] CloseHandle (hObject=0xffffffff) returned 1 [0118.728] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\IdentityCRL\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.728] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.728] SetLastError (dwErrCode=0x0) [0118.729] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\IdentityCRL\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\identitycrl\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.729] GetLastError () returned 0x3 [0118.729] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.729] CloseHandle (hObject=0xffffffff) returned 1 [0118.729] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="MapData", cAlternateFileName="")) returned 1 [0118.729] SetLastError (dwErrCode=0x0) [0118.729] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.729] GetLastError () returned 0x3 [0118.729] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.729] CloseHandle (hObject=0xffffffff) returned 1 [0118.729] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\MapData\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.729] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.729] SetLastError (dwErrCode=0x0) [0118.729] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\MapData\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\mapdata\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.729] GetLastError () returned 0x3 [0118.729] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.729] CloseHandle (hObject=0xffffffff) returned 1 [0118.729] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80d7aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="MF", cAlternateFileName="")) returned 1 [0118.730] SetLastError (dwErrCode=0x0) [0118.730] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.730] GetLastError () returned 0x3 [0118.730] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.730] CloseHandle (hObject=0xffffffff) returned 1 [0118.730] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\MF\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80d7aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24900 [0118.731] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80d7aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.731] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0118.731] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0118.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350237c4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x714 [0118.732] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.733] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0118.733] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0118.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35026e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x710 [0118.733] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.734] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 0 [0118.734] FindClose (in: hFindFile=0x2f24900 | out: hFindFile=0x2f24900) returned 1 [0118.734] SetLastError (dwErrCode=0x0) [0118.734] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\MF\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\mf\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.734] GetLastError () returned 0x3 [0118.734] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.734] CloseHandle (hObject=0xffffffff) returned 1 [0118.734] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80e29d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0118.734] SetLastError (dwErrCode=0x0) [0118.734] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.734] GetLastError () returned 0x3 [0118.734] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.734] CloseHandle (hObject=0xffffffff) returned 1 [0118.734] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\NetFramework\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.734] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.735] SetLastError (dwErrCode=0x0) [0118.735] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\NetFramework\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\netframework\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.735] GetLastError () returned 0x3 [0118.735] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.735] CloseHandle (hObject=0xffffffff) returned 1 [0118.735] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80ffe4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Network", cAlternateFileName="")) returned 1 [0118.735] SetLastError (dwErrCode=0x0) [0118.735] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.735] GetLastError () returned 0x3 [0118.735] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.735] CloseHandle (hObject=0xffffffff) returned 1 [0118.735] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.735] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.735] SetLastError (dwErrCode=0x0) [0118.735] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.735] GetLastError () returned 0x3 [0118.735] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.735] CloseHandle (hObject=0xffffffff) returned 1 [0118.735] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Office", cAlternateFileName="")) returned 1 [0118.735] SetLastError (dwErrCode=0x0) [0118.735] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.735] GetLastError () returned 0x3 [0118.735] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.735] CloseHandle (hObject=0xffffffff) returned 1 [0118.735] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Office\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.735] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.735] SetLastError (dwErrCode=0x0) [0118.735] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Office\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\office\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.735] GetLastError () returned 0x3 [0118.735] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.736] CloseHandle (hObject=0xffffffff) returned 1 [0118.736] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfee8021d, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfee8021d, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Provisioning", cAlternateFileName="PROVIS~1")) returned 1 [0118.736] SetLastError (dwErrCode=0x0) [0118.736] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.736] GetLastError () returned 0x3 [0118.736] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.736] CloseHandle (hObject=0xffffffff) returned 1 [0118.736] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.736] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.736] SetLastError (dwErrCode=0x0) [0118.736] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.736] GetLastError () returned 0x3 [0118.736] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.736] CloseHandle (hObject=0xffffffff) returned 1 [0118.736] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb79dd84e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb7a500e7, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb7a500e7, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Search", cAlternateFileName="")) returned 1 [0118.736] SetLastError (dwErrCode=0x0) [0118.736] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.736] GetLastError () returned 0x3 [0118.736] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.736] CloseHandle (hObject=0xffffffff) returned 1 [0118.736] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Search\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.736] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.736] SetLastError (dwErrCode=0x0) [0118.736] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Search\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\search\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.736] GetLastError () returned 0x3 [0118.736] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.736] CloseHandle (hObject=0xffffffff) returned 1 [0118.736] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30e3b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Settings", cAlternateFileName="")) returned 1 [0118.736] SetLastError (dwErrCode=0x0) [0118.737] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.737] GetLastError () returned 0x3 [0118.737] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.737] CloseHandle (hObject=0xffffffff) returned 1 [0118.737] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Settings\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.737] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.737] SetLastError (dwErrCode=0x0) [0118.737] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Settings\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\settings\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.737] GetLastError () returned 0x3 [0118.737] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.737] CloseHandle (hObject=0xffffffff) returned 1 [0118.737] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dcfea0a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dcfea0a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="SmsRouter", cAlternateFileName="SMSROU~1")) returned 1 [0118.737] SetLastError (dwErrCode=0x0) [0118.737] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.737] GetLastError () returned 0x3 [0118.737] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.737] CloseHandle (hObject=0xffffffff) returned 1 [0118.737] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\SmsRouter\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.737] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.737] SetLastError (dwErrCode=0x0) [0118.737] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\SmsRouter\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\smsrouter\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.737] GetLastError () returned 0x3 [0118.737] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.737] CloseHandle (hObject=0xffffffff) returned 1 [0118.737] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe3607ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Spectrum", cAlternateFileName="")) returned 1 [0118.737] SetLastError (dwErrCode=0x0) [0118.737] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.737] GetLastError () returned 0x3 [0118.737] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.737] CloseHandle (hObject=0xffffffff) returned 1 [0118.738] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Spectrum\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.738] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.738] SetLastError (dwErrCode=0x0) [0118.738] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Spectrum\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\spectrum\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.738] GetLastError () returned 0x3 [0118.738] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.738] CloseHandle (hObject=0xffffffff) returned 1 [0118.738] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe360d61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Speech_OneCore", cAlternateFileName="SPEECH~1")) returned 1 [0118.738] SetLastError (dwErrCode=0x0) [0118.738] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.738] GetLastError () returned 0x3 [0118.738] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.738] CloseHandle (hObject=0xffffffff) returned 1 [0118.738] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Speech_OneCore\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.738] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.738] SetLastError (dwErrCode=0x0) [0118.738] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Speech_OneCore\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\speech_onecore\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.738] GetLastError () returned 0x3 [0118.738] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.738] CloseHandle (hObject=0xffffffff) returned 1 [0118.738] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcb4dcad0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xcb4dcad0, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Storage Health", cAlternateFileName="STORAG~1")) returned 1 [0118.738] SetLastError (dwErrCode=0x0) [0118.738] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.738] GetLastError () returned 0x3 [0118.738] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.738] CloseHandle (hObject=0xffffffff) returned 1 [0118.738] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Storage Health\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.738] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.738] SetLastError (dwErrCode=0x0) [0118.738] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Storage Health\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\storage health\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.738] GetLastError () returned 0x3 [0118.738] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.739] CloseHandle (hObject=0xffffffff) returned 1 [0118.739] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe3615f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="UEV", cAlternateFileName="")) returned 1 [0118.739] SetLastError (dwErrCode=0x0) [0118.739] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.739] GetLastError () returned 0x3 [0118.739] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.739] CloseHandle (hObject=0xffffffff) returned 1 [0118.739] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\UEV\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe3615f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24d00 [0118.740] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe3615f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.740] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46867b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InboxTemplates", cAlternateFileName="INBOXT~1")) returned 1 [0118.740] SetLastError (dwErrCode=0x0) [0118.740] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\UEV\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\uev\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.740] GetLastError () returned 0x3 [0118.740] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0118.740] CloseHandle (hObject=0xffffffff) returned 1 [0118.740] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\UEV\\InboxTemplates\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.740] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.740] SetLastError (dwErrCode=0x0) [0118.740] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\UEV\\InboxTemplates\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\uev\\inboxtemplates\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.740] GetLastError () returned 0x3 [0118.740] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0118.740] CloseHandle (hObject=0xffffffff) returned 1 [0118.740] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe469068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scripts", cAlternateFileName="")) returned 1 [0118.740] SetLastError (dwErrCode=0x0) [0118.740] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\UEV\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\uev\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.740] GetLastError () returned 0x3 [0118.740] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0118.741] CloseHandle (hObject=0xffffffff) returned 1 [0118.741] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\UEV\\Scripts\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.741] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.741] SetLastError (dwErrCode=0x0) [0118.741] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\UEV\\Scripts\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\uev\\scripts\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.741] GetLastError () returned 0x3 [0118.741] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0118.741] CloseHandle (hObject=0xffffffff) returned 1 [0118.741] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0118.741] SetLastError (dwErrCode=0x0) [0118.741] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\UEV\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\uev\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.741] GetLastError () returned 0x3 [0118.741] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0118.741] CloseHandle (hObject=0xffffffff) returned 1 [0118.741] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\UEV\\Templates\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.741] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.741] SetLastError (dwErrCode=0x0) [0118.741] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\UEV\\Templates\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\uev\\templates\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.741] GetLastError () returned 0x3 [0118.741] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0118.741] CloseHandle (hObject=0xffffffff) returned 1 [0118.741] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0118.741] FindClose (in: hFindFile=0x2f24d00 | out: hFindFile=0x2f24d00) returned 1 [0118.741] SetLastError (dwErrCode=0x0) [0118.741] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\UEV\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\uev\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.741] GetLastError () returned 0x3 [0118.741] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.741] CloseHandle (hObject=0xffffffff) returned 1 [0118.741] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbaae4059, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xbaae4059, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0118.742] SetLastError (dwErrCode=0x0) [0118.742] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.742] GetLastError () returned 0x3 [0118.742] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.742] CloseHandle (hObject=0xffffffff) returned 1 [0118.742] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\User Account Pictures\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.742] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.742] SetLastError (dwErrCode=0x0) [0118.742] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\User Account Pictures\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\user account pictures\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.742] GetLastError () returned 0x3 [0118.742] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.742] CloseHandle (hObject=0xffffffff) returned 1 [0118.742] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4bcf6d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x448126f7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Vault", cAlternateFileName="")) returned 1 [0118.742] SetLastError (dwErrCode=0x0) [0118.742] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.742] GetLastError () returned 0x3 [0118.742] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.742] CloseHandle (hObject=0xffffffff) returned 1 [0118.742] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Vault\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4bcf6d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x448126f7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24c00 [0118.743] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4bcf6d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x448126f7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.743] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448126f7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC658CB4-9126-49BD-B877-31EEDAB3F204", cAlternateFileName="AC658C~1")) returned 1 [0118.743] SetLastError (dwErrCode=0x0) [0118.743] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Vault\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\vault\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.743] GetLastError () returned 0x3 [0118.743] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0118.743] CloseHandle (hObject=0xffffffff) returned 1 [0118.743] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.743] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.743] SetLastError (dwErrCode=0x0) [0118.743] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.743] GetLastError () returned 0x3 [0118.743] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0118.743] CloseHandle (hObject=0xffffffff) returned 1 [0118.743] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448126f7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC658CB4-9126-49BD-B877-31EEDAB3F204", cAlternateFileName="AC658C~1")) returned 0 [0118.743] FindClose (in: hFindFile=0x2f24c00 | out: hFindFile=0x2f24c00) returned 1 [0118.743] SetLastError (dwErrCode=0x0) [0118.743] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Vault\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\vault\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.743] GetLastError () returned 0x3 [0118.743] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.743] CloseHandle (hObject=0xffffffff) returned 1 [0118.743] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe4be180, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="WDF", cAlternateFileName="")) returned 1 [0118.743] SetLastError (dwErrCode=0x0) [0118.743] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.743] GetLastError () returned 0x3 [0118.743] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.744] CloseHandle (hObject=0xffffffff) returned 1 [0118.744] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\WDF\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe4be180, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24900 [0118.744] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe4be180, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.744] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe4be180, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0118.744] FindClose (in: hFindFile=0x2f24900 | out: hFindFile=0x2f24900) returned 1 [0118.744] SetLastError (dwErrCode=0x0) [0118.745] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\WDF\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\wdf\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.745] GetLastError () returned 0x3 [0118.745] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.745] CloseHandle (hObject=0xffffffff) returned 1 [0118.745] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xedcf5f61, ftLastAccessTime.dwHighDateTime=0x1d336d9, ftLastWriteTime.dwLowDateTime=0xedcf5f61, ftLastWriteTime.dwHighDateTime=0x1d336d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Windows", cAlternateFileName="")) returned 1 [0118.745] SetLastError (dwErrCode=0x0) [0118.745] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.745] GetLastError () returned 0x3 [0118.745] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.745] CloseHandle (hObject=0xffffffff) returned 1 [0118.745] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Windows\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.745] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.745] SetLastError (dwErrCode=0x0) [0118.745] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Windows\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\windows\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.745] GetLastError () returned 0x3 [0118.745] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.745] CloseHandle (hObject=0xffffffff) returned 1 [0118.745] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc25d4e74, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb320aac5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0118.745] SetLastError (dwErrCode=0x0) [0118.745] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.745] GetLastError () returned 0x3 [0118.745] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.745] CloseHandle (hObject=0xffffffff) returned 1 [0118.745] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Windows Defender\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.745] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.745] SetLastError (dwErrCode=0x0) [0118.745] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Windows Defender\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\windows defender\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.745] GetLastError () returned 0x3 [0118.745] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.745] CloseHandle (hObject=0xffffffff) returned 1 [0118.745] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc2a90a48, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1 [0118.746] SetLastError (dwErrCode=0x0) [0118.746] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.746] GetLastError () returned 0x3 [0118.746] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.746] CloseHandle (hObject=0xffffffff) returned 1 [0118.746] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Windows Defender Advanced Threat Protection\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.746] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.746] SetLastError (dwErrCode=0x0) [0118.746] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Windows Defender Advanced Threat Protection\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\windows defender advanced threat protection\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.746] GetLastError () returned 0x3 [0118.746] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.746] CloseHandle (hObject=0xffffffff) returned 1 [0118.746] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2a928fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a996721, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Windows Live", cAlternateFileName="WINDOW~2")) returned 1 [0118.746] SetLastError (dwErrCode=0x0) [0118.746] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.746] GetLastError () returned 0x3 [0118.746] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.746] CloseHandle (hObject=0xffffffff) returned 1 [0118.746] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Windows Live\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.746] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.746] SetLastError (dwErrCode=0x0) [0118.746] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Windows Live\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\windows live\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.746] GetLastError () returned 0x3 [0118.746] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.746] CloseHandle (hObject=0xffffffff) returned 1 [0118.746] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2a93496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Windows NT", cAlternateFileName="WINDOW~3")) returned 1 [0118.746] SetLastError (dwErrCode=0x0) [0118.746] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.746] GetLastError () returned 0x3 [0118.746] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.746] CloseHandle (hObject=0xffffffff) returned 1 [0118.747] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Windows NT\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.747] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.747] SetLastError (dwErrCode=0x0) [0118.747] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Windows NT\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\windows nt\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.747] GetLastError () returned 0x3 [0118.747] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.747] CloseHandle (hObject=0xffffffff) returned 1 [0118.747] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0ef6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Windows Security Health", cAlternateFileName="WINDOW~4")) returned 1 [0118.747] SetLastError (dwErrCode=0x0) [0118.747] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.747] GetLastError () returned 0x3 [0118.747] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.747] CloseHandle (hObject=0xffffffff) returned 1 [0118.747] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Windows Security Health\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.747] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.747] SetLastError (dwErrCode=0x0) [0118.747] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Windows Security Health\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\windows security health\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.747] GetLastError () returned 0x3 [0118.747] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.747] CloseHandle (hObject=0xffffffff) returned 1 [0118.747] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbef9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="WinMSIPC", cAlternateFileName="")) returned 1 [0118.747] SetLastError (dwErrCode=0x0) [0118.747] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.747] GetLastError () returned 0x3 [0118.747] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.747] CloseHandle (hObject=0xffffffff) returned 1 [0118.747] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\WinMSIPC\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.747] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.747] SetLastError (dwErrCode=0x0) [0118.748] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\WinMSIPC\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\winmsipc\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.748] GetLastError () returned 0x3 [0118.748] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.748] CloseHandle (hObject=0xffffffff) returned 1 [0118.748] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc002d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0118.748] SetLastError (dwErrCode=0x0) [0118.748] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.748] GetLastError () returned 0x3 [0118.748] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.748] CloseHandle (hObject=0xffffffff) returned 1 [0118.748] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\WwanSvc\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.748] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.748] SetLastError (dwErrCode=0x0) [0118.748] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\WwanSvc\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\wwansvc\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.748] GetLastError () returned 0x3 [0118.748] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.748] CloseHandle (hObject=0xffffffff) returned 1 [0118.748] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc002d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="WwanSvc", cAlternateFileName="")) returned 0 [0118.748] FindClose (in: hFindFile=0x2f24880 | out: hFindFile=0x2f24880) returned 1 [0118.748] SetLastError (dwErrCode=0x0) [0118.748] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.748] GetLastError () returned 0x3 [0118.748] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0) returned 0 [0118.748] CloseHandle (hObject=0xffffffff) returned 1 [0118.748] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x700070, cFileName="Microsoft OneDrive", cAlternateFileName="MICROS~2")) returned 1 [0118.748] SetLastError (dwErrCode=0x0) [0118.748] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0118.749] GetLastError () returned 0xb7 [0118.749] CloseHandle (hObject=0x5e0) returned 1 [0118.749] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft OneDrive\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x700041, ftCreationTime.dwLowDateTime=0x6c0070, ftCreationTime.dwHighDateTime=0x630069, ftLastAccessTime.dwLowDateTime=0x740061, ftLastAccessTime.dwHighDateTime=0x6f0069, ftLastWriteTime.dwLowDateTime=0x20006e, ftLastWriteTime.dwHighDateTime=0x610044, nFileSizeHigh=0x610074, nFileSizeLow=0x41005c, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="cation D\x01", cAlternateFileName="")) returned 0xffffffff [0118.749] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.749] SetLastError (dwErrCode=0x0) [0118.749] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft OneDrive\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft onedrive\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.749] GetLastError () returned 0x3 [0118.749] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0) returned 0 [0118.749] CloseHandle (hObject=0xffffffff) returned 1 [0118.749] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x700070, cFileName="Oracle", cAlternateFileName="")) returned 1 [0118.749] SetLastError (dwErrCode=0x0) [0118.749] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0118.750] GetLastError () returned 0xb7 [0118.750] CloseHandle (hObject=0x5e0) returned 1 [0118.750] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Oracle\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24880 [0118.750] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0118.750] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Java", cAlternateFileName="")) returned 1 [0118.750] SetLastError (dwErrCode=0x0) [0118.750] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Oracle\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\oracle\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.750] GetLastError () returned 0x3 [0118.750] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.750] CloseHandle (hObject=0xffffffff) returned 1 [0118.750] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Oracle\\Java\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24cc0 [0118.751] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.751] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xad14ee36, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc2d63c47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xad19b2ee, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".oracle_jre_usage", cAlternateFileName="ORACLE~1")) returned 1 [0118.751] SetLastError (dwErrCode=0x0) [0118.751] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Oracle\\Java\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\oracle\\java\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.751] GetLastError () returned 0x3 [0118.752] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0118.752] CloseHandle (hObject=0xffffffff) returned 1 [0118.752] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Oracle\\Java\\.oracle_jre_usage\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.752] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.752] SetLastError (dwErrCode=0x0) [0118.752] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Oracle\\Java\\.oracle_jre_usage\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\oracle\\java\\.oracle_jre_usage\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.752] GetLastError () returned 0x3 [0118.752] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0118.752] CloseHandle (hObject=0xffffffff) returned 1 [0118.752] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d7cc62, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d35a5d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8d35a5d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installcache_x64", cAlternateFileName="INSTAL~1")) returned 1 [0118.752] SetLastError (dwErrCode=0x0) [0118.752] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Oracle\\Java\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\oracle\\java\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.752] GetLastError () returned 0x3 [0118.752] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0118.752] CloseHandle (hObject=0xffffffff) returned 1 [0118.752] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Oracle\\Java\\installcache_x64\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.752] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.752] SetLastError (dwErrCode=0x0) [0118.752] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Oracle\\Java\\installcache_x64\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\oracle\\java\\installcache_x64\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.752] GetLastError () returned 0x3 [0118.752] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0118.752] CloseHandle (hObject=0xffffffff) returned 1 [0118.752] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2410, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="javapath", cAlternateFileName="")) returned 1 [0118.752] SetLastError (dwErrCode=0x0) [0118.752] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Oracle\\Java\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\oracle\\java\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.752] GetLastError () returned 0x3 [0118.752] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0118.752] CloseHandle (hObject=0xffffffff) returned 1 [0118.752] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Oracle\\Java\\javapath\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.753] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.753] SetLastError (dwErrCode=0x0) [0118.753] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Oracle\\Java\\javapath\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\oracle\\java\\javapath\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.753] GetLastError () returned 0x3 [0118.753] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0118.753] CloseHandle (hObject=0xffffffff) returned 1 [0118.753] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="javapath_target_474984", cAlternateFileName="JAVAPA~1")) returned 1 [0118.753] SetLastError (dwErrCode=0x0) [0118.753] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Oracle\\Java\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\oracle\\java\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.753] GetLastError () returned 0x3 [0118.753] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0118.753] CloseHandle (hObject=0xffffffff) returned 1 [0118.753] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Oracle\\Java\\javapath_target_474984\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.753] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.753] SetLastError (dwErrCode=0x0) [0118.753] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Oracle\\Java\\javapath_target_474984\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\oracle\\java\\javapath_target_474984\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.753] GetLastError () returned 0x3 [0118.753] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0118.753] CloseHandle (hObject=0xffffffff) returned 1 [0118.753] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="javapath_target_474984", cAlternateFileName="JAVAPA~1")) returned 0 [0118.753] FindClose (in: hFindFile=0x2f24cc0 | out: hFindFile=0x2f24cc0) returned 1 [0118.754] SetLastError (dwErrCode=0x0) [0118.754] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Oracle\\Java\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\oracle\\java\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.754] GetLastError () returned 0x3 [0118.754] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.754] CloseHandle (hObject=0xffffffff) returned 1 [0118.754] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Java", cAlternateFileName="")) returned 0 [0118.754] FindClose (in: hFindFile=0x2f24880 | out: hFindFile=0x2f24880) returned 1 [0118.754] SetLastError (dwErrCode=0x0) [0118.754] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Oracle\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\oracle\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.754] GetLastError () returned 0x3 [0118.754] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0) returned 0 [0118.754] CloseHandle (hObject=0xffffffff) returned 1 [0118.754] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x700070, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0118.754] SetLastError (dwErrCode=0x0) [0118.754] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0118.755] GetLastError () returned 0xb7 [0118.755] CloseHandle (hObject=0x5e0) returned 1 [0118.755] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24a00 [0118.756] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0118.757] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e0f451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0118.757] SetLastError (dwErrCode=0x0) [0118.757] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.757] GetLastError () returned 0x3 [0118.757] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.757] CloseHandle (hObject=0xffffffff) returned 1 [0118.757] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.757] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.757] SetLastError (dwErrCode=0x0) [0118.757] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.757] GetLastError () returned 0x3 [0118.757] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.757] CloseHandle (hObject=0xffffffff) returned 1 [0118.757] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e7475e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf03b3d5, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0118.757] SetLastError (dwErrCode=0x0) [0118.757] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.757] GetLastError () returned 0x3 [0118.757] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.757] CloseHandle (hObject=0xffffffff) returned 1 [0118.757] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.757] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.758] SetLastError (dwErrCode=0x0) [0118.758] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.758] GetLastError () returned 0x3 [0118.758] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.758] CloseHandle (hObject=0xffffffff) returned 1 [0118.758] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0118.758] SetLastError (dwErrCode=0x0) [0118.758] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.758] GetLastError () returned 0x3 [0118.758] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.758] CloseHandle (hObject=0xffffffff) returned 1 [0118.758] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.758] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.758] SetLastError (dwErrCode=0x0) [0118.758] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.758] GetLastError () returned 0x3 [0118.758] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.758] CloseHandle (hObject=0xffffffff) returned 1 [0118.758] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebeed6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd40b2b5b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0118.758] SetLastError (dwErrCode=0x0) [0118.758] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.758] GetLastError () returned 0x3 [0118.758] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.758] CloseHandle (hObject=0xffffffff) returned 1 [0118.758] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.758] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.758] SetLastError (dwErrCode=0x0) [0118.758] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.758] GetLastError () returned 0x3 [0118.758] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.758] CloseHandle (hObject=0xffffffff) returned 1 [0118.759] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0118.759] SetLastError (dwErrCode=0x0) [0118.759] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.759] GetLastError () returned 0x3 [0118.759] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.759] CloseHandle (hObject=0xffffffff) returned 1 [0118.759] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.759] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.759] SetLastError (dwErrCode=0x0) [0118.759] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.759] GetLastError () returned 0x3 [0118.759] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0118.759] CloseHandle (hObject=0xffffffff) returned 1 [0118.759] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0118.759] SetLastError (dwErrCode=0x0) [0118.759] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.759] GetLastError () returned 0x3 [0118.759] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0118.759] CloseHandle (hObject=0xffffffff) returned 1 [0118.759] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0118.759] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0118.759] SetLastError (dwErrCode=0x0) [0118.759] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0118.759] GetLastError () returned 0x3 [0119.381] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0119.381] CloseHandle (hObject=0xffffffff) returned 1 [0119.381] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1 [0119.382] SetLastError (dwErrCode=0x0) [0119.382] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.382] GetLastError () returned 0x3 [0119.382] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0119.382] CloseHandle (hObject=0xffffffff) returned 1 [0119.382] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0119.382] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0119.382] SetLastError (dwErrCode=0x0) [0119.382] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.382] GetLastError () returned 0x3 [0119.382] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0119.382] CloseHandle (hObject=0xffffffff) returned 1 [0119.382] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0119.382] SetLastError (dwErrCode=0x0) [0119.382] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.382] GetLastError () returned 0x3 [0119.382] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0119.382] CloseHandle (hObject=0xffffffff) returned 1 [0119.382] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0119.382] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0119.382] SetLastError (dwErrCode=0x0) [0119.382] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.382] GetLastError () returned 0x3 [0119.382] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0119.382] CloseHandle (hObject=0xffffffff) returned 1 [0119.382] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0119.382] SetLastError (dwErrCode=0x0) [0119.382] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.382] GetLastError () returned 0x3 [0119.382] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0119.382] CloseHandle (hObject=0xffffffff) returned 1 [0119.383] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0119.383] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0119.383] SetLastError (dwErrCode=0x0) [0119.383] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.383] GetLastError () returned 0x3 [0119.383] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0119.383] CloseHandle (hObject=0xffffffff) returned 1 [0119.383] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0119.383] SetLastError (dwErrCode=0x0) [0119.383] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.383] GetLastError () returned 0x3 [0119.383] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0119.383] CloseHandle (hObject=0xffffffff) returned 1 [0119.383] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0119.383] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0119.383] SetLastError (dwErrCode=0x0) [0119.383] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.383] GetLastError () returned 0x3 [0119.383] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0119.383] CloseHandle (hObject=0xffffffff) returned 1 [0119.383] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0119.383] SetLastError (dwErrCode=0x0) [0119.383] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.383] GetLastError () returned 0x3 [0119.383] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0119.383] CloseHandle (hObject=0xffffffff) returned 1 [0119.383] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0119.383] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0119.383] SetLastError (dwErrCode=0x0) [0119.383] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.384] GetLastError () returned 0x3 [0119.384] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0119.384] CloseHandle (hObject=0xffffffff) returned 1 [0119.384] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307e4cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0a28d82, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0119.384] SetLastError (dwErrCode=0x0) [0119.384] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.384] GetLastError () returned 0x3 [0119.384] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0119.384] CloseHandle (hObject=0xffffffff) returned 1 [0119.384] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0119.384] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0119.384] SetLastError (dwErrCode=0x0) [0119.384] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.384] GetLastError () returned 0x3 [0119.384] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0119.384] CloseHandle (hObject=0xffffffff) returned 1 [0119.384] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0119.384] SetLastError (dwErrCode=0x0) [0119.384] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.384] GetLastError () returned 0x3 [0119.384] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0119.384] CloseHandle (hObject=0xffffffff) returned 1 [0119.384] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0119.384] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0119.384] SetLastError (dwErrCode=0x0) [0119.384] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.384] GetLastError () returned 0x3 [0119.384] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0119.384] CloseHandle (hObject=0xffffffff) returned 1 [0119.384] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1 [0119.385] SetLastError (dwErrCode=0x0) [0119.385] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.385] GetLastError () returned 0x3 [0119.385] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0119.385] CloseHandle (hObject=0xffffffff) returned 1 [0119.385] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0119.385] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0119.385] SetLastError (dwErrCode=0x0) [0119.385] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.385] GetLastError () returned 0x3 [0119.385] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0119.385] CloseHandle (hObject=0xffffffff) returned 1 [0119.385] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc767be9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1 [0119.385] SetLastError (dwErrCode=0x0) [0119.385] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.385] GetLastError () returned 0x3 [0119.385] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0119.385] CloseHandle (hObject=0xffffffff) returned 1 [0119.385] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0119.385] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0119.385] SetLastError (dwErrCode=0x0) [0119.385] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.385] GetLastError () returned 0x3 [0119.385] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0119.385] CloseHandle (hObject=0xffffffff) returned 1 [0119.385] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d43b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2593ec2, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0119.385] SetLastError (dwErrCode=0x0) [0119.385] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.385] GetLastError () returned 0x3 [0119.385] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0119.386] CloseHandle (hObject=0xffffffff) returned 1 [0119.386] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0119.386] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0119.386] SetLastError (dwErrCode=0x0) [0119.386] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.386] GetLastError () returned 0x3 [0119.386] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0119.386] CloseHandle (hObject=0xffffffff) returned 1 [0119.386] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9a674c8, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0119.386] SetLastError (dwErrCode=0x0) [0119.386] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.386] GetLastError () returned 0x3 [0119.386] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0119.386] CloseHandle (hObject=0xffffffff) returned 1 [0119.386] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0119.386] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0119.386] SetLastError (dwErrCode=0x0) [0119.386] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.386] GetLastError () returned 0x3 [0119.386] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0119.386] CloseHandle (hObject=0xffffffff) returned 1 [0119.386] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0119.386] SetLastError (dwErrCode=0x0) [0119.386] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.386] GetLastError () returned 0x3 [0119.386] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0119.386] CloseHandle (hObject=0xffffffff) returned 1 [0119.386] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0119.386] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0119.386] SetLastError (dwErrCode=0x0) [0119.386] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.386] GetLastError () returned 0x3 [0119.387] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0119.387] CloseHandle (hObject=0xffffffff) returned 1 [0119.387] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0 [0119.387] FindClose (in: hFindFile=0x2f24a00 | out: hFindFile=0x2f24a00) returned 1 [0119.387] SetLastError (dwErrCode=0x0) [0119.387] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Package Cache\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\package cache\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.387] GetLastError () returned 0x3 [0119.387] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0) returned 0 [0119.388] CloseHandle (hObject=0xffffffff) returned 1 [0119.388] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x700070, cFileName="regid.1991-06.com.microsoft", cAlternateFileName="REGID1~1.MIC")) returned 1 [0119.388] SetLastError (dwErrCode=0x0) [0119.388] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0119.388] GetLastError () returned 0xb7 [0119.388] CloseHandle (hObject=0x5e0) returned 1 [0119.388] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\regid.1991-06.com.microsoft\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x700041, ftCreationTime.dwLowDateTime=0x6c0070, ftCreationTime.dwHighDateTime=0x630069, ftLastAccessTime.dwLowDateTime=0x740061, ftLastAccessTime.dwHighDateTime=0x6f0069, ftLastWriteTime.dwLowDateTime=0x20006e, ftLastWriteTime.dwHighDateTime=0x610044, nFileSizeHigh=0x610074, nFileSizeLow=0x41005c, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="cation D\x01", cAlternateFileName="")) returned 0xffffffff [0119.388] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0119.388] SetLastError (dwErrCode=0x0) [0119.388] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\regid.1991-06.com.microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\regid.1991-06.com.microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.388] GetLastError () returned 0x3 [0119.388] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0) returned 0 [0119.388] CloseHandle (hObject=0xffffffff) returned 1 [0119.388] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7bf47b5, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xd7bf47b5, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7c1a729, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0xa0000003, dwReserved1=0x700070, cFileName="RyukReadMe.html", cAlternateFileName="RYUKRE~1.HTM")) returned 1 [0119.388] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x700070, cFileName="SoftwareDistribution", cAlternateFileName="SOFTWA~1")) returned 1 [0119.388] SetLastError (dwErrCode=0x0) [0119.388] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0119.389] GetLastError () returned 0xb7 [0119.389] CloseHandle (hObject=0x5e0) returned 1 [0119.389] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\SoftwareDistribution\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x700041, ftCreationTime.dwLowDateTime=0x6c0070, ftCreationTime.dwHighDateTime=0x630069, ftLastAccessTime.dwLowDateTime=0x740061, ftLastAccessTime.dwHighDateTime=0x6f0069, ftLastWriteTime.dwLowDateTime=0x20006e, ftLastWriteTime.dwHighDateTime=0x610044, nFileSizeHigh=0x610074, nFileSizeLow=0x41005c, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="cation D\x01", cAlternateFileName="")) returned 0xffffffff [0119.389] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0119.389] SetLastError (dwErrCode=0x0) [0119.389] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\SoftwareDistribution\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\softwaredistribution\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.389] GetLastError () returned 0x3 [0119.389] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0) returned 0 [0119.389] CloseHandle (hObject=0xffffffff) returned 1 [0119.389] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x700070, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0119.389] SetLastError (dwErrCode=0x0) [0119.389] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0119.389] GetLastError () returned 0xb7 [0119.389] CloseHandle (hObject=0x5e0) returned 1 [0119.389] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Start Menu\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc229ee00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a923ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24a00 [0119.390] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc229ee00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a923ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0119.390] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a923ff6, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5f43b93, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5f43b93, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0119.390] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfd412f52, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xfd412f52, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Programs", cAlternateFileName="")) returned 1 [0119.390] SetLastError (dwErrCode=0x0) [0119.390] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Start Menu\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\start menu\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.390] GetLastError () returned 0x3 [0119.390] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0119.390] CloseHandle (hObject=0xffffffff) returned 1 [0119.390] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Start Menu\\Programs\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0119.390] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0119.390] SetLastError (dwErrCode=0x0) [0119.390] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Start Menu\\Programs\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\start menu\\programs\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.390] GetLastError () returned 0x3 [0119.390] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0119.390] CloseHandle (hObject=0xffffffff) returned 1 [0119.390] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfd412f52, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xfd412f52, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Programs", cAlternateFileName="")) returned 0 [0119.390] FindClose (in: hFindFile=0x2f24a00 | out: hFindFile=0x2f24a00) returned 1 [0119.390] SetLastError (dwErrCode=0x0) [0119.391] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Start Menu\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\start menu\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.391] GetLastError () returned 0x3 [0119.391] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0) returned 0 [0119.391] CloseHandle (hObject=0xffffffff) returned 1 [0119.391] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x700070, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0119.391] SetLastError (dwErrCode=0x0) [0119.391] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0119.391] GetLastError () returned 0xb7 [0119.391] CloseHandle (hObject=0x5e0) returned 1 [0119.391] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Templates\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc25d1ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24c00 [0119.392] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc25d1ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0119.392] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc25d1ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 0 [0119.392] FindClose (in: hFindFile=0x2f24c00 | out: hFindFile=0x2f24c00) returned 1 [0119.392] SetLastError (dwErrCode=0x0) [0119.393] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Templates\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\templates\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.393] GetLastError () returned 0x3 [0119.393] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0) returned 0 [0119.393] CloseHandle (hObject=0xffffffff) returned 1 [0119.393] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x700070, cFileName="USOPrivate", cAlternateFileName="USOPRI~1")) returned 1 [0119.393] SetLastError (dwErrCode=0x0) [0119.393] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0119.393] GetLastError () returned 0xb7 [0119.393] CloseHandle (hObject=0x5e0) returned 1 [0119.393] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOPrivate\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24a00 [0119.394] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0119.394] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc770a538, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xc770a538, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="UpdateStore", cAlternateFileName="UPDATE~1")) returned 1 [0119.394] SetLastError (dwErrCode=0x0) [0119.394] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOPrivate\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoprivate\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.394] GetLastError () returned 0x3 [0119.394] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0119.394] CloseHandle (hObject=0xffffffff) returned 1 [0119.394] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOPrivate\\UpdateStore\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0119.394] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0119.394] SetLastError (dwErrCode=0x0) [0119.394] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOPrivate\\UpdateStore\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoprivate\\updatestore\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.394] GetLastError () returned 0x3 [0119.394] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0119.394] CloseHandle (hObject=0xffffffff) returned 1 [0119.394] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc770a538, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xc770a538, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="UpdateStore", cAlternateFileName="UPDATE~1")) returned 0 [0119.394] FindClose (in: hFindFile=0x2f24a00 | out: hFindFile=0x2f24a00) returned 1 [0119.394] SetLastError (dwErrCode=0x0) [0119.394] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOPrivate\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoprivate\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.394] GetLastError () returned 0x3 [0119.394] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0) returned 0 [0119.394] CloseHandle (hObject=0xffffffff) returned 1 [0119.394] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x700070, cFileName="USOShared", cAlternateFileName="USOSHA~1")) returned 1 [0119.394] SetLastError (dwErrCode=0x0) [0119.394] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0119.395] GetLastError () returned 0xb7 [0119.395] CloseHandle (hObject=0x5e0) returned 1 [0119.395] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24a00 [0119.395] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0119.395] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb630c394, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xb630c394, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Logs", cAlternateFileName="")) returned 1 [0119.395] SetLastError (dwErrCode=0x0) [0119.395] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.395] GetLastError () returned 0x3 [0119.395] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0119.395] CloseHandle (hObject=0xffffffff) returned 1 [0119.395] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb630c394, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xb630c394, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24900 [0119.396] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb630c394, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xb630c394, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.397] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cf76e0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x58d51fd9, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x597705f5, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUx.001.etl", cAlternateFileName="NOBE5B~1.ETL")) returned 1 [0119.397] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350237c4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a4 [0119.398] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.398] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cf76e0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7cf76e0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x852e502, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUx.002.etl", cAlternateFileName="NOTIFI~2.ETL")) returned 1 [0119.398] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35026e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6e0 [0119.399] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.400] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x2d822f20, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x2efd472c, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.001.etl", cAlternateFileName="NO604C~1.ETL")) returned 1 [0119.400] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3502dc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6fc [0119.401] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.401] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xfe554d51, ftLastAccessTime.dwHighDateTime=0x1d3375a, ftLastWriteTime.dwLowDateTime=0xfe782447, ftLastWriteTime.dwHighDateTime=0x1d3375a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.002.etl", cAlternateFileName="NO8BA4~1.ETL")) returned 1 [0119.401] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350312f4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6d4 [0119.402] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.402] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xfdf01be1, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfdfc06a7, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.003.etl", cAlternateFileName="NO3670~1.ETL")) returned 1 [0119.402] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350349c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6d0 [0119.403] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.404] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x588b3c6a, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x59ae67c8, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.004.etl", cAlternateFileName="NO2FB3~1.ETL")) returned 1 [0119.404] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503808c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x71c [0119.405] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.405] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xb4b94410, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0xb50917ed, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.005.etl", cAlternateFileName="NO74F7~1.ETL")) returned 1 [0119.405] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503b758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x724 [0119.406] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.406] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x86d6bb14, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x8728eea2, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.006.etl", cAlternateFileName="NOC92C~1.ETL")) returned 1 [0119.406] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503ee24, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x720 [0119.407] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.408] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe7f77c60, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xebc8ba4e, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.007.etl", cAlternateFileName="NOAEB3~1.ETL")) returned 1 [0119.408] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350424f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x728 [0119.409] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.409] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe1017621, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe10d621a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.008.etl", cAlternateFileName="NO6494~1.ETL")) returned 1 [0119.409] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.410] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35045bbc, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6f0 [0119.410] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.411] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x2fb7ebe4, ftLastAccessTime.dwHighDateTime=0x1d327d1, ftLastWriteTime.dwLowDateTime=0x2fc89ca0, ftLastWriteTime.dwHighDateTime=0x1d327d1, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.009.etl", cAlternateFileName="NO492C~1.ETL")) returned 1 [0119.411] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35049288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x730 [0119.412] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.412] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xd855139b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd87b395e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.010.etl", cAlternateFileName="NO0EF1~1.ETL")) returned 1 [0119.412] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3504c954, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x734 [0119.413] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.413] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x1ff683d6, ftLastAccessTime.dwHighDateTime=0x1d327c0, ftLastWriteTime.dwLowDateTime=0x20000d39, ftLastWriteTime.dwHighDateTime=0x1d327c0, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.011.etl", cAlternateFileName="NOC3D2~1.ETL")) returned 1 [0119.413] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35050020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x72c [0119.414] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.415] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x46e2de3d, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x46eecb64, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.012.etl", cAlternateFileName="NOA86A~1.ETL")) returned 1 [0119.415] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350536ec, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x738 [0119.415] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x235d058f, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x23917bad, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.013.etl", cAlternateFileName="NO3128~1.ETL")) returned 1 [0119.416] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35056db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x73c [0119.418] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.418] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x8f69453d, ftLastAccessTime.dwHighDateTime=0x1d327b9, ftLastWriteTime.dwLowDateTime=0x8f779518, ftLastWriteTime.dwHighDateTime=0x1d327b9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.014.etl", cAlternateFileName="NO43D2~1.ETL")) returned 1 [0119.418] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3505a484, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x740 [0119.419] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.420] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7fb3688d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7fc1b6b8, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.015.etl", cAlternateFileName="NOTIFI~4.ETL")) returned 1 [0119.420] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3505db50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x744 [0119.421] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.421] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xcb502d29, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xcb5c1a4e, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.016.etl", cAlternateFileName="NOTIFI~3.ETL")) returned 1 [0119.421] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3506121c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x748 [0119.422] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.423] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7b53cfc, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x8be7d51, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.017.etl", cAlternateFileName="NOTIFI~1.ETL")) returned 1 [0119.423] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350648e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x74c [0119.424] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.424] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb630c394, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xb630c394, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.001.etl", cAlternateFileName="UP2DAF~1.ETL")) returned 1 [0119.424] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350237c4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x750 [0119.821] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.822] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcfcbff7d, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xcfcbff7d, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.002.etl", cAlternateFileName="UP3884~1.ETL")) returned 1 [0119.822] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3502dc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x754 [0119.823] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.823] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x917b63d4, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xb8b481f0, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.003.etl", cAlternateFileName="UP8247~1.ETL")) returned 1 [0119.823] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350312f4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x758 [0119.824] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.824] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x150f0f86, ftLastAccessTime.dwHighDateTime=0x1d5d811, ftLastWriteTime.dwLowDateTime=0x39296693, ftLastWriteTime.dwHighDateTime=0x1d5d811, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.004.etl", cAlternateFileName="UPD2FC~1.ETL")) returned 1 [0119.824] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350349c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x75c [0119.825] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.826] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1f83bc0, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0x32ea756e, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.005.etl", cAlternateFileName="UPB784~1.ETL")) returned 1 [0119.826] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503808c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x760 [0119.827] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.827] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfdc37a18, ftLastAccessTime.dwHighDateTime=0x1d5d80e, ftLastWriteTime.dwLowDateTime=0x290206fd, ftLastWriteTime.dwHighDateTime=0x1d5d80f, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.006.etl", cAlternateFileName="UP7D55~1.ETL")) returned 1 [0119.827] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503b758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x764 [0119.828] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.828] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8a5979b2, ftLastAccessTime.dwHighDateTime=0x1d5d80d, ftLastWriteTime.dwLowDateTime=0x8a5979b2, ftLastWriteTime.dwHighDateTime=0x1d5d80d, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.007.etl", cAlternateFileName="UP52FC~1.ETL")) returned 1 [0119.829] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503ee24, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x768 [0119.829] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.830] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcbc9fc38, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xefa43826, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.008.etl", cAlternateFileName="UPA721~1.ETL")) returned 1 [0119.830] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350424f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x76c [0119.831] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.831] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf1e2e9c9, ftLastAccessTime.dwHighDateTime=0x1d5d80b, ftLastWriteTime.dwLowDateTime=0x1ca46d4f, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.009.etl", cAlternateFileName="UPFC55~1.ETL")) returned 1 [0119.831] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35045bbc, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x770 [0119.832] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.833] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf7e12839, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0x26688c0b, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.010.etl", cAlternateFileName="UPB13B~1.ETL")) returned 1 [0119.833] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35049288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x774 [0119.834] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.834] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xde371631, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x2bb800e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.011.etl", cAlternateFileName="UP076F~1.ETL")) returned 1 [0119.834] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3504c954, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x778 [0119.835] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.835] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x2a522d7b, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x4e6dab1f, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.012.etl", cAlternateFileName="UPEBF6~1.ETL")) returned 1 [0119.835] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35050020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x77c [0119.836] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.837] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x2cbb43aa, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x5454d5b0, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.013.etl", cAlternateFileName="UP8DEE~1.ETL")) returned 1 [0119.837] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350536ec, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x780 [0119.838] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.838] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x60de6047, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x60de6047, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.014.etl", cAlternateFileName="UP38BA~1.ETL")) returned 1 [0119.838] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35056db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x784 [0119.839] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.839] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa72ae253, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xcb3f3780, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.015.etl", cAlternateFileName="UPE286~1.ETL")) returned 1 [0119.839] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3505a484, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x788 [0119.840] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.841] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x5ca8efbc, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x8784f695, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.016.etl", cAlternateFileName="UP9D42~1.ETL")) returned 1 [0119.841] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3505db50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x78c [0119.842] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.842] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x4346f4fe, ftLastAccessTime.dwHighDateTime=0x1d41dc4, ftLastWriteTime.dwLowDateTime=0x4346f4fe, ftLastWriteTime.dwHighDateTime=0x1d41dc4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.017.etl", cAlternateFileName="UPB8BA~1.ETL")) returned 1 [0119.842] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3506121c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x790 [0119.843] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.843] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x745a10f, ftLastAccessTime.dwHighDateTime=0x1d3aafc, ftLastWriteTime.dwLowDateTime=0x318cac0d, ftLastWriteTime.dwHighDateTime=0x1d3aafc, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.018.etl", cAlternateFileName="UPAC79~1.ETL")) returned 1 [0119.843] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350648e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x794 [0119.844] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.845] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd59be406, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xd59be406, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.019.etl", cAlternateFileName="UP1E42~1.ETL")) returned 1 [0119.845] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35067fb4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x798 [0119.846] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.847] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x198319d2, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3f449663, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.020.etl", cAlternateFileName="UP597C~1.ETL")) returned 1 [0119.847] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3506b680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x79c [0119.850] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.851] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1c505b8c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x58b60423, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.021.etl", cAlternateFileName="UP0CB7~1.ETL")) returned 1 [0119.851] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3506ed4c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7a0 [0119.852] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.852] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xdaf93ab4, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0x87be9f6, ftLastWriteTime.dwHighDateTime=0x1d38c44, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.022.etl", cAlternateFileName="UPBE04~1.ETL")) returned 1 [0119.852] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35072418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7a4 [0119.853] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.854] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1977635c, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1977635c, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.023.etl", cAlternateFileName="UPA620~1.ETL")) returned 1 [0119.854] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35075ae4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7a8 [0119.855] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.855] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfc820227, ftLastAccessTime.dwHighDateTime=0x1d3375a, ftLastWriteTime.dwLowDateTime=0x2521b8a4, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.024.etl", cAlternateFileName="UP14AB~1.ETL")) returned 1 [0119.855] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350791b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7ac [0119.856] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.857] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfd9caf15, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfd9caf15, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.025.etl", cAlternateFileName="UP4198~1.ETL")) returned 1 [0119.857] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3507c87c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7b0 [0119.858] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.858] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xda210f79, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xb10a27a8, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.026.etl", cAlternateFileName="UP96CC~1.ETL")) returned 1 [0119.858] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3507ff48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7b4 [0119.859] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.860] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe0798fd2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x79d33ce, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.027.etl", cAlternateFileName="UP7B54~1.ETL")) returned 1 [0119.860] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35083614, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7b8 [0119.861] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.861] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd7a24386, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x56762f51, ftLastWriteTime.dwHighDateTime=0x1d327d1, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.028.etl", cAlternateFileName="UPC098~1.ETL")) returned 1 [0119.861] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0119.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35086ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7bc [0120.288] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.289] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1fc4717b, ftLastAccessTime.dwHighDateTime=0x1d327c0, ftLastWriteTime.dwLowDateTime=0x46bc7f04, ftLastWriteTime.dwHighDateTime=0x1d327c0, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.029.etl", cAlternateFileName="UP16CC~1.ETL")) returned 1 [0120.289] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0120.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350237c4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7c0 [0120.290] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.290] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x22cb9437, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x911dff9b, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.030.etl", cAlternateFileName="UPDA92~1.ETL")) returned 1 [0120.290] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0120.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35026e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7c4 [0120.291] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.292] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8f4581c2, ftLastAccessTime.dwHighDateTime=0x1d327b9, ftLastWriteTime.dwLowDateTime=0xb62eafb0, ftLastWriteTime.dwHighDateTime=0x1d327b9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.031.etl", cAlternateFileName="UPBF2A~1.ETL")) returned 1 [0120.292] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0120.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3502dc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7c8 [0120.293] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.293] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7f83b96b, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x82808de1, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.032.etl", cAlternateFileName="UP750B~1.ETL")) returned 1 [0120.293] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0120.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350312f4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7cc [0120.294] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.294] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcae2810e, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xf21e09d1, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.033.etl", cAlternateFileName="UP6487~1.ETL")) returned 1 [0120.294] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0120.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350349c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7d0 [0120.295] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.296] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcd491119, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x2e5f9ec7, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.034.etl", cAlternateFileName="UPDATE~4.ETL")) returned 1 [0120.296] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0120.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503808c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7d4 [0120.297] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.297] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb30910b4, ftLastAccessTime.dwHighDateTime=0x1d3278b, ftLastWriteTime.dwLowDateTime=0xe1a1828d, ftLastWriteTime.dwHighDateTime=0x1d3278b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.035.etl", cAlternateFileName="UPDATE~3.ETL")) returned 1 [0120.297] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0120.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503b758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7d8 [0120.298] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.298] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbda7099b, ftLastAccessTime.dwHighDateTime=0x1d32746, ftLastWriteTime.dwLowDateTime=0xe19a12b7, ftLastWriteTime.dwHighDateTime=0x1d32746, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.036.etl", cAlternateFileName="UPDATE~2.ETL")) returned 1 [0120.298] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0120.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503ee24, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7dc [0120.301] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.301] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa972a1, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x266bdfb9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.037.etl", cAlternateFileName="UPDATE~1.ETL")) returned 1 [0120.302] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0120.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350424f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7e0 [0120.302] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.303] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa4f40f, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x8243765a, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x889a9e61, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateUx.001.etl", cAlternateFileName="UP654C~1.ETL")) returned 1 [0120.303] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0120.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35045bbc, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7e4 [0120.304] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.304] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa4f40f, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x6fa4f40f, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x7e0bea63, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateUx.002.etl", cAlternateFileName="UP1018~1.ETL")) returned 1 [0120.304] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0120.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35049288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7e8 [0120.305] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.305] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa4f40f, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x6fa4f40f, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x7e0bea63, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateUx.002.etl", cAlternateFileName="UP1018~1.ETL")) returned 0 [0120.306] FindClose (in: hFindFile=0x2f24900 | out: hFindFile=0x2f24900) returned 1 [0120.306] SetLastError (dwErrCode=0x0) [0120.306] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.306] GetLastError () returned 0x3 [0120.306] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0120.306] CloseHandle (hObject=0xffffffff) returned 1 [0120.306] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb630c394, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xb630c394, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Logs", cAlternateFileName="")) returned 0 [0120.306] FindClose (in: hFindFile=0x2f24a00 | out: hFindFile=0x2f24a00) returned 1 [0120.306] SetLastError (dwErrCode=0x0) [0120.306] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.306] GetLastError () returned 0x3 [0120.306] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0) returned 0 [0120.306] CloseHandle (hObject=0xffffffff) returned 1 [0120.306] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x700070, cFileName="WindowsHolographicDevices", cAlternateFileName="WINDOW~1")) returned 1 [0120.306] SetLastError (dwErrCode=0x0) [0120.306] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0120.307] GetLastError () returned 0xb7 [0120.307] CloseHandle (hObject=0x5e0) returned 1 [0120.307] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\WindowsHolographicDevices\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x700041, ftCreationTime.dwLowDateTime=0x6c0070, ftCreationTime.dwHighDateTime=0x630069, ftLastAccessTime.dwLowDateTime=0x740061, ftLastAccessTime.dwHighDateTime=0x6f0069, ftLastWriteTime.dwLowDateTime=0x20006e, ftLastWriteTime.dwHighDateTime=0x610044, nFileSizeHigh=0x610074, nFileSizeLow=0x41005c, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="cation D\x01", cAlternateFileName="")) returned 0xffffffff [0120.307] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0120.307] SetLastError (dwErrCode=0x0) [0120.307] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\WindowsHolographicDevices\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\windowsholographicdevices\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.307] GetLastError () returned 0x3 [0120.307] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0) returned 0 [0120.307] CloseHandle (hObject=0xffffffff) returned 1 [0120.308] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x700070, cFileName="WindowsHolographicDevices", cAlternateFileName="WINDOW~1")) returned 0 [0120.308] FindClose (in: hFindFile=0x2f24800 | out: hFindFile=0x2f24800) returned 1 [0120.308] SetLastError (dwErrCode=0x0) [0120.308] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0120.308] GetLastError () returned 0xb7 [0120.308] CloseHandle (hObject=0x5f0) returned 1 [0120.308] FindNextFileW (in: hFindFile=0x2f24c40, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x69006c, cFileName="Comms", cAlternateFileName="")) returned 1 [0120.308] SetLastError (dwErrCode=0x0) [0120.308] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0120.309] GetLastError () returned 0xb7 [0120.309] CloseHandle (hObject=0x5f0) returned 1 [0120.309] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Comms\\*.*", lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24c00 [0120.309] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0120.309] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 0 [0120.309] FindClose (in: hFindFile=0x2f24c00 | out: hFindFile=0x2f24c00) returned 1 [0120.309] SetLastError (dwErrCode=0x0) [0120.309] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Comms\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\comms\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0120.310] GetLastError () returned 0x0 [0120.310] WriteFile (in: hFile=0x5f0, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x197998, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x197998*=0x273, lpOverlapped=0x0) returned 1 [0120.311] CloseHandle (hObject=0x5f0) returned 1 [0120.311] FindNextFileW (in: hFindFile=0x2f24c40, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x69006c, cFileName="Desktop", cAlternateFileName="")) returned 1 [0120.311] SetLastError (dwErrCode=0x0) [0120.311] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0120.312] GetLastError () returned 0xb7 [0120.312] CloseHandle (hObject=0x5f0) returned 1 [0120.312] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Desktop\\*.*", lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c3ce2c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24c00 [0120.312] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c3ce2c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0120.312] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38bb5c78, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38bb5c78, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38bb5c78, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x852, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Acrobat Reader DC.lnk", cAlternateFileName="ACROBA~1.LNK")) returned 1 [0120.312] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa08e58, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fb62ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0120.312] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4c3ce2c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c6308a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x91a, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0120.312] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef84fc3f, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef84fc3f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef84fc3f, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0120.312] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef84fc3f, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef84fc3f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef84fc3f, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 0 [0120.312] FindClose (in: hFindFile=0x2f24c00 | out: hFindFile=0x2f24c00) returned 1 [0120.312] SetLastError (dwErrCode=0x0) [0120.312] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Desktop\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\desktop\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4 [0120.802] GetLastError () returned 0x0 [0120.802] WriteFile (in: hFile=0x3f4, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x197998, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x197998*=0x273, lpOverlapped=0x0) returned 1 [0120.803] CloseHandle (hObject=0x3f4) returned 1 [0121.487] FindNextFileW (in: hFindFile=0x2f24c40, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x69006c, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0121.487] SetLastError (dwErrCode=0x0) [0121.487] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4 [0121.488] GetLastError () returned 0xb7 [0121.488] CloseHandle (hObject=0x3f4) returned 1 [0121.488] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Documents\\*.*", lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb1fb672c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb1fb672c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24a00 [0121.489] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb1fb672c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb1fb672c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0121.490] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fb62ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.490] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x700070, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0121.490] SetLastError (dwErrCode=0x0) [0121.490] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Documents\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\documents\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0121.492] GetLastError () returned 0x0 [0121.492] WriteFile (in: hFile=0x5f0, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972dc, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x1972dc*=0x273, lpOverlapped=0x0) returned 1 [0121.493] CloseHandle (hObject=0x5f0) returned 1 [0121.493] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Documents\\My Music\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466d9b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24800 [0121.493] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466d9b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0121.493] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.493] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0121.493] FindClose (in: hFindFile=0x2f24800 | out: hFindFile=0x2f24800) returned 1 [0121.494] SetLastError (dwErrCode=0x0) [0121.494] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Documents\\My Music\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\documents\\my music\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0121.494] GetLastError () returned 0x0 [0121.494] WriteFile (in: hFile=0x5f0, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x1972cc*=0x273, lpOverlapped=0x0) returned 1 [0121.495] CloseHandle (hObject=0x5f0) returned 1 [0121.495] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x700070, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0121.495] SetLastError (dwErrCode=0x0) [0121.495] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Documents\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\documents\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0121.495] GetLastError () returned 0xb7 [0121.495] CloseHandle (hObject=0x5f0) returned 1 [0121.495] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Documents\\My Pictures\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24d00 [0121.496] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0121.496] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.496] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0121.496] FindClose (in: hFindFile=0x2f24d00 | out: hFindFile=0x2f24d00) returned 1 [0121.497] SetLastError (dwErrCode=0x0) [0121.498] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Documents\\My Pictures\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\documents\\my pictures\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.498] GetLastError () returned 0x3 [0121.498] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0) returned 0 [0121.498] CloseHandle (hObject=0xffffffff) returned 1 [0121.498] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x700070, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0121.498] SetLastError (dwErrCode=0x0) [0121.498] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Documents\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\documents\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0121.498] GetLastError () returned 0xb7 [0121.498] CloseHandle (hObject=0x5f0) returned 1 [0121.498] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Documents\\My Videos\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466eabf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24800 [0121.498] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466eabf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0121.499] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.499] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0121.499] FindClose (in: hFindFile=0x2f24800 | out: hFindFile=0x2f24800) returned 1 [0121.499] SetLastError (dwErrCode=0x0) [0121.499] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Documents\\My Videos\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\documents\\my videos\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0121.499] GetLastError () returned 0x0 [0121.499] WriteFile (in: hFile=0x5f0, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x1972cc*=0x273, lpOverlapped=0x0) returned 1 [0121.500] CloseHandle (hObject=0x5f0) returned 1 [0121.500] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x700070, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0121.500] FindClose (in: hFindFile=0x2f24a00 | out: hFindFile=0x2f24a00) returned 1 [0121.500] SetLastError (dwErrCode=0x0) [0121.500] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Documents\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\documents\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4 [0121.501] GetLastError () returned 0xb7 [0121.501] CloseHandle (hObject=0x3f4) returned 1 [0121.501] FindNextFileW (in: hFindFile=0x2f24c40, lpFindFileData=0x197dac | out: lpFindFileData=0x197dac*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x69006c, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0121.501] SetLastError (dwErrCode=0x0) [0121.501] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4 [0121.501] GetLastError () returned 0xb7 [0121.501] CloseHandle (hObject=0x3f4) returned 1 [0121.501] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\*.*", lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24800 [0121.501] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0121.501] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d3d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="AppV", cAlternateFileName="")) returned 1 [0121.501] SetLastError (dwErrCode=0x0) [0121.501] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0121.502] GetLastError () returned 0x0 [0121.502] WriteFile (in: hFile=0x5f0, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972dc, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x1972dc*=0x273, lpOverlapped=0x0) returned 1 [0121.504] CloseHandle (hObject=0x5f0) returned 1 [0121.504] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\AppV\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d3d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24880 [0121.504] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d3d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0121.504] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Setup", cAlternateFileName="")) returned 1 [0121.504] SetLastError (dwErrCode=0x0) [0121.504] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\AppV\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\appv\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0121.505] GetLastError () returned 0x0 [0121.505] WriteFile (in: hFile=0x5e0, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x196c10*=0x273, lpOverlapped=0x0) returned 1 [0121.505] CloseHandle (hObject=0x5e0) returned 1 [0121.506] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\AppV\\Setup\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24900 [0121.506] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0121.506] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799dd27b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2889e45, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2889e45, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="OfficeIntegrator.ps1", cAlternateFileName="")) returned 1 [0121.506] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0121.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350237c4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6d8 [0121.507] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.508] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799dd27b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2889e45, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2889e45, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="OfficeIntegrator.ps1", cAlternateFileName="")) returned 0 [0121.508] FindClose (in: hFindFile=0x2f24900 | out: hFindFile=0x2f24900) returned 1 [0121.508] SetLastError (dwErrCode=0x0) [0121.508] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\AppV\\Setup\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\appv\\setup\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0121.962] GetLastError () returned 0x0 [0121.962] WriteFile (in: hFile=0x5e0, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x196c00*=0x273, lpOverlapped=0x0) returned 1 [0121.963] CloseHandle (hObject=0x5e0) returned 1 [0121.963] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Setup", cAlternateFileName="")) returned 0 [0121.963] FindClose (in: hFindFile=0x2f24880 | out: hFindFile=0x2f24880) returned 1 [0121.963] SetLastError (dwErrCode=0x0) [0121.964] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\AppV\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\appv\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0121.964] GetLastError () returned 0xb7 [0121.964] CloseHandle (hObject=0x5f0) returned 1 [0121.964] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfa011b19, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xfa011b19, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0121.964] SetLastError (dwErrCode=0x0) [0121.964] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0121.964] GetLastError () returned 0xb7 [0121.964] CloseHandle (hObject=0x5f0) returned 1 [0121.964] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3c4413a9, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c4413a9, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24900 [0121.965] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3c4413a9, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c4413a9, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0121.965] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4", cAlternateFileName="0D0D4E~1")) returned 1 [0121.965] SetLastError (dwErrCode=0x0) [0121.965] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0121.966] GetLastError () returned 0x0 [0121.966] WriteFile (in: hFile=0x5e0, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x196c10*=0x273, lpOverlapped=0x0) returned 1 [0121.966] CloseHandle (hObject=0x5e0) returned 1 [0121.967] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x98523694, ftCreationTime.dwLowDateTime=0x2a70310, ftCreationTime.dwHighDateTime=0x730000, ftLastAccessTime.dwLowDateTime=0x4, ftLastAccessTime.dwHighDateTime=0x740061, ftLastWriteTime.dwLowDateTime=0x6f0069, ftLastWriteTime.dwHighDateTime=0x20006e, nFileSizeHigh=0x610044, nFileSizeLow=0x610074, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="li`", cAlternateFileName="")) returned 0xffffffff [0121.967] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0121.967] SetLastError (dwErrCode=0x0) [0121.967] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.967] GetLastError () returned 0x3 [0121.967] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0121.967] CloseHandle (hObject=0xffffffff) returned 1 [0121.967] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="19B11135-37BD-4FA1-A78E-C20CA2BDA1C0", cAlternateFileName="19B111~1")) returned 1 [0121.967] SetLastError (dwErrCode=0x0) [0121.967] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0121.967] GetLastError () returned 0xb7 [0121.967] CloseHandle (hObject=0x5e0) returned 1 [0121.967] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x98523694, ftCreationTime.dwLowDateTime=0x2a70310, ftCreationTime.dwHighDateTime=0x730000, ftLastAccessTime.dwLowDateTime=0x4, ftLastAccessTime.dwHighDateTime=0x740061, ftLastWriteTime.dwLowDateTime=0x6f0069, ftLastWriteTime.dwHighDateTime=0x20006e, nFileSizeHigh=0x610044, nFileSizeLow=0x610074, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="li`", cAlternateFileName="")) returned 0xffffffff [0121.967] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0121.967] SetLastError (dwErrCode=0x0) [0121.968] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.968] GetLastError () returned 0x3 [0121.968] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0121.968] CloseHandle (hObject=0xffffffff) returned 1 [0121.968] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="201EB7DF-C721-4B8B-9C81-A09DE7F931E6", cAlternateFileName="201EB7~1")) returned 1 [0121.968] SetLastError (dwErrCode=0x0) [0121.968] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0121.968] GetLastError () returned 0xb7 [0121.968] CloseHandle (hObject=0x5e0) returned 1 [0121.968] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x98523694, ftCreationTime.dwLowDateTime=0x2a70310, ftCreationTime.dwHighDateTime=0x730000, ftLastAccessTime.dwLowDateTime=0x4, ftLastAccessTime.dwHighDateTime=0x740061, ftLastWriteTime.dwLowDateTime=0x6f0069, ftLastWriteTime.dwHighDateTime=0x20006e, nFileSizeHigh=0x610044, nFileSizeLow=0x610074, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="li`", cAlternateFileName="")) returned 0xffffffff [0121.968] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0121.968] SetLastError (dwErrCode=0x0) [0121.968] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.968] GetLastError () returned 0x3 [0121.968] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0121.968] CloseHandle (hObject=0xffffffff) returned 1 [0121.968] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3dbb3c9, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8512127a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8512127a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7b6, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="DeploymentConfig.0.xml", cAlternateFileName="DEPLOY~1.XML")) returned 1 [0121.968] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0121.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350237c4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e0 [0121.969] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.970] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b22dc95, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa011b19, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xfa011b19, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x7b4, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="DeploymentConfig.1.xml", cAlternateFileName="DEPLOY~3.XML")) returned 1 [0121.970] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0121.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35026e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7ec [0121.971] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.971] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534ee362, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3c4413a9, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c4413a9, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="DeploymentConfig.2.xml", cAlternateFileName="DEPLOY~2.XML")) returned 1 [0121.971] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0121.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3502dc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7f0 [0121.972] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.973] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="MachineData", cAlternateFileName="MACHIN~1")) returned 1 [0121.973] SetLastError (dwErrCode=0x0) [0121.973] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f4 [0121.973] GetLastError () returned 0xb7 [0121.973] CloseHandle (hObject=0x7f4) returned 1 [0121.973] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\MachineData\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24c00 [0121.974] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0121.974] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Catalog", cAlternateFileName="")) returned 1 [0121.974] SetLastError (dwErrCode=0x0) [0121.974] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\MachineData\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\machinedata\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.974] GetLastError () returned 0x3 [0121.974] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0121.974] CloseHandle (hObject=0xffffffff) returned 1 [0121.974] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\MachineData\\Catalog\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.974] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0121.974] SetLastError (dwErrCode=0x0) [0121.974] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\MachineData\\Catalog\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\machinedata\\catalog\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.974] GetLastError () returned 0x3 [0121.974] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0121.974] CloseHandle (hObject=0xffffffff) returned 1 [0121.974] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1 [0121.974] SetLastError (dwErrCode=0x0) [0121.974] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\MachineData\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\machinedata\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.974] GetLastError () returned 0x3 [0121.974] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0121.974] CloseHandle (hObject=0xffffffff) returned 1 [0121.974] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\MachineData\\Integration\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.974] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0121.974] SetLastError (dwErrCode=0x0) [0121.974] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\MachineData\\Integration\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\machinedata\\integration\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.974] GetLastError () returned 0x3 [0121.974] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0121.974] CloseHandle (hObject=0xffffffff) returned 1 [0121.975] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 0 [0121.975] FindClose (in: hFindFile=0x2f24c00 | out: hFindFile=0x2f24c00) returned 1 [0121.975] SetLastError (dwErrCode=0x0) [0121.975] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\MachineData\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\machinedata\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.975] GetLastError () returned 0x3 [0121.975] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0121.975] CloseHandle (hObject=0xffffffff) returned 1 [0121.975] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8826bb5f, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x683c4eba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x683c4eba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="ProductReleases", cAlternateFileName="PRODUC~1")) returned 1 [0121.975] SetLastError (dwErrCode=0x0) [0121.975] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f4 [0121.975] GetLastError () returned 0xb7 [0121.975] CloseHandle (hObject=0x7f4) returned 1 [0121.975] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\ProductReleases\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x98523694, ftCreationTime.dwLowDateTime=0x2a70310, ftCreationTime.dwHighDateTime=0x730000, ftLastAccessTime.dwLowDateTime=0x4, ftLastAccessTime.dwHighDateTime=0x740061, ftLastWriteTime.dwLowDateTime=0x6f0069, ftLastWriteTime.dwHighDateTime=0x20006e, nFileSizeHigh=0x610044, nFileSizeLow=0x610074, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="li`", cAlternateFileName="")) returned 0xffffffff [0121.975] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0121.975] SetLastError (dwErrCode=0x0) [0121.975] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\ProductReleases\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\productreleases\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.975] GetLastError () returned 0x3 [0121.975] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0121.975] CloseHandle (hObject=0xffffffff) returned 1 [0121.976] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="UserData", cAlternateFileName="")) returned 1 [0121.976] SetLastError (dwErrCode=0x0) [0121.976] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f4 [0121.976] GetLastError () returned 0xb7 [0121.976] CloseHandle (hObject=0x7f4) returned 1 [0121.976] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\UserData\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24880 [0121.976] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0121.976] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 0 [0121.976] FindClose (in: hFindFile=0x2f24880 | out: hFindFile=0x2f24880) returned 1 [0121.977] SetLastError (dwErrCode=0x0) [0121.977] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\UserData\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\userdata\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.977] GetLastError () returned 0x3 [0121.977] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0121.977] CloseHandle (hObject=0xffffffff) returned 1 [0121.977] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 1 [0121.977] SetLastError (dwErrCode=0x0) [0121.977] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f4 [0121.977] GetLastError () returned 0xb7 [0121.977] CloseHandle (hObject=0x7f4) returned 1 [0121.977] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x98523694, ftCreationTime.dwLowDateTime=0x2a70310, ftCreationTime.dwHighDateTime=0x730000, ftLastAccessTime.dwLowDateTime=0x4, ftLastAccessTime.dwHighDateTime=0x740061, ftLastWriteTime.dwLowDateTime=0x6f0069, ftLastWriteTime.dwHighDateTime=0x20006e, nFileSizeHigh=0x610044, nFileSizeLow=0x610074, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="li`", cAlternateFileName="")) returned 0xffffffff [0121.977] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0121.977] SetLastError (dwErrCode=0x0) [0121.977] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.977] GetLastError () returned 0x3 [0121.977] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0121.977] CloseHandle (hObject=0xffffffff) returned 1 [0121.977] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 0 [0121.977] FindClose (in: hFindFile=0x2f24900 | out: hFindFile=0x2f24900) returned 1 [0121.978] SetLastError (dwErrCode=0x0) [0121.978] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0121.978] GetLastError () returned 0xb7 [0121.978] CloseHandle (hObject=0x5f0) returned 1 [0121.978] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Crypto", cAlternateFileName="")) returned 1 [0121.978] SetLastError (dwErrCode=0x0) [0121.978] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0121.978] GetLastError () returned 0xb7 [0121.978] CloseHandle (hObject=0x5f0) returned 1 [0121.978] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24880 [0121.979] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0121.979] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x42e812c9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x42e812c9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="DSS", cAlternateFileName="")) returned 1 [0121.979] SetLastError (dwErrCode=0x0) [0121.979] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f4 [0121.981] GetLastError () returned 0x0 [0121.981] WriteFile (in: hFile=0x7f4, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x196c10*=0x273, lpOverlapped=0x0) returned 1 [0121.982] CloseHandle (hObject=0x7f4) returned 1 [0121.982] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\DSS\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x42e812c9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x42e812c9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24900 [0121.983] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x42e812c9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x42e812c9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0121.983] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0121.983] SetLastError (dwErrCode=0x0) [0121.983] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\DSS\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\dss\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f8 [0121.983] GetLastError () returned 0x0 [0121.983] WriteFile (in: hFile=0x7f8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x196544*=0x273, lpOverlapped=0x0) returned 1 [0121.984] CloseHandle (hObject=0x7f8) returned 1 [0121.984] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\DSS\\MachineKeys\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24d00 [0121.985] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0121.985] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 0 [0121.985] FindClose (in: hFindFile=0x2f24d00 | out: hFindFile=0x2f24d00) returned 1 [0121.985] SetLastError (dwErrCode=0x0) [0121.985] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\DSS\\MachineKeys\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\dss\\machinekeys\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.985] GetLastError () returned 0x3 [0121.985] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0121.985] CloseHandle (hObject=0xffffffff) returned 1 [0121.985] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0 [0121.985] FindClose (in: hFindFile=0x2f24900 | out: hFindFile=0x2f24900) returned 1 [0121.985] SetLastError (dwErrCode=0x0) [0121.985] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\DSS\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\dss\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f4 [0121.986] GetLastError () returned 0xb7 [0121.986] CloseHandle (hObject=0x7f4) returned 1 [0121.986] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Keys", cAlternateFileName="")) returned 1 [0121.986] SetLastError (dwErrCode=0x0) [0121.986] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f4 [0121.986] GetLastError () returned 0xb7 [0121.986] CloseHandle (hObject=0x7f4) returned 1 [0121.986] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\Keys\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24900 [0121.987] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0121.987] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 0 [0121.988] FindClose (in: hFindFile=0x2f24900 | out: hFindFile=0x2f24900) returned 1 [0121.988] SetLastError (dwErrCode=0x0) [0121.988] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\Keys\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\keys\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.988] GetLastError () returned 0x3 [0121.988] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0121.988] CloseHandle (hObject=0xffffffff) returned 1 [0121.988] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="PCPKSP", cAlternateFileName="")) returned 1 [0121.988] SetLastError (dwErrCode=0x0) [0121.988] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f4 [0121.988] GetLastError () returned 0xb7 [0121.988] CloseHandle (hObject=0x7f4) returned 1 [0121.988] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\PCPKSP\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24a00 [0121.989] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0121.989] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd332abc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="WindowsAIK", cAlternateFileName="WINDOW~1")) returned 1 [0121.989] SetLastError (dwErrCode=0x0) [0121.989] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\PCPKSP\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\pcpksp\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.989] GetLastError () returned 0x3 [0121.989] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0121.989] CloseHandle (hObject=0xffffffff) returned 1 [0121.989] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\PCPKSP\\WindowsAIK\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.989] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0121.989] SetLastError (dwErrCode=0x0) [0121.989] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\PCPKSP\\WindowsAIK\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\pcpksp\\windowsaik\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.989] GetLastError () returned 0x3 [0121.989] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0121.989] CloseHandle (hObject=0xffffffff) returned 1 [0121.989] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd332abc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="WindowsAIK", cAlternateFileName="WINDOW~1")) returned 0 [0121.989] FindClose (in: hFindFile=0x2f24a00 | out: hFindFile=0x2f24a00) returned 1 [0121.989] SetLastError (dwErrCode=0x0) [0121.989] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\PCPKSP\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\pcpksp\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.989] GetLastError () returned 0x3 [0121.989] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0121.989] CloseHandle (hObject=0xffffffff) returned 1 [0121.989] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x17c6f037, ftLastAccessTime.dwHighDateTime=0x1d2a02b, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="RSA", cAlternateFileName="")) returned 1 [0121.989] SetLastError (dwErrCode=0x0) [0121.989] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f4 [0121.990] GetLastError () returned 0xb7 [0121.990] CloseHandle (hObject=0x7f4) returned 1 [0121.990] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RSA\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24d00 [0121.990] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0121.990] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd40a02b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x955a3652, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0121.990] SetLastError (dwErrCode=0x0) [0121.990] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RSA\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\rsa\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f8 [0121.991] GetLastError () returned 0x0 [0121.991] WriteFile (in: hFile=0x7f8, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x196544*=0x273, lpOverlapped=0x0) returned 1 [0121.992] CloseHandle (hObject=0x7f8) returned 1 [0121.992] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RSA\\MachineKeys\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd40a02b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf8de22c, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24900 [0121.993] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd40a02b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf8de22c, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0121.993] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcf8de22c, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0xcf8de22c, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xcf8de22c, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x34, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="08e575673cce10c72090304839888e02_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="08E575~1")) returned 1 [0121.993] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0121.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350312f4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7fc [0121.993] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.994] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcb806263, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb806263, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcbbe5f7c, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x8b1, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267", cAlternateFileName="F686AA~1")) returned 1 [0121.994] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0121.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350349c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x804 [0121.995] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.995] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcb806263, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb806263, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcbbe5f7c, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x8b1, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267", cAlternateFileName="F686AA~1")) returned 0 [0121.995] FindClose (in: hFindFile=0x2f24900 | out: hFindFile=0x2f24900) returned 1 [0121.996] SetLastError (dwErrCode=0x0) [0121.996] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RSA\\MachineKeys\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\rsa\\machinekeys\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.996] GetLastError () returned 0x3 [0121.996] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0121.996] CloseHandle (hObject=0xffffffff) returned 1 [0121.996] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0121.996] SetLastError (dwErrCode=0x0) [0121.996] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RSA\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\rsa\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f8 [0121.996] GetLastError () returned 0xb7 [0121.996] CloseHandle (hObject=0x7f8) returned 1 [0121.996] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24c00 [0121.997] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0121.997] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="4ECCD1~1")) returned 1 [0121.997] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0121.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503808c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x808 [0121.998] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.998] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="4ECCD1~1")) returned 0 [0121.998] FindClose (in: hFindFile=0x2f24c00 | out: hFindFile=0x2f24c00) returned 1 [0121.999] SetLastError (dwErrCode=0x0) [0121.999] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RSA\\S-1-5-18\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\rsa\\s-1-5-18\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.999] GetLastError () returned 0x3 [0121.999] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0121.999] CloseHandle (hObject=0xffffffff) returned 1 [0121.999] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="S-1-5-18", cAlternateFileName="")) returned 0 [0121.999] FindClose (in: hFindFile=0x2f24d00 | out: hFindFile=0x2f24d00) returned 1 [0121.999] SetLastError (dwErrCode=0x0) [0121.999] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RSA\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\rsa\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f4 [0122.000] GetLastError () returned 0xb7 [0122.000] CloseHandle (hObject=0x7f4) returned 1 [0122.000] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xfe648d52, ftLastWriteTime.dwHighDateTime=0x1d32770, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="SystemKeys", cAlternateFileName="SYSTEM~1")) returned 1 [0122.000] SetLastError (dwErrCode=0x0) [0122.000] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f4 [0122.000] GetLastError () returned 0xb7 [0122.000] CloseHandle (hObject=0x7f4) returned 1 [0122.000] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\SystemKeys\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x7737cd02, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24900 [0122.638] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x7737cd02, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0122.638] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcc464582, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267", cAlternateFileName="709228~1")) returned 1 [0122.638] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0122.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350237c4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d4 [0122.639] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.640] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x1b8875cb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x1b8875cb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x1b8875cb, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="D20D9E~1")) returned 1 [0122.640] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0122.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35026e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x458 [0122.641] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.641] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x1b8875cb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x1b8875cb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x1b8875cb, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="D20D9E~1")) returned 0 [0122.641] FindClose (in: hFindFile=0x2f24900 | out: hFindFile=0x2f24900) returned 1 [0122.642] SetLastError (dwErrCode=0x0) [0122.642] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\SystemKeys\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\systemkeys\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.642] GetLastError () returned 0x3 [0122.642] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0122.642] CloseHandle (hObject=0xffffffff) returned 1 [0122.642] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xfe648d52, ftLastWriteTime.dwHighDateTime=0x1d32770, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="SystemKeys", cAlternateFileName="SYSTEM~1")) returned 0 [0122.642] FindClose (in: hFindFile=0x2f24880 | out: hFindFile=0x2f24880) returned 1 [0122.642] SetLastError (dwErrCode=0x0) [0122.642] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0122.642] GetLastError () returned 0xb7 [0122.642] CloseHandle (hObject=0x5f0) returned 1 [0122.643] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="DataMart", cAlternateFileName="")) returned 1 [0122.643] SetLastError (dwErrCode=0x0) [0122.643] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0122.643] GetLastError () returned 0xb7 [0122.643] CloseHandle (hObject=0x5f0) returned 1 [0122.643] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\DataMart\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24c00 [0122.645] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0122.645] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="PaidWiFi", cAlternateFileName="")) returned 1 [0122.645] SetLastError (dwErrCode=0x0) [0122.645] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\DataMart\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\datamart\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f4 [0122.645] GetLastError () returned 0x0 [0122.645] WriteFile (in: hFile=0x7f4, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x196c10*=0x273, lpOverlapped=0x0) returned 1 [0122.646] CloseHandle (hObject=0x7f4) returned 1 [0122.646] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\DataMart\\PaidWiFi\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24cc0 [0122.647] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0122.647] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 0 [0122.647] FindClose (in: hFindFile=0x2f24cc0 | out: hFindFile=0x2f24cc0) returned 1 [0122.647] SetLastError (dwErrCode=0x0) [0122.647] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\DataMart\\PaidWiFi\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\datamart\\paidwifi\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.647] GetLastError () returned 0x3 [0122.647] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0122.647] CloseHandle (hObject=0xffffffff) returned 1 [0122.647] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="PaidWiFi", cAlternateFileName="")) returned 0 [0122.647] FindClose (in: hFindFile=0x2f24c00 | out: hFindFile=0x2f24c00) returned 1 [0122.647] SetLastError (dwErrCode=0x0) [0122.647] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\DataMart\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\datamart\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0122.647] GetLastError () returned 0xb7 [0122.647] CloseHandle (hObject=0x5f0) returned 1 [0122.647] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0122.647] SetLastError (dwErrCode=0x0) [0122.648] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0122.648] GetLastError () returned 0xb7 [0122.648] CloseHandle (hObject=0x5f0) returned 1 [0122.648] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Device Stage\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24cc0 [0122.648] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0122.648] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Device", cAlternateFileName="")) returned 1 [0122.648] SetLastError (dwErrCode=0x0) [0122.648] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Device Stage\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\device stage\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.648] GetLastError () returned 0x3 [0122.648] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0122.648] CloseHandle (hObject=0xffffffff) returned 1 [0122.648] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Device Stage\\Device\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24c00 [0122.650] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.650] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0122.650] SetLastError (dwErrCode=0x0) [0122.650] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Device Stage\\Device\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\device stage\\device\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.650] GetLastError () returned 0x3 [0122.650] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0122.650] CloseHandle (hObject=0xffffffff) returned 1 [0122.650] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0122.650] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0122.650] SetLastError (dwErrCode=0x0) [0122.650] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.650] GetLastError () returned 0x3 [0122.650] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0122.650] CloseHandle (hObject=0xffffffff) returned 1 [0122.650] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0122.650] SetLastError (dwErrCode=0x0) [0122.650] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Device Stage\\Device\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\device stage\\device\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.650] GetLastError () returned 0x3 [0122.650] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0122.650] CloseHandle (hObject=0xffffffff) returned 1 [0122.650] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0122.650] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0122.650] SetLastError (dwErrCode=0x0) [0122.650] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.650] GetLastError () returned 0x3 [0122.650] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0122.651] CloseHandle (hObject=0xffffffff) returned 1 [0122.651] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0 [0122.651] FindClose (in: hFindFile=0x2f24c00 | out: hFindFile=0x2f24c00) returned 1 [0122.651] SetLastError (dwErrCode=0x0) [0122.651] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Device Stage\\Device\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\device stage\\device\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.651] GetLastError () returned 0x3 [0122.651] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0122.651] CloseHandle (hObject=0xffffffff) returned 1 [0122.651] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Task", cAlternateFileName="")) returned 1 [0122.651] SetLastError (dwErrCode=0x0) [0122.651] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Device Stage\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\device stage\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.651] GetLastError () returned 0x3 [0122.651] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0122.651] CloseHandle (hObject=0xffffffff) returned 1 [0122.651] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Device Stage\\Task\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24880 [0122.651] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.651] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0122.651] SetLastError (dwErrCode=0x0) [0122.652] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Device Stage\\Task\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\device stage\\task\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.652] GetLastError () returned 0x3 [0122.652] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0122.652] CloseHandle (hObject=0xffffffff) returned 1 [0122.652] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0122.652] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0122.652] SetLastError (dwErrCode=0x0) [0122.652] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.652] GetLastError () returned 0x3 [0122.652] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0122.652] CloseHandle (hObject=0xffffffff) returned 1 [0122.652] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0122.652] SetLastError (dwErrCode=0x0) [0122.652] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Device Stage\\Task\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\device stage\\task\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.652] GetLastError () returned 0x3 [0122.652] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0122.652] CloseHandle (hObject=0xffffffff) returned 1 [0122.652] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0122.652] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0122.652] SetLastError (dwErrCode=0x0) [0122.652] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.652] GetLastError () returned 0x3 [0122.652] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0122.652] CloseHandle (hObject=0xffffffff) returned 1 [0122.652] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0 [0122.652] FindClose (in: hFindFile=0x2f24880 | out: hFindFile=0x2f24880) returned 1 [0122.652] SetLastError (dwErrCode=0x0) [0122.652] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Device Stage\\Task\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\device stage\\task\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.653] GetLastError () returned 0x3 [0122.653] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0122.653] CloseHandle (hObject=0xffffffff) returned 1 [0122.653] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Task", cAlternateFileName="")) returned 0 [0122.653] FindClose (in: hFindFile=0x2f24cc0 | out: hFindFile=0x2f24cc0) returned 1 [0122.653] SetLastError (dwErrCode=0x0) [0122.653] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Device Stage\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\device stage\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.653] GetLastError () returned 0x3 [0122.653] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0) returned 0 [0122.653] CloseHandle (hObject=0xffffffff) returned 1 [0122.653] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0122.653] SetLastError (dwErrCode=0x0) [0122.653] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0122.653] GetLastError () returned 0xb7 [0122.653] CloseHandle (hObject=0x5f0) returned 1 [0122.653] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\DeviceSync\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24880 [0122.657] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0122.657] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 0 [0122.657] FindClose (in: hFindFile=0x2f24880 | out: hFindFile=0x2f24880) returned 1 [0122.657] SetLastError (dwErrCode=0x0) [0122.657] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\DeviceSync\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\devicesync\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0122.659] GetLastError () returned 0x0 [0122.659] WriteFile (in: hFile=0x5f0, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x1972cc*=0x273, lpOverlapped=0x0) returned 1 [0122.660] CloseHandle (hObject=0x5f0) returned 1 [0122.660] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Diagnosis", cAlternateFileName="DIAGNO~1")) returned 1 [0122.660] SetLastError (dwErrCode=0x0) [0122.660] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0122.660] GetLastError () returned 0xb7 [0122.661] CloseHandle (hObject=0x5f0) returned 1 [0122.661] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24c00 [0122.662] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0122.662] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="AsimovUploader", cAlternateFileName="ASIMOV~1")) returned 1 [0122.662] SetLastError (dwErrCode=0x0) [0122.662] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f4 [0122.663] GetLastError () returned 0x0 [0122.663] WriteFile (in: hFile=0x7f4, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x196c10*=0x273, lpOverlapped=0x0) returned 1 [0122.664] CloseHandle (hObject=0x7f4) returned 1 [0122.664] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\AsimovUploader\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x98523694, ftCreationTime.dwLowDateTime=0x2f39620, ftCreationTime.dwHighDateTime=0x730000, ftLastAccessTime.dwLowDateTime=0x4, ftLastAccessTime.dwHighDateTime=0x740061, ftLastWriteTime.dwLowDateTime=0x6f0069, ftLastWriteTime.dwHighDateTime=0x20006e, nFileSizeHigh=0x610044, nFileSizeLow=0x610074, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="liT", cAlternateFileName="")) returned 0xffffffff [0122.664] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0122.664] SetLastError (dwErrCode=0x0) [0122.664] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\AsimovUploader\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\asimovuploader\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.664] GetLastError () returned 0x3 [0122.664] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0122.664] CloseHandle (hObject=0xffffffff) returned 1 [0122.665] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d9a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a88b65e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="DownloadedScenarios", cAlternateFileName="DOWNLO~1")) returned 1 [0122.665] SetLastError (dwErrCode=0x0) [0122.665] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f4 [0122.665] GetLastError () returned 0xb7 [0122.665] CloseHandle (hObject=0x7f4) returned 1 [0122.665] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\DownloadedScenarios\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x98523694, ftCreationTime.dwLowDateTime=0x2f39620, ftCreationTime.dwHighDateTime=0x730000, ftLastAccessTime.dwLowDateTime=0x4, ftLastAccessTime.dwHighDateTime=0x740061, ftLastWriteTime.dwLowDateTime=0x6f0069, ftLastWriteTime.dwHighDateTime=0x20006e, nFileSizeHigh=0x610044, nFileSizeLow=0x610074, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="liT", cAlternateFileName="")) returned 0xffffffff [0122.665] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0122.665] SetLastError (dwErrCode=0x0) [0122.665] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\DownloadedScenarios\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\downloadedscenarios\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.665] GetLastError () returned 0x3 [0122.665] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0122.665] CloseHandle (hObject=0xffffffff) returned 1 [0122.665] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4d8e7d9f, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4d8e7d9f, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="DownloadedSettings", cAlternateFileName="DOWNLO~2")) returned 1 [0122.665] SetLastError (dwErrCode=0x0) [0122.665] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f4 [0122.666] GetLastError () returned 0xb7 [0122.666] CloseHandle (hObject=0x7f4) returned 1 [0122.666] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\DownloadedSettings\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x98523694, ftCreationTime.dwLowDateTime=0x2f39620, ftCreationTime.dwHighDateTime=0x730000, ftLastAccessTime.dwLowDateTime=0x4, ftLastAccessTime.dwHighDateTime=0x740061, ftLastWriteTime.dwLowDateTime=0x6f0069, ftLastWriteTime.dwHighDateTime=0x20006e, nFileSizeHigh=0x610044, nFileSizeLow=0x610074, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="liT", cAlternateFileName="")) returned 0xffffffff [0122.666] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0122.666] SetLastError (dwErrCode=0x0) [0122.666] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\DownloadedSettings\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\downloadedsettings\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.666] GetLastError () returned 0x3 [0122.666] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0122.666] CloseHandle (hObject=0xffffffff) returned 1 [0122.666] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8e23c06e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x8e23c06e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="ETLLogs", cAlternateFileName="")) returned 1 [0122.666] SetLastError (dwErrCode=0x0) [0122.666] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f4 [0122.666] GetLastError () returned 0xb7 [0122.666] CloseHandle (hObject=0x7f4) returned 1 [0122.666] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\ETLLogs\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8e23c06e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x8e23c06e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24900 [0122.668] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8e23c06e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x8e23c06e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0122.668] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d5cadbc, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2d5cadbc, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="AutoLogger", cAlternateFileName="AUTOLO~1")) returned 1 [0122.668] SetLastError (dwErrCode=0x0) [0122.668] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\ETLLogs\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\etllogs\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.668] GetLastError () returned 0x3 [0122.668] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0122.669] CloseHandle (hObject=0xffffffff) returned 1 [0122.669] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0122.669] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0122.669] SetLastError (dwErrCode=0x0) [0122.669] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\etllogs\\autologger\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.669] GetLastError () returned 0x3 [0122.669] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0122.669] CloseHandle (hObject=0xffffffff) returned 1 [0122.669] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69f80c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="ScenarioShutdownLogger", cAlternateFileName="SCENAR~1")) returned 1 [0122.669] SetLastError (dwErrCode=0x0) [0122.669] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\ETLLogs\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\etllogs\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.669] GetLastError () returned 0x3 [0122.669] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0122.669] CloseHandle (hObject=0xffffffff) returned 1 [0122.669] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0122.669] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0122.669] SetLastError (dwErrCode=0x0) [0122.669] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\etllogs\\scenarioshutdownlogger\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.669] GetLastError () returned 0x3 [0122.669] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0122.669] CloseHandle (hObject=0xffffffff) returned 1 [0122.669] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d6afbff, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2d6afbff, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="ShutdownLogger", cAlternateFileName="SHUTDO~1")) returned 1 [0122.669] SetLastError (dwErrCode=0x0) [0122.669] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\ETLLogs\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\etllogs\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.669] GetLastError () returned 0x3 [0122.669] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0122.669] CloseHandle (hObject=0xffffffff) returned 1 [0122.669] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0122.669] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0122.670] SetLastError (dwErrCode=0x0) [0122.670] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\etllogs\\shutdownlogger\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.670] GetLastError () returned 0x3 [0122.670] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0122.670] CloseHandle (hObject=0xffffffff) returned 1 [0122.670] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d6afbff, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2d6afbff, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="ShutdownLogger", cAlternateFileName="SHUTDO~1")) returned 0 [0122.670] FindClose (in: hFindFile=0x2f24900 | out: hFindFile=0x2f24900) returned 1 [0122.670] SetLastError (dwErrCode=0x0) [0122.670] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\ETLLogs\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\etllogs\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.671] GetLastError () returned 0x3 [0122.671] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0122.671] CloseHandle (hObject=0xffffffff) returned 1 [0122.671] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b60b8d0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b60b8d0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x666666, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Events_CostDeferred.rbs", cAlternateFileName="EVENTS~3.RBS")) returned 1 [0122.671] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0122.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3502dc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7f4 [0122.672] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.672] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b5e567a, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b5e567a, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x1000000, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Events_Normal.rbs", cAlternateFileName="EVENTS~1.RBS")) returned 1 [0122.672] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0122.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350312f4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ec [0122.673] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.673] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b60b8d0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b60b8d0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x666666, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Events_NormalCritical.rbs", cAlternateFileName="EVENTS~2.RBS")) returned 1 [0122.673] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0122.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350349c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b0 [0122.674] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.023] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b60b8d0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b60b8d0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x333333, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Events_Realtime.rbs", cAlternateFileName="EVENTS~4.RBS")) returned 1 [0123.023] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350237c4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7f8 [0123.024] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.025] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a029c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="LocalTraceStore", cAlternateFileName="LOCALT~1")) returned 1 [0123.025] SetLastError (dwErrCode=0x0) [0123.025] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x80c [0123.025] GetLastError () returned 0xb7 [0123.025] CloseHandle (hObject=0x80c) returned 1 [0123.025] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\LocalTraceStore\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x98523694, ftCreationTime.dwLowDateTime=0x2f39620, ftCreationTime.dwHighDateTime=0x730000, ftLastAccessTime.dwLowDateTime=0x4, ftLastAccessTime.dwHighDateTime=0x740061, ftLastWriteTime.dwLowDateTime=0x6f0069, ftLastWriteTime.dwHighDateTime=0x20006e, nFileSizeHigh=0x610044, nFileSizeLow=0x610074, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="liT", cAlternateFileName="")) returned 0xffffffff [0123.025] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0123.025] SetLastError (dwErrCode=0x0) [0123.025] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\LocalTraceStore\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\localtracestore\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.026] GetLastError () returned 0x3 [0123.026] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0123.026] CloseHandle (hObject=0xffffffff) returned 1 [0123.026] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a3dd985, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8a3dd985, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x28facbb4, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="osver.txt", cAlternateFileName="")) returned 1 [0123.026] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35026e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x80c [0123.027] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.027] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfbb1de, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8bfbb1de, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8bfbb1de, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="parse.dat", cAlternateFileName="")) returned 1 [0123.027] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3502dc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x810 [0123.028] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.029] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Sideload", cAlternateFileName="")) returned 1 [0123.029] SetLastError (dwErrCode=0x0) [0123.029] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x814 [0123.029] GetLastError () returned 0xb7 [0123.029] CloseHandle (hObject=0x814) returned 1 [0123.029] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\Sideload\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24900 [0123.030] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0123.030] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 0 [0123.030] FindClose (in: hFindFile=0x2f24900 | out: hFindFile=0x2f24900) returned 1 [0123.030] SetLastError (dwErrCode=0x0) [0123.030] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\Sideload\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\sideload\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.030] GetLastError () returned 0x3 [0123.030] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0123.030] CloseHandle (hObject=0xffffffff) returned 1 [0123.030] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Siufloc", cAlternateFileName="")) returned 1 [0123.030] SetLastError (dwErrCode=0x0) [0123.030] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x814 [0123.031] GetLastError () returned 0xb7 [0123.031] CloseHandle (hObject=0x814) returned 1 [0123.031] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\Siufloc\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24cc0 [0123.031] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0123.031] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 0 [0123.031] FindClose (in: hFindFile=0x2f24cc0 | out: hFindFile=0x2f24cc0) returned 1 [0123.031] SetLastError (dwErrCode=0x0) [0123.031] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\Siufloc\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\siufloc\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.031] GetLastError () returned 0x3 [0123.031] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0123.031] CloseHandle (hObject=0xffffffff) returned 1 [0123.032] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ddac897, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="SoftLanding", cAlternateFileName="SOFTLA~1")) returned 1 [0123.032] SetLastError (dwErrCode=0x0) [0123.032] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x814 [0123.032] GetLastError () returned 0xb7 [0123.032] CloseHandle (hObject=0x814) returned 1 [0123.032] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ddac897, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24880 [0123.033] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ddac897, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0123.034] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bfa790, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4de62c84, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x840fae4f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x41c2, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml", cAlternateFileName="03D1E1~1.XML")) returned 1 [0123.034] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350312f4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x818 [0123.035] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.036] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c20a14, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4defb5dd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x840fae4f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x441b, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml", cAlternateFileName="03D1E1~2.XML")) returned 1 [0123.036] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350349c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x81c [0123.037] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.037] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7750111, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4df6de00, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8128f6c, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4180, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml", cAlternateFileName="394B7B~1.XML")) returned 1 [0123.037] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503808c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x820 [0123.038] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.038] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7750111, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e006640, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb5c02e23, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4187, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml", cAlternateFileName="394B7B~2.XML")) returned 1 [0123.038] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503b758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x824 [0123.039] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.040] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c46c2e, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e09efaa, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x8625bd94, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml", cAlternateFileName="75EF5B~1.XML")) returned 1 [0123.040] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503ee24, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x828 [0123.040] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.041] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c46c2e, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e0c51fa, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x86556ca1, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4473, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml", cAlternateFileName="75EF5B~2.XML")) returned 1 [0123.041] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350424f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x82c [0123.042] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.042] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7776347, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e15dbbf, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbbc2bb3b, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418e, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml", cAlternateFileName="9984EC~1.XML")) returned 1 [0123.042] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35045bbc, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x830 [0123.043] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.043] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7776347, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e1f64ee, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbbb6d045, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418c, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml", cAlternateFileName="9984EC~2.XML")) returned 1 [0123.044] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35049288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x834 [0123.044] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.045] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e24298b, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb9eacc8c, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x433c, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml", cAlternateFileName="ACAE42~1.XML")) returned 1 [0123.045] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3504c954, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x838 [0123.048] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.048] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e28ee3c, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xba09c6cc, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x443f, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml", cAlternateFileName="ACAE42~2.XML")) returned 1 [0123.048] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35050020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x83c [0123.049] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.050] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e2b5071, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8d3a091, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x442d, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="c0802597-6174-487a-b7de-20e8b1aa384e_show.xml", cAlternateFileName="C08025~1.XML")) returned 1 [0123.050] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350536ec, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x840 [0123.051] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.051] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c27a6, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e2db2dd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8c553ea, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4187, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml", cAlternateFileName="C08025~2.XML")) returned 1 [0123.051] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35056db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x844 [0123.052] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.053] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c27a6, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e301522, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbb0b32d3, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418b, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml", cAlternateFileName="E80C85~1.XML")) returned 1 [0123.053] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3505a484, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x848 [0123.054] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.054] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77e89d5, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e34d9d0, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbaf35d10, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4172, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml", cAlternateFileName="E80C85~2.XML")) returned 1 [0123.054] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3505db50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x84c [0123.055] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.056] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c930e8, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e399e7e, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x8507a310, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c3a, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="e9d21752-8fc9-4793-b42e-33105b078a51_show.xml", cAlternateFileName="E9D217~1.XML")) returned 1 [0123.056] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3506121c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x850 [0123.057] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.057] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c930e8, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e458a8d, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x85007c03, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x424c, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml", cAlternateFileName="E9D217~2.XML")) returned 1 [0123.057] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350648e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x854 [0123.058] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.058] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4a4f18, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb806a476, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x43ad, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="fffd8b5d-0172-4719-a792-b7c76986459d_show.xml", cAlternateFileName="FFFD8B~1.XML")) returned 1 [0123.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35067fb4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x858 [0123.059] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.060] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb819b5fa, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4443, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml", cAlternateFileName="FFFD8B~2.XML")) returned 1 [0123.060] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3506b680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x85c [0123.061] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.061] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb819b5fa, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4443, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml", cAlternateFileName="FFFD8B~2.XML")) returned 0 [0123.061] FindClose (in: hFindFile=0x2f24880 | out: hFindFile=0x2f24880) returned 1 [0123.062] SetLastError (dwErrCode=0x0) [0123.062] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.062] GetLastError () returned 0x3 [0123.062] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0123.062] CloseHandle (hObject=0xffffffff) returned 1 [0123.062] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="SoftLandingStage", cAlternateFileName="SOFTLA~2")) returned 1 [0123.062] SetLastError (dwErrCode=0x0) [0123.062] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x814 [0123.062] GetLastError () returned 0xb7 [0123.062] CloseHandle (hObject=0x814) returned 1 [0123.063] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLandingStage\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x98523694, ftCreationTime.dwLowDateTime=0x2f39620, ftCreationTime.dwHighDateTime=0x730000, ftLastAccessTime.dwLowDateTime=0x4, ftLastAccessTime.dwHighDateTime=0x740061, ftLastWriteTime.dwLowDateTime=0x6f0069, ftLastWriteTime.dwHighDateTime=0x20006e, nFileSizeHigh=0x610044, nFileSizeLow=0x610074, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="liT", cAlternateFileName="")) returned 0xffffffff [0123.063] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0123.063] SetLastError (dwErrCode=0x0) [0123.063] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLandingStage\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlandingstage\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.063] GetLastError () returned 0x3 [0123.063] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0123.063] CloseHandle (hObject=0xffffffff) returned 1 [0123.063] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b11c43, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="TenantStorage", cAlternateFileName="TENANT~1")) returned 1 [0123.063] SetLastError (dwErrCode=0x0) [0123.063] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x814 [0123.063] GetLastError () returned 0xb7 [0123.063] CloseHandle (hObject=0x814) returned 1 [0123.063] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\TenantStorage\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x98523694, ftCreationTime.dwLowDateTime=0x2f39620, ftCreationTime.dwHighDateTime=0x730000, ftLastAccessTime.dwLowDateTime=0x4, ftLastAccessTime.dwHighDateTime=0x740061, ftLastWriteTime.dwLowDateTime=0x6f0069, ftLastWriteTime.dwHighDateTime=0x20006e, nFileSizeHigh=0x610044, nFileSizeLow=0x610074, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="liT", cAlternateFileName="")) returned 0xffffffff [0123.063] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0123.063] SetLastError (dwErrCode=0x0) [0123.063] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\TenantStorage\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\tenantstorage\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.063] GetLastError () returned 0x3 [0123.063] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0123.063] CloseHandle (hObject=0xffffffff) returned 1 [0123.063] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x774ff760, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="VortexSchemaRequests.dat", cAlternateFileName="VORTEX~1.DAT")) returned 1 [0123.064] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3506ed4c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x814 [0123.064] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.065] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x774ff760, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="VortexSchemaRequests.dat", cAlternateFileName="VORTEX~1.DAT")) returned 0 [0123.065] FindClose (in: hFindFile=0x2f24c00 | out: hFindFile=0x2f24c00) returned 1 [0123.776] SetLastError (dwErrCode=0x0) [0123.776] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0123.776] GetLastError () returned 0xb7 [0123.776] CloseHandle (hObject=0x5f0) returned 1 [0123.777] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71bd25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="DRM", cAlternateFileName="")) returned 1 [0123.777] SetLastError (dwErrCode=0x0) [0123.777] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0123.777] GetLastError () returned 0xb7 [0123.777] CloseHandle (hObject=0x5f0) returned 1 [0123.777] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\DRM\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71bd25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24880 [0123.777] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71bd25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0123.777] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Server", cAlternateFileName="")) returned 1 [0123.777] SetLastError (dwErrCode=0x0) [0123.777] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\DRM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\drm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x860 [0123.778] GetLastError () returned 0x0 [0123.778] WriteFile (in: hFile=0x860, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x196c10*=0x273, lpOverlapped=0x0) returned 1 [0123.779] CloseHandle (hObject=0x860) returned 1 [0123.779] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\DRM\\Server\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24d00 [0123.780] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0123.780] FindNextFileW (in: hFindFile=0x2f24d00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 0 [0123.780] FindClose (in: hFindFile=0x2f24d00 | out: hFindFile=0x2f24d00) returned 1 [0123.780] SetLastError (dwErrCode=0x0) [0123.780] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\DRM\\Server\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\drm\\server\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x860 [0123.780] GetLastError () returned 0x0 [0123.781] WriteFile (in: hFile=0x860, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x196c00*=0x273, lpOverlapped=0x0) returned 1 [0123.781] CloseHandle (hObject=0x860) returned 1 [0123.781] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Server", cAlternateFileName="")) returned 0 [0123.782] FindClose (in: hFindFile=0x2f24880 | out: hFindFile=0x2f24880) returned 1 [0123.782] SetLastError (dwErrCode=0x0) [0123.782] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\DRM\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\drm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0123.782] GetLastError () returned 0xb7 [0123.782] CloseHandle (hObject=0x5f0) returned 1 [0123.782] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x40368daa, ftLastAccessTime.dwHighDateTime=0x1d39f5f, ftLastWriteTime.dwLowDateTime=0x40368daa, ftLastWriteTime.dwHighDateTime=0x1d39f5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0123.782] SetLastError (dwErrCode=0x0) [0123.782] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0123.782] GetLastError () returned 0xb7 [0123.782] CloseHandle (hObject=0x5f0) returned 1 [0123.783] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Event Viewer\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x40368daa, ftLastAccessTime.dwHighDateTime=0x1d39f5f, ftLastWriteTime.dwLowDateTime=0xfbfe5ab1, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24880 [0123.787] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x40368daa, ftLastAccessTime.dwHighDateTime=0x1d39f5f, ftLastWriteTime.dwLowDateTime=0xfbfe5ab1, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0123.787] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Views", cAlternateFileName="")) returned 1 [0123.787] SetLastError (dwErrCode=0x0) [0123.787] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Event Viewer\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\event viewer\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.787] GetLastError () returned 0x3 [0123.787] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0123.787] CloseHandle (hObject=0xffffffff) returned 1 [0123.787] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Event Viewer\\Views\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24900 [0123.787] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.787] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1 [0123.788] SetLastError (dwErrCode=0x0) [0123.788] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Event Viewer\\Views\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\event viewer\\views\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.789] GetLastError () returned 0x3 [0123.789] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0123.789] CloseHandle (hObject=0xffffffff) returned 1 [0123.789] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0123.789] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0123.789] SetLastError (dwErrCode=0x0) [0123.789] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\event viewer\\views\\applicationviewsrootnode\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.789] GetLastError () returned 0x3 [0123.789] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0123.789] CloseHandle (hObject=0xffffffff) returned 1 [0123.790] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 0 [0123.790] FindClose (in: hFindFile=0x2f24900 | out: hFindFile=0x2f24900) returned 1 [0123.790] SetLastError (dwErrCode=0x0) [0123.790] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Event Viewer\\Views\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\event viewer\\views\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.790] GetLastError () returned 0x3 [0123.790] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0123.790] CloseHandle (hObject=0xffffffff) returned 1 [0123.790] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Views", cAlternateFileName="")) returned 0 [0123.790] FindClose (in: hFindFile=0x2f24880 | out: hFindFile=0x2f24880) returned 1 [0123.790] SetLastError (dwErrCode=0x0) [0123.790] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Event Viewer\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\event viewer\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.790] GetLastError () returned 0x3 [0123.790] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0) returned 0 [0123.790] CloseHandle (hObject=0xffffffff) returned 1 [0123.790] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7af95c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0123.790] SetLastError (dwErrCode=0x0) [0123.790] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0123.791] GetLastError () returned 0xb7 [0123.791] CloseHandle (hObject=0x5f0) returned 1 [0123.791] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\IdentityCRL\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7af95c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24a00 [0123.791] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7af95c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0123.791] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7b0839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="INT", cAlternateFileName="")) returned 1 [0123.792] SetLastError (dwErrCode=0x0) [0123.792] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\IdentityCRL\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\identitycrl\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.792] GetLastError () returned 0x3 [0123.792] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0123.792] CloseHandle (hObject=0xffffffff) returned 1 [0123.792] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\IdentityCRL\\INT\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7b0839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24a40 [0123.792] FindNextFileW (in: hFindFile=0x2f24a40, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7b0839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.792] FindNextFileW (in: hFindFile=0x2f24a40, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0123.792] FindNextFileW (in: hFindFile=0x2f24a40, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 0 [0123.792] FindClose (in: hFindFile=0x2f24a40 | out: hFindFile=0x2f24a40) returned 1 [0123.792] SetLastError (dwErrCode=0x0) [0123.792] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\IdentityCRL\\INT\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\identitycrl\\int\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.792] GetLastError () returned 0x3 [0123.792] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0123.792] CloseHandle (hObject=0xffffffff) returned 1 [0123.792] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="production", cAlternateFileName="PRODUC~1")) returned 1 [0123.793] SetLastError (dwErrCode=0x0) [0123.793] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\IdentityCRL\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\identitycrl\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.793] GetLastError () returned 0x3 [0123.793] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0123.793] CloseHandle (hObject=0xffffffff) returned 1 [0123.793] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\IdentityCRL\\production\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24880 [0123.793] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.793] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97ce8d28, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x60e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0123.793] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="temp", cAlternateFileName="")) returned 1 [0123.793] SetLastError (dwErrCode=0x0) [0123.793] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\IdentityCRL\\production\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\identitycrl\\production\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.793] GetLastError () returned 0x3 [0123.793] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0123.793] CloseHandle (hObject=0xffffffff) returned 1 [0123.793] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\IdentityCRL\\production\\temp\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0123.794] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0123.794] SetLastError (dwErrCode=0x0) [0123.794] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\IdentityCRL\\production\\temp\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\identitycrl\\production\\temp\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.794] GetLastError () returned 0x3 [0123.794] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0123.794] CloseHandle (hObject=0xffffffff) returned 1 [0123.794] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="temp", cAlternateFileName="")) returned 0 [0123.794] FindClose (in: hFindFile=0x2f24880 | out: hFindFile=0x2f24880) returned 1 [0123.794] SetLastError (dwErrCode=0x0) [0123.794] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\IdentityCRL\\production\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\identitycrl\\production\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.794] GetLastError () returned 0x3 [0123.794] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0123.794] CloseHandle (hObject=0xffffffff) returned 1 [0123.794] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="production", cAlternateFileName="PRODUC~1")) returned 0 [0123.794] FindClose (in: hFindFile=0x2f24a00 | out: hFindFile=0x2f24a00) returned 1 [0123.794] SetLastError (dwErrCode=0x0) [0123.795] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\IdentityCRL\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\identitycrl\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.795] GetLastError () returned 0x3 [0123.795] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0) returned 0 [0123.795] CloseHandle (hObject=0xffffffff) returned 1 [0123.795] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="MapData", cAlternateFileName="")) returned 1 [0123.795] SetLastError (dwErrCode=0x0) [0123.795] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0123.795] GetLastError () returned 0xb7 [0123.795] CloseHandle (hObject=0x5f0) returned 1 [0123.795] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\MapData\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24c00 [0123.796] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0123.796] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 0 [0123.796] FindClose (in: hFindFile=0x2f24c00 | out: hFindFile=0x2f24c00) returned 1 [0123.796] SetLastError (dwErrCode=0x0) [0123.796] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\MapData\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\mapdata\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0123.798] GetLastError () returned 0x0 [0123.798] WriteFile (in: hFile=0x5f0, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x1972cc*=0x273, lpOverlapped=0x0) returned 1 [0123.799] CloseHandle (hObject=0x5f0) returned 1 [0123.799] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80d7aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="MF", cAlternateFileName="")) returned 1 [0123.799] SetLastError (dwErrCode=0x0) [0123.799] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0123.800] GetLastError () returned 0xb7 [0123.800] CloseHandle (hObject=0x5f0) returned 1 [0123.800] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\MF\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80d7aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24880 [0123.800] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80d7aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0123.800] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0123.800] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350237c4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x860 [0123.802] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.803] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0123.803] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35026e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x864 [0123.804] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.805] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Pending.GRL", cAlternateFileName="")) returned 0 [0123.805] FindClose (in: hFindFile=0x2f24880 | out: hFindFile=0x2f24880) returned 1 [0123.805] SetLastError (dwErrCode=0x0) [0123.805] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\MF\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\mf\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0123.807] GetLastError () returned 0x0 [0123.807] WriteFile (in: hFile=0x5f0, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x1972cc*=0x273, lpOverlapped=0x0) returned 1 [0123.808] CloseHandle (hObject=0x5f0) returned 1 [0123.808] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80e29d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0123.808] SetLastError (dwErrCode=0x0) [0123.808] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0123.808] GetLastError () returned 0xb7 [0123.808] CloseHandle (hObject=0x5f0) returned 1 [0123.809] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\NetFramework\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80e29d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24880 [0123.809] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80e29d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0123.809] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0123.809] SetLastError (dwErrCode=0x0) [0123.809] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\NetFramework\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\netframework\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.809] GetLastError () returned 0x3 [0123.809] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0123.809] CloseHandle (hObject=0xffffffff) returned 1 [0123.809] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\NetFramework\\BreadcrumbStore\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0123.809] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0123.809] SetLastError (dwErrCode=0x0) [0123.809] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\NetFramework\\BreadcrumbStore\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\netframework\\breadcrumbstore\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.809] GetLastError () returned 0x3 [0123.809] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0123.809] CloseHandle (hObject=0xffffffff) returned 1 [0123.809] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 0 [0123.810] FindClose (in: hFindFile=0x2f24880 | out: hFindFile=0x2f24880) returned 1 [0123.810] SetLastError (dwErrCode=0x0) [0123.810] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\NetFramework\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\netframework\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.810] GetLastError () returned 0x3 [0123.810] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0) returned 0 [0123.810] CloseHandle (hObject=0xffffffff) returned 1 [0123.810] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80ffe4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Network", cAlternateFileName="")) returned 1 [0123.810] SetLastError (dwErrCode=0x0) [0123.810] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0123.810] GetLastError () returned 0xb7 [0123.810] CloseHandle (hObject=0x5f0) returned 1 [0123.810] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80ffe4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24880 [0123.811] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80ffe4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0123.811] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0123.811] SetLastError (dwErrCode=0x0) [0123.811] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x868 [0123.812] GetLastError () returned 0x0 [0123.812] WriteFile (in: hFile=0x868, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x196c10*=0x273, lpOverlapped=0x0) returned 1 [0123.813] CloseHandle (hObject=0x868) returned 1 [0123.813] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Connections\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24900 [0123.813] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0123.813] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Cm", cAlternateFileName="")) returned 1 [0123.813] SetLastError (dwErrCode=0x0) [0123.813] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Connections\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\connections\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.814] GetLastError () returned 0x3 [0123.814] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0123.814] CloseHandle (hObject=0xffffffff) returned 1 [0123.814] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Connections\\Cm\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24c00 [0123.814] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.814] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0123.815] FindClose (in: hFindFile=0x2f24c00 | out: hFindFile=0x2f24c00) returned 1 [0123.815] SetLastError (dwErrCode=0x0) [0123.815] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Connections\\Cm\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\connections\\cm\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.815] GetLastError () returned 0x3 [0123.815] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0123.815] CloseHandle (hObject=0xffffffff) returned 1 [0123.815] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="CM_old", cAlternateFileName="")) returned 1 [0123.815] SetLastError (dwErrCode=0x0) [0123.815] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Connections\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\connections\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.815] GetLastError () returned 0x3 [0123.815] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0123.815] CloseHandle (hObject=0xffffffff) returned 1 [0123.815] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Connections\\CM_old\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0123.815] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0123.816] SetLastError (dwErrCode=0x0) [0123.816] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Connections\\CM_old\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\connections\\cm_old\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.816] GetLastError () returned 0x3 [0123.816] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0123.816] CloseHandle (hObject=0xffffffff) returned 1 [0123.816] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="CM_old", cAlternateFileName="")) returned 0 [0123.816] FindClose (in: hFindFile=0x2f24900 | out: hFindFile=0x2f24900) returned 1 [0123.816] SetLastError (dwErrCode=0x0) [0123.816] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Connections\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\connections\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.816] GetLastError () returned 0x3 [0123.816] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0123.816] CloseHandle (hObject=0xffffffff) returned 1 [0123.816] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc6206d3e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc6206d3e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0123.816] SetLastError (dwErrCode=0x0) [0123.816] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x868 [0123.816] GetLastError () returned 0xb7 [0123.816] CloseHandle (hObject=0x868) returned 1 [0123.817] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc6206d3e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc6206d3e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24a00 [0123.820] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc6206d3e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc6206d3e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0123.820] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd0839539, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="edb.chk", cAlternateFileName="")) returned 1 [0123.820] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3502dc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x86c [0123.821] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.821] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e26fff, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e26fff, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb200d257, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="edb.log", cAlternateFileName="")) returned 1 [0123.821] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350312f4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x870 [0123.822] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.823] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e4d293, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e4d293, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc5e734dc, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0123.823] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350349c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x874 [0123.823] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.824] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc5e734dc, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0123.824] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503808c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x878 [0123.825] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.825] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e26fff, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e4d293, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc63d09b3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="edbtmp.log", cAlternateFileName="")) returned 1 [0123.825] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503b758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x87c [0123.826] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.827] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5e99732, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e99732, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb2059763, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="qmgr.db", cAlternateFileName="")) returned 1 [0123.827] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x3503ee24, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x880 [0123.827] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.828] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb200d257, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="qmgr.jfm", cAlternateFileName="")) returned 1 [0123.828] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0123.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350424f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x884 [0123.829] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.829] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb200d257, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="qmgr.jfm", cAlternateFileName="")) returned 0 [0123.829] FindClose (in: hFindFile=0x2f24a00 | out: hFindFile=0x2f24a00) returned 1 [0123.830] SetLastError (dwErrCode=0x0) [0123.830] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\downloader\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.830] GetLastError () returned 0x3 [0123.830] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0123.830] CloseHandle (hObject=0xffffffff) returned 1 [0123.830] FindNextFileW (in: hFindFile=0x2f24880, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc6206d3e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc6206d3e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 0 [0123.830] FindClose (in: hFindFile=0x2f24880 | out: hFindFile=0x2f24880) returned 1 [0123.830] SetLastError (dwErrCode=0x0) [0123.830] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0123.831] GetLastError () returned 0xb7 [0123.831] CloseHandle (hObject=0x5f0) returned 1 [0123.831] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Office", cAlternateFileName="")) returned 1 [0123.831] SetLastError (dwErrCode=0x0) [0123.831] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0123.831] GetLastError () returned 0xb7 [0123.831] CloseHandle (hObject=0x5f0) returned 1 [0123.831] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Office\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24a00 [0124.411] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0124.411] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="ClickToRunPackageLocker", cAlternateFileName="CLICKT~1")) returned 1 [0124.411] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0124.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x350237c4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f0 [0124.452] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.453] FindNextFileW (in: hFindFile=0x2f24a00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="ClickToRunPackageLocker", cAlternateFileName="CLICKT~1")) returned 0 [0124.453] FindClose (in: hFindFile=0x2f24a00 | out: hFindFile=0x2f24a00) returned 1 [0124.453] SetLastError (dwErrCode=0x0) [0124.453] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Office\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\office\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x888 [0124.454] GetLastError () returned 0x0 [0124.454] WriteFile (in: hFile=0x888, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x1972cc*=0x273, lpOverlapped=0x0) returned 1 [0124.454] CloseHandle (hObject=0x888) returned 1 [0124.455] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfee8021d, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfee8021d, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Provisioning", cAlternateFileName="PROVIS~1")) returned 1 [0124.455] SetLastError (dwErrCode=0x0) [0124.455] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x888 [0124.455] GetLastError () returned 0xb7 [0124.455] CloseHandle (hObject=0x888) returned 1 [0124.455] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfee8021d, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfee8021d, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24cc0 [0124.457] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfee8021d, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfee8021d, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0124.457] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60aed0fe, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x60aed0fe, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x60aed0fe, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70bb, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="countrytable.xml", cAlternateFileName="")) returned 1 [0124.457] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x4220000 [0124.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x35001a60, lpParameter=0x35026e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x88c [0124.458] VirtualFree (lpAddress=0x4220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.459] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}", cAlternateFileName="{18DCF~1")) returned 1 [0124.459] SetLastError (dwErrCode=0x0) [0124.459] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.459] GetLastError () returned 0x3 [0124.459] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0124.459] CloseHandle (hObject=0xffffffff) returned 1 [0124.459] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.459] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0124.459] SetLastError (dwErrCode=0x0) [0124.459] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.459] GetLastError () returned 0x3 [0124.459] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0124.459] CloseHandle (hObject=0xffffffff) returned 1 [0124.459] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{1e05dd5d-a022-46c5-963c-b20de341170f}", cAlternateFileName="{1E05D~1")) returned 1 [0124.459] SetLastError (dwErrCode=0x0) [0124.459] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.459] GetLastError () returned 0x3 [0124.459] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0124.459] CloseHandle (hObject=0xffffffff) returned 1 [0124.460] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.460] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0124.460] SetLastError (dwErrCode=0x0) [0124.460] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.460] GetLastError () returned 0x3 [0124.460] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0124.460] CloseHandle (hObject=0xffffffff) returned 1 [0124.460] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{23cb517f-5073-4e96-a202-7fe6122a2271}", cAlternateFileName="{23CB5~1")) returned 1 [0124.460] SetLastError (dwErrCode=0x0) [0124.460] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.460] GetLastError () returned 0x3 [0124.460] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0124.460] CloseHandle (hObject=0xffffffff) returned 1 [0124.460] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.460] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0124.460] SetLastError (dwErrCode=0x0) [0124.460] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.460] GetLastError () returned 0x3 [0124.460] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0124.460] CloseHandle (hObject=0xffffffff) returned 1 [0124.460] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}", cAlternateFileName="{268C4~1")) returned 1 [0124.460] SetLastError (dwErrCode=0x0) [0124.460] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.460] GetLastError () returned 0x3 [0124.460] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0124.460] CloseHandle (hObject=0xffffffff) returned 1 [0124.460] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.460] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0124.461] SetLastError (dwErrCode=0x0) [0124.461] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.461] GetLastError () returned 0x3 [0124.461] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0124.461] CloseHandle (hObject=0xffffffff) returned 1 [0124.461] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{33d78dbc-3db7-4398-8533-000d7c02e5d1}", cAlternateFileName="{33D78~1")) returned 1 [0124.461] SetLastError (dwErrCode=0x0) [0124.461] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.461] GetLastError () returned 0x3 [0124.461] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0124.461] CloseHandle (hObject=0xffffffff) returned 1 [0124.461] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.461] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0124.461] SetLastError (dwErrCode=0x0) [0124.461] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.461] GetLastError () returned 0x3 [0124.461] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0124.461] CloseHandle (hObject=0xffffffff) returned 1 [0124.461] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}", cAlternateFileName="{3742E~1")) returned 1 [0124.461] SetLastError (dwErrCode=0x0) [0124.461] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.461] GetLastError () returned 0x3 [0124.461] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0124.461] CloseHandle (hObject=0xffffffff) returned 1 [0124.461] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.461] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0124.461] SetLastError (dwErrCode=0x0) [0124.461] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.462] GetLastError () returned 0x3 [0124.462] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0124.462] CloseHandle (hObject=0xffffffff) returned 1 [0124.462] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{7a30a9be-737f-47a1-a541-6e7b0761ed19}", cAlternateFileName="{7A30A~1")) returned 1 [0124.462] SetLastError (dwErrCode=0x0) [0124.462] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.462] GetLastError () returned 0x3 [0124.462] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0124.462] CloseHandle (hObject=0xffffffff) returned 1 [0124.462] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.462] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0124.462] SetLastError (dwErrCode=0x0) [0124.462] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.462] GetLastError () returned 0x3 [0124.462] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0124.462] CloseHandle (hObject=0xffffffff) returned 1 [0124.462] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{8d196d7f-3eef-48ad-8bea-be749f12d3ad}", cAlternateFileName="{8D196~1")) returned 1 [0124.462] SetLastError (dwErrCode=0x0) [0124.462] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.462] GetLastError () returned 0x3 [0124.462] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0124.462] CloseHandle (hObject=0xffffffff) returned 1 [0124.462] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.462] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0124.462] SetLastError (dwErrCode=0x0) [0124.462] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.462] GetLastError () returned 0x3 [0124.462] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0124.462] CloseHandle (hObject=0xffffffff) returned 1 [0124.463] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{8fb7d64e-70fc-4f9d-89ee-d486817534df}", cAlternateFileName="{8FB7D~1")) returned 1 [0124.463] SetLastError (dwErrCode=0x0) [0124.463] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.463] GetLastError () returned 0x3 [0124.463] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0124.463] CloseHandle (hObject=0xffffffff) returned 1 [0124.463] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.463] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0124.463] SetLastError (dwErrCode=0x0) [0124.463] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.463] GetLastError () returned 0x3 [0124.463] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0124.463] CloseHandle (hObject=0xffffffff) returned 1 [0124.463] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{99b095d8-5959-4820-bea7-7448c8427b4e}", cAlternateFileName="{99B09~1")) returned 1 [0124.463] SetLastError (dwErrCode=0x0) [0124.463] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.463] GetLastError () returned 0x3 [0124.463] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0124.463] CloseHandle (hObject=0xffffffff) returned 1 [0124.463] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.463] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0124.463] SetLastError (dwErrCode=0x0) [0124.463] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.463] GetLastError () returned 0x3 [0124.463] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0124.463] CloseHandle (hObject=0xffffffff) returned 1 [0124.463] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{9aec5bda-1e87-46b3-bb96-1a01c606555e}", cAlternateFileName="{9AEC5~1")) returned 1 [0124.463] SetLastError (dwErrCode=0x0) [0124.463] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.464] GetLastError () returned 0x3 [0124.464] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0124.464] CloseHandle (hObject=0xffffffff) returned 1 [0124.464] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.464] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0124.464] SetLastError (dwErrCode=0x0) [0124.464] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.464] GetLastError () returned 0x3 [0124.464] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0124.464] CloseHandle (hObject=0xffffffff) returned 1 [0124.464] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}", cAlternateFileName="{9DF6A~1")) returned 1 [0124.464] SetLastError (dwErrCode=0x0) [0124.464] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.464] GetLastError () returned 0x3 [0124.464] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0124.464] CloseHandle (hObject=0xffffffff) returned 1 [0124.464] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.464] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0124.464] SetLastError (dwErrCode=0x0) [0124.464] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.464] GetLastError () returned 0x3 [0124.464] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0124.464] CloseHandle (hObject=0xffffffff) returned 1 [0124.464] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}", cAlternateFileName="{B0B91~1")) returned 1 [0124.464] SetLastError (dwErrCode=0x0) [0124.464] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.464] GetLastError () returned 0x3 [0124.464] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0124.464] CloseHandle (hObject=0xffffffff) returned 1 [0124.465] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.465] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0124.465] SetLastError (dwErrCode=0x0) [0124.465] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.465] GetLastError () returned 0x3 [0124.465] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0124.465] CloseHandle (hObject=0xffffffff) returned 1 [0124.465] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{c5dc3753-b6c8-4057-b396-bf13d769311c}", cAlternateFileName="{C5DC3~1")) returned 1 [0124.465] SetLastError (dwErrCode=0x0) [0124.465] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.465] GetLastError () returned 0x3 [0124.465] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0124.465] CloseHandle (hObject=0xffffffff) returned 1 [0124.465] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.465] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0124.465] SetLastError (dwErrCode=0x0) [0124.465] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.465] GetLastError () returned 0x3 [0124.465] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0124.465] CloseHandle (hObject=0xffffffff) returned 1 [0124.465] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b2205b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{c8a326e4-f518-4f14-b543-97a57e1a975e}", cAlternateFileName="{C8A32~1")) returned 1 [0124.465] SetLastError (dwErrCode=0x0) [0124.465] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.465] GetLastError () returned 0x3 [0124.465] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0124.465] CloseHandle (hObject=0xffffffff) returned 1 [0124.465] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.466] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0124.466] SetLastError (dwErrCode=0x0) [0124.466] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.466] GetLastError () returned 0x3 [0124.466] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0124.466] CloseHandle (hObject=0xffffffff) returned 1 [0124.466] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{ee4aac98-c174-4941-82b1-d121e493e4fb}", cAlternateFileName="{EE4AA~1")) returned 1 [0124.466] SetLastError (dwErrCode=0x0) [0124.466] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.466] GetLastError () returned 0x3 [0124.466] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0124.466] CloseHandle (hObject=0xffffffff) returned 1 [0124.466] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.466] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0124.466] SetLastError (dwErrCode=0x0) [0124.466] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.466] GetLastError () returned 0x3 [0124.466] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0124.466] CloseHandle (hObject=0xffffffff) returned 1 [0124.466] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{f11899f2-71ec-4621-9997-e17ae2f6eb26}", cAlternateFileName="{F1189~1")) returned 1 [0124.466] SetLastError (dwErrCode=0x0) [0124.466] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.466] GetLastError () returned 0x3 [0124.466] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0124.466] CloseHandle (hObject=0xffffffff) returned 1 [0124.466] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.466] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0124.466] SetLastError (dwErrCode=0x0) [0124.467] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.467] GetLastError () returned 0x3 [0124.467] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0124.467] CloseHandle (hObject=0xffffffff) returned 1 [0124.467] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", cAlternateFileName="{FC01E~1")) returned 1 [0124.467] SetLastError (dwErrCode=0x0) [0124.467] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.467] GetLastError () returned 0x3 [0124.467] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0124.467] CloseHandle (hObject=0xffffffff) returned 1 [0124.467] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.467] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0124.467] SetLastError (dwErrCode=0x0) [0124.467] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.467] GetLastError () returned 0x3 [0124.467] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0124.467] CloseHandle (hObject=0xffffffff) returned 1 [0124.467] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", cAlternateFileName="{FC01E~1")) returned 0 [0124.467] FindClose (in: hFindFile=0x2f24cc0 | out: hFindFile=0x2f24cc0) returned 1 [0124.468] SetLastError (dwErrCode=0x0) [0124.468] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Provisioning\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\provisioning\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.468] GetLastError () returned 0x3 [0124.468] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x1972cc, lpOverlapped=0x0) returned 0 [0124.468] CloseHandle (hObject=0xffffffff) returned 1 [0124.468] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb79dd84e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb7a500e7, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb7a500e7, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Search", cAlternateFileName="")) returned 1 [0124.468] SetLastError (dwErrCode=0x0) [0124.468] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x888 [0124.468] GetLastError () returned 0xb7 [0124.468] CloseHandle (hObject=0x888) returned 1 [0124.469] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Search\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb79dd84e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb7a500e7, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb7a500e7, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24a40 [0124.469] FindNextFileW (in: hFindFile=0x2f24a40, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb79dd84e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb7a500e7, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb7a500e7, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0124.469] FindNextFileW (in: hFindFile=0x2f24a40, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f068b0c, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x768c9439, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x768c9439, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Data", cAlternateFileName="")) returned 1 [0124.469] SetLastError (dwErrCode=0x0) [0124.469] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Search\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\search\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x890 [0124.470] GetLastError () returned 0x0 [0124.470] WriteFile (in: hFile=0x890, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x196c10*=0x273, lpOverlapped=0x0) returned 1 [0124.471] CloseHandle (hObject=0x890) returned 1 [0124.471] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Search\\Data\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f068b0c, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x768c9439, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x768c9439, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24cc0 [0124.473] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f068b0c, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x768c9439, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x768c9439, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0124.473] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x768c9439, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x769ae22f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x769ae22f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Applications", cAlternateFileName="APPLIC~1")) returned 1 [0124.473] SetLastError (dwErrCode=0x0) [0124.473] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Search\\Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\search\\data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.473] GetLastError () returned 0x3 [0124.473] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0124.473] CloseHandle (hObject=0xffffffff) returned 1 [0124.473] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Search\\Data\\Applications\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.473] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0124.473] SetLastError (dwErrCode=0x0) [0124.473] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Search\\Data\\Applications\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\search\\data\\applications\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.473] GetLastError () returned 0x3 [0124.473] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0124.473] CloseHandle (hObject=0xffffffff) returned 1 [0124.474] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f173b05, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b7d74b9, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2b7d74b9, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Temp", cAlternateFileName="")) returned 1 [0124.474] SetLastError (dwErrCode=0x0) [0124.474] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Search\\Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\search\\data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.474] GetLastError () returned 0x3 [0124.474] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196544, lpOverlapped=0x0) returned 0 [0124.474] CloseHandle (hObject=0xffffffff) returned 1 [0124.474] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Search\\Data\\Temp\\*.*", lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f173b05, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b7d74b9, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0xb99ea4ee, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2f24900 [0124.477] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f173b05, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b7d74b9, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0xb99ea4ee, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.477] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x19627c | out: lpFindFileData=0x19627c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f173b05, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b7d74b9, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0xb99ea4ee, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0124.477] FindClose (in: hFindFile=0x2f24900 | out: hFindFile=0x2f24900) returned 1 [0124.477] SetLastError (dwErrCode=0x0) [0124.477] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Search\\Data\\Temp\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\search\\data\\temp\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.477] GetLastError () returned 0x3 [0124.477] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196534, lpOverlapped=0x0) returned 0 [0124.477] CloseHandle (hObject=0xffffffff) returned 1 [0124.478] FindNextFileW (in: hFindFile=0x2f24cc0, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f173b05, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b7d74b9, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2b7d74b9, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Temp", cAlternateFileName="")) returned 0 [0124.478] FindClose (in: hFindFile=0x2f24cc0 | out: hFindFile=0x2f24cc0) returned 1 [0124.478] SetLastError (dwErrCode=0x0) [0124.478] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Search\\Data\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\search\\data\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.478] GetLastError () returned 0x3 [0124.478] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0124.478] CloseHandle (hObject=0xffffffff) returned 1 [0124.478] FindNextFileW (in: hFindFile=0x2f24a40, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f068b0c, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x768c9439, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x768c9439, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Data", cAlternateFileName="")) returned 0 [0124.478] FindClose (in: hFindFile=0x2f24a40 | out: hFindFile=0x2f24a40) returned 1 [0124.478] SetLastError (dwErrCode=0x0) [0124.478] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Search\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\search\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x888 [0124.479] GetLastError () returned 0xb7 [0124.479] CloseHandle (hObject=0x888) returned 1 [0124.479] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30e3b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="Settings", cAlternateFileName="")) returned 1 [0124.479] SetLastError (dwErrCode=0x0) [0124.479] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x888 [0124.479] GetLastError () returned 0xb7 [0124.479] CloseHandle (hObject=0x888) returned 1 [0124.479] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Settings\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30e3b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24c00 [0124.480] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30e3b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0124.480] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Accounts", cAlternateFileName="")) returned 1 [0124.480] SetLastError (dwErrCode=0x0) [0124.480] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Settings\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\settings\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x890 [0124.481] GetLastError () returned 0x0 [0124.481] WriteFile (in: hFile=0x890, lpBuffer=0x35018ad0*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpBuffer=0x35018ad0*, lpNumberOfBytesWritten=0x196c10*=0x273, lpOverlapped=0x0) returned 1 [0124.482] CloseHandle (hObject=0x890) returned 1 [0124.482] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Settings\\Accounts\\*.*", lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName=".", cAlternateFileName="")) returned 0x2f24a80 [0124.482] FindNextFileW (in: hFindFile=0x2f24a80, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 1 [0124.482] FindNextFileW (in: hFindFile=0x2f24a80, lpFindFileData=0x196948 | out: lpFindFileData=0x196948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="..", cAlternateFileName="")) returned 0 [0124.482] FindClose (in: hFindFile=0x2f24a80 | out: hFindFile=0x2f24a80) returned 1 [0124.482] SetLastError (dwErrCode=0x0) [0124.482] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Settings\\Accounts\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\settings\\accounts\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.483] GetLastError () returned 0x3 [0124.483] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c00, lpOverlapped=0x0) returned 0 [0124.483] CloseHandle (hObject=0xffffffff) returned 1 [0124.483] FindNextFileW (in: hFindFile=0x2f24c00, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="Accounts", cAlternateFileName="")) returned 0 [0124.483] FindClose (in: hFindFile=0x2f24c00 | out: hFindFile=0x2f24c00) returned 1 [0124.483] SetLastError (dwErrCode=0x0) [0124.483] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Settings\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\settings\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x888 [0124.483] GetLastError () returned 0xb7 [0124.483] CloseHandle (hObject=0x888) returned 1 [0124.483] FindNextFileW (in: hFindFile=0x2f24800, lpFindFileData=0x1976e0 | out: lpFindFileData=0x1976e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dcfea0a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dcfea0a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41005c, dwReserved1=0x700070, cFileName="SmsRouter", cAlternateFileName="SMSROU~1")) returned 1 [0124.483] SetLastError (dwErrCode=0x0) [0124.483] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x888 [0124.484] GetLastError () returned 0xb7 [0124.484] CloseHandle (hObject=0x888) returned 1 [0124.484] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\SmsRouter\\*.*", lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dcfea0a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dcfea0a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName=".", cAlternateFileName="")) returned 0x2f24900 [0124.484] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dcfea0a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dcfea0a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="..", cAlternateFileName="")) returned 1 [0124.484] FindNextFileW (in: hFindFile=0x2f24900, lpFindFileData=0x197014 | out: lpFindFileData=0x197014*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dcfea0a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1b408c4a, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x1b408c4a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700070, dwReserved1=0x69006c, cFileName="MessageStore", cAlternateFileName="MESSAG~1")) returned 1 [0124.484] SetLastError (dwErrCode=0x0) [0124.484] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\SmsRouter\\RyukReadMe.html" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\smsrouter\\ryukreadme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.484] GetLastError () returned 0x5 [0124.484] WriteFile (in: hFile=0xffffffff, lpBuffer=0x35018ad0, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x196c10, lpOverlapped=0x0) returned 0 [0124.484] CloseHandle (hObject=0xffffffff) returned 1 [0124.485] FindFirstFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\SmsRouter\\MessageStore\\*.*", lpFindFileData=0x196948) Thread: id = 2 os_tid = 0x13bc Thread: id = 3 os_tid = 0x13c0 Thread: id = 4 os_tid = 0x204 Thread: id = 5 os_tid = 0x2e0 Thread: id = 6 os_tid = 0xf54 Thread: id = 7 os_tid = 0xdb0 Thread: id = 8 os_tid = 0xf2c Thread: id = 9 os_tid = 0xdb4 Thread: id = 27 os_tid = 0x133c [0102.540] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x38c [0102.558] Process32FirstW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0102.558] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0102.563] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0103.007] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0103.008] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0103.009] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0103.010] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x228, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0103.011] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e0, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0103.011] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e0, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0103.012] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0103.013] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x228, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0103.014] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0103.015] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0103.015] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x228, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0103.016] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5a, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0103.017] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0103.018] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0103.019] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0103.020] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0103.020] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x468, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0103.021] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0103.022] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0103.023] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0103.024] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0103.025] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0103.026] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0103.026] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0103.027] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x700, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0103.028] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x71c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0103.029] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x76c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0103.030] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0103.030] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0103.031] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0103.032] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x9c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0103.033] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0103.034] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0103.035] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0103.035] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0103.036] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fairly.exe")) returned 1 [0103.037] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="tolerance.exe")) returned 1 [0103.038] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="srcomfortable.exe")) returned 1 [0103.046] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="poverty panasonic.exe")) returned 1 [0103.047] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="formed drugs.exe")) returned 1 [0103.048] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="consultantsrobotsmeet.exe")) returned 1 [0103.049] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="moderatebriefing.exe")) returned 1 [0103.050] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="stream-notified.exe")) returned 1 [0103.051] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sudden_mate.exe")) returned 1 [0103.051] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="airfare tubes.exe")) returned 1 [0103.052] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x848, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="breed attempting.exe")) returned 1 [0103.053] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="laughing died taxi.exe")) returned 1 [0103.262] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cross_once_ray.exe")) returned 1 [0103.263] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="social.exe")) returned 1 [0103.264] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x630, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="carrying-diversity.exe")) returned 1 [0103.265] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0103.265] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0103.266] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0103.267] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0103.268] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0103.269] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0103.270] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0103.270] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0103.271] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0103.272] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0103.273] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0103.274] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0103.274] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0103.275] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0103.276] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0103.277] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0103.278] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0103.279] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0103.279] ShellExecuteW (hwnd=0x0, lpOperation=0x0, lpFile="taskkill", lpParameters="/IM outlook.exe /F", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0103.704] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0103.705] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0103.706] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0103.706] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0103.707] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0103.708] ShellExecuteW (hwnd=0x0, lpOperation=0x0, lpFile="taskkill", lpParameters="/IM thunderbird.exe /F", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0104.831] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0105.206] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x85c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0105.207] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0105.208] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xabc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0105.209] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xebc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0105.209] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0105.210] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0105.211] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0105.212] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0105.213] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0105.214] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0105.215] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0105.216] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0105.217] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0105.218] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0105.218] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0105.219] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0105.220] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0105.221] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0105.222] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0105.223] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0105.224] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="wire_pdas.exe")) returned 1 [0105.225] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="affecting_surfing.exe")) returned 1 [0105.225] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="marc_trial_bathroom.exe")) returned 1 [0105.226] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cost_hundred_tu.exe")) returned 1 [0105.227] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="readings-transferred.exe")) returned 1 [0105.228] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0105.229] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0105.230] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b4, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0105.231] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b4, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0105.232] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x11c4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0105.232] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="YeSVw.exe")) returned 1 [0105.233] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1 [0105.234] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="TiWorker.exe")) returned 1 [0105.235] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0105.236] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="SCcawBEQYlan.exe")) returned 1 [0105.237] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="LhzeuvWtslan.exe")) returned 1 [0105.238] Process32NextW (in: hSnapshot=0x38c, lppe=0x404fd3c | out: lppe=0x404fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="lhzeuvwtslan.exe")) returned 0 [0105.238] CloseHandle (hObject=0x38c) returned 1 [0105.238] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x2f046e0 [0105.754] EnumServicesStatusW (in: hSCManager=0x2f046e0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x404ff5c, lpServicesReturned=0x404ff68, lpResumeHandle=0x404ff58 | out: lpServices=0x0, pcbBytesNeeded=0x404ff5c, lpServicesReturned=0x404ff68, lpResumeHandle=0x404ff58) returned 0 [0105.759] VirtualAlloc (lpAddress=0x0, dwSize=0x1c02, flAllocationType=0x1000, flProtect=0x40) returned 0xa2a0000 [0105.760] EnumServicesStatusW (in: hSCManager=0x2f046e0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0xa2a0000, cbBufSize=0x1c02, pcbBytesNeeded=0x404ff5c, lpServicesReturned=0x404ff68, lpResumeHandle=0x404ff58 | out: lpServices=0xa2a0000*(lpServiceName="Appinfo", lpDisplayName="Application Information", ServiceStatus.dwServiceType=0x20, ServiceStatus.dwCurrentState=0x4, ServiceStatus.dwControlsAccepted=0x81, ServiceStatus.dwWin32ExitCode=0x0, ServiceStatus.dwServiceSpecificExitCode=0x0, ServiceStatus.dwCheckPoint=0x0, ServiceStatus.dwWaitHint=0x0), pcbBytesNeeded=0x404ff5c, lpServicesReturned=0x404ff68, lpResumeHandle=0x404ff58) returned 1 [0105.761] ShellExecuteW (hwnd=0x0, lpOperation=0x0, lpFile="net", lpParameters="stop \"audioendpointbuilder\" /y", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0110.191] Sleep (dwMilliseconds=0x96) [0110.849] ShellExecuteW (hwnd=0x0, lpOperation=0x0, lpFile="net", lpParameters="stop \"samss\" /y", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0118.126] Sleep (dwMilliseconds=0x96) [0118.699] VirtualFree (lpAddress=0xa2a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.701] Sleep (dwMilliseconds=0xc350) Thread: id = 28 os_tid = 0x12f4 Thread: id = 30 os_tid = 0x132c Thread: id = 40 os_tid = 0x12cc [0105.465] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x51c [0105.489] Process32FirstW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0105.490] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0105.491] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0105.492] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0105.493] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0105.494] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0105.495] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x228, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0105.496] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e0, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0105.497] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e0, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0105.498] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.499] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x228, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0105.500] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0105.501] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.502] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x228, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0105.503] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5a, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.504] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.505] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.505] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0105.506] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0106.182] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x468, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0106.183] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0106.184] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0106.185] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0106.185] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0106.186] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0106.187] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0106.188] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0106.189] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x700, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0106.190] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x71c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0106.191] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x76c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0106.192] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0106.193] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0106.194] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x838, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0106.195] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x9c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0106.196] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0106.197] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0106.198] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0106.199] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0106.200] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fairly.exe")) returned 1 [0106.201] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="tolerance.exe")) returned 1 [0106.201] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="srcomfortable.exe")) returned 1 [0106.202] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="poverty panasonic.exe")) returned 1 [0106.203] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="formed drugs.exe")) returned 1 [0106.204] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="consultantsrobotsmeet.exe")) returned 1 [0106.205] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="moderatebriefing.exe")) returned 1 [0106.206] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="stream-notified.exe")) returned 1 [0106.207] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sudden_mate.exe")) returned 1 [0106.208] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="airfare tubes.exe")) returned 1 [0106.209] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x848, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="breed attempting.exe")) returned 1 [0106.210] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="laughing died taxi.exe")) returned 1 [0106.211] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cross_once_ray.exe")) returned 1 [0106.212] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="social.exe")) returned 1 [0106.213] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x630, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="carrying-diversity.exe")) returned 1 [0106.214] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0106.523] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x844, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0106.523] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0106.524] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0106.525] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0106.526] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0106.527] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0106.528] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0106.529] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0106.530] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0106.531] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0106.532] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0106.532] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0106.533] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0106.534] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0106.535] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0106.536] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0106.537] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0106.538] ShellExecuteW (hwnd=0x0, lpOperation=0x0, lpFile="taskkill", lpParameters="/IM outlook.exe /F", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0110.689] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0110.690] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0110.691] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0110.691] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0110.692] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0110.693] ShellExecuteW (hwnd=0x0, lpOperation=0x0, lpFile="taskkill", lpParameters="/IM thunderbird.exe /F", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0116.979] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0116.980] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x85c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0116.980] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0116.981] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xabc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0116.981] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xebc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0116.982] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0116.983] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xeec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0116.983] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0116.984] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0116.984] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0116.985] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0116.985] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0116.986] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0116.986] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0116.989] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0116.990] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0116.990] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0116.991] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0116.991] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0116.992] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0116.992] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0116.993] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="wire_pdas.exe")) returned 1 [0116.993] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="affecting_surfing.exe")) returned 1 [0116.994] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="marc_trial_bathroom.exe")) returned 1 [0116.995] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="cost_hundred_tu.exe")) returned 1 [0116.995] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="readings-transferred.exe")) returned 1 [0116.996] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0116.997] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0116.998] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b4, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0116.998] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b4, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0116.999] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x11c4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0117.000] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x9dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="YeSVw.exe")) returned 1 [0117.001] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1 [0117.001] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="TiWorker.exe")) returned 1 [0117.002] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x244, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0117.011] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="SCcawBEQYlan.exe")) returned 1 [0118.354] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfa4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="LhzeuvWtslan.exe")) returned 1 [0118.355] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskkill.exe")) returned 1 [0118.356] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0118.357] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1380, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0118.357] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0118.358] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0118.359] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="icacls.exe")) returned 1 [0118.360] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x13a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskkill.exe")) returned 1 [0118.361] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1328, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1308, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0118.361] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x130c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1350, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0118.362] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0118.363] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1310, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0118.364] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x128c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1380, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0118.365] Process32NextW (in: hSnapshot=0x51c, lppe=0x418fd3c | out: lppe=0x418fd3c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x128c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1380, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0118.365] CloseHandle (hObject=0x51c) returned 1 [0118.365] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x7560d0 [0118.366] EnumServicesStatusW (in: hSCManager=0x7560d0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x418ff5c, lpServicesReturned=0x418ff68, lpResumeHandle=0x418ff58 | out: lpServices=0x0, pcbBytesNeeded=0x418ff5c, lpServicesReturned=0x418ff68, lpResumeHandle=0x418ff58) returned 0 [0118.366] VirtualAlloc (lpAddress=0x0, dwSize=0x1c02, flAllocationType=0x1000, flProtect=0x40) returned 0x4190000 [0118.367] EnumServicesStatusW (in: hSCManager=0x7560d0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x4190000, cbBufSize=0x1c02, pcbBytesNeeded=0x418ff5c, lpServicesReturned=0x418ff68, lpResumeHandle=0x418ff58 | out: lpServices=0x4190000*(lpServiceName="Appinfo", lpDisplayName="Application Information", ServiceStatus.dwServiceType=0x20, ServiceStatus.dwCurrentState=0x4, ServiceStatus.dwControlsAccepted=0x81, ServiceStatus.dwWin32ExitCode=0x0, ServiceStatus.dwServiceSpecificExitCode=0x0, ServiceStatus.dwCheckPoint=0x0, ServiceStatus.dwWaitHint=0x0), pcbBytesNeeded=0x418ff5c, lpServicesReturned=0x418ff68, lpResumeHandle=0x418ff58) returned 1 [0118.368] ShellExecuteW (hwnd=0x0, lpOperation=0x0, lpFile="net", lpParameters="stop \"audioendpointbuilder\" /y", lpDirectory=0x0, nShowCmd=0) Thread: id = 45 os_tid = 0xecc Thread: id = 54 os_tid = 0xfcc Thread: id = 59 os_tid = 0x36c [0108.369] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log", dwFileAttributes=0x80) returned 1 [0108.474] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x528 [0108.474] GetFileSizeEx (in: hFile=0x528, lpFileSize=0xa62ff10 | out: lpFileSize=0xa62ff10*=42674) returned 1 [0108.474] GetFileSizeEx (in: hFile=0x528, lpFileSize=0xa62ff50 | out: lpFileSize=0xa62ff50*=42674) returned 1 [0108.474] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0xa590, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.474] ReadFile (in: hFile=0x528, lpBuffer=0xa62fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa62ff40, lpOverlapped=0x0 | out: lpBuffer=0xa62fed4*, lpNumberOfBytesRead=0xa62ff40*=0x19, lpOverlapped=0x0) returned 1 [0108.475] SetFilePointer (in: hFile=0x528, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.475] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa62ff48 | out: phKey=0xa62ff48*=0x2f24b80) returned 1 [0108.475] SetFilePointer (in: hFile=0x528, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.475] ReadFile (in: hFile=0x528, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xa6b2, lpNumberOfBytesRead=0xa62ff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa62ff28*=0xa6b2, lpOverlapped=0x0) returned 1 [0108.477] CryptEncrypt (in: hKey=0x2f24b80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa62ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa62ff2c*=0xf4250) returned 1 [0108.477] CryptEncrypt (in: hKey=0x2f24b80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa62ff24*=0xa6b2, dwBufLen=0xf4250 | out: pbData=0x42d0000*, pdwDataLen=0xa62ff24*=0xa6c0) returned 1 [0108.477] SetFilePointer (in: hFile=0x528, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.477] WriteFile (in: hFile=0x528, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xa6c0, lpNumberOfBytesWritten=0xa62ff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa62ff28*=0xa6c0, lpOverlapped=0x0) returned 1 [0108.477] WriteFile (in: hFile=0x528, lpBuffer=0xa62fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa62ff18, lpOverlapped=0x0 | out: lpBuffer=0xa62fef0*, lpNumberOfBytesWritten=0xa62ff18*=0x6, lpOverlapped=0x0) returned 1 [0108.477] CryptExportKey (in: hKey=0x2f24b80, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa62ff38 | out: pbData=0x0*, pdwDataLen=0xa62ff38*=0x10c) returned 1 [0108.477] CryptExportKey (in: hKey=0x2f24b80, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa62fd98, pdwDataLen=0xa62ff38 | out: pbData=0xa62fd98*, pdwDataLen=0xa62ff38*=0x10c) returned 1 [0108.478] WriteFile (in: hFile=0x528, lpBuffer=0xa62fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa62ff18, lpOverlapped=0x0 | out: lpBuffer=0xa62fd98*, lpNumberOfBytesWritten=0xa62ff18*=0x10c, lpOverlapped=0x0) returned 1 [0108.478] CloseHandle (hObject=0x528) returned 1 [0108.498] CryptDestroyKey (hKey=0x2f24b80) returned 1 [0108.499] MoveFileExW (lpExistingFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), lpNewFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.RYK" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.ryk"), dwFlags=0x8) returned 1 Thread: id = 60 os_tid = 0x4e0 [0108.370] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log", dwFileAttributes=0x80) returned 1 [0108.419] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x530 [0108.419] GetFileSizeEx (in: hFile=0x530, lpFileSize=0xa72ff10 | out: lpFileSize=0xa72ff10*=6004) returned 1 [0108.419] GetFileSizeEx (in: hFile=0x530, lpFileSize=0xa72ff50 | out: lpFileSize=0xa72ff50*=6004) returned 1 [0108.419] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x1652, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.419] ReadFile (in: hFile=0x530, lpBuffer=0xa72fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa72ff40, lpOverlapped=0x0 | out: lpBuffer=0xa72fed4*, lpNumberOfBytesRead=0xa72ff40*=0x19, lpOverlapped=0x0) returned 1 [0108.421] SetFilePointer (in: hFile=0x530, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.421] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa72ff48 | out: phKey=0xa72ff48*=0x2f24a40) returned 1 [0108.422] SetFilePointer (in: hFile=0x530, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.422] ReadFile (in: hFile=0x530, lpBuffer=0x43e0000, nNumberOfBytesToRead=0x1774, lpNumberOfBytesRead=0xa72ff28, lpOverlapped=0x0 | out: lpBuffer=0x43e0000*, lpNumberOfBytesRead=0xa72ff28*=0x1774, lpOverlapped=0x0) returned 1 [0108.424] CryptEncrypt (in: hKey=0x2f24a40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa72ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa72ff2c*=0xf4250) returned 1 [0108.424] CryptEncrypt (in: hKey=0x2f24a40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x43e0000*, pdwDataLen=0xa72ff24*=0x1774, dwBufLen=0xf4250 | out: pbData=0x43e0000*, pdwDataLen=0xa72ff24*=0x1780) returned 1 [0108.424] SetFilePointer (in: hFile=0x530, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.424] WriteFile (in: hFile=0x530, lpBuffer=0x43e0000*, nNumberOfBytesToWrite=0x1780, lpNumberOfBytesWritten=0xa72ff28, lpOverlapped=0x0 | out: lpBuffer=0x43e0000*, lpNumberOfBytesWritten=0xa72ff28*=0x1780, lpOverlapped=0x0) returned 1 [0108.425] WriteFile (in: hFile=0x530, lpBuffer=0xa72fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa72ff18, lpOverlapped=0x0 | out: lpBuffer=0xa72fef0*, lpNumberOfBytesWritten=0xa72ff18*=0x6, lpOverlapped=0x0) returned 1 [0108.425] CryptExportKey (in: hKey=0x2f24a40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa72ff38 | out: pbData=0x0*, pdwDataLen=0xa72ff38*=0x10c) returned 1 [0108.425] CryptExportKey (in: hKey=0x2f24a40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa72fd98, pdwDataLen=0xa72ff38 | out: pbData=0xa72fd98*, pdwDataLen=0xa72ff38*=0x10c) returned 1 [0108.425] WriteFile (in: hFile=0x530, lpBuffer=0xa72fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa72ff18, lpOverlapped=0x0 | out: lpBuffer=0xa72fd98*, lpNumberOfBytesWritten=0xa72ff18*=0x10c, lpOverlapped=0x0) returned 1 [0108.425] CloseHandle (hObject=0x530) returned 1 [0108.444] CryptDestroyKey (hKey=0x2f24a40) returned 1 [0108.444] MoveFileExW (lpExistingFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), lpNewFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.RYK" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.ryk"), dwFlags=0x8) returned 1 Thread: id = 61 os_tid = 0x8d4 [0108.371] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log", dwFileAttributes=0x80) returned 1 [0108.450] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x548 [0108.450] GetFileSizeEx (in: hFile=0x548, lpFileSize=0xa82ff10 | out: lpFileSize=0xa82ff10*=40) returned 1 [0108.450] GetFileSizeEx (in: hFile=0x548, lpFileSize=0xa82ff50 | out: lpFileSize=0xa82ff50*=40) returned 1 [0108.450] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa82ff48 | out: phKey=0xa82ff48*=0x2f246c0) returned 1 [0108.450] SetFilePointer (in: hFile=0x548, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.450] ReadFile (in: hFile=0x548, lpBuffer=0x44f0000, nNumberOfBytesToRead=0x28, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x44f0000*, lpNumberOfBytesRead=0xa82ff28*=0x28, lpOverlapped=0x0) returned 1 [0108.451] CryptEncrypt (in: hKey=0x2f246c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4250) returned 1 [0108.451] CryptEncrypt (in: hKey=0x2f246c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x44f0000*, pdwDataLen=0xa82ff24*=0x28, dwBufLen=0xf4250 | out: pbData=0x44f0000*, pdwDataLen=0xa82ff24*=0x30) returned 1 [0108.451] SetFilePointer (in: hFile=0x548, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.451] WriteFile (in: hFile=0x548, lpBuffer=0x44f0000*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x44f0000*, lpNumberOfBytesWritten=0xa82ff28*=0x30, lpOverlapped=0x0) returned 1 [0108.451] WriteFile (in: hFile=0x548, lpBuffer=0xa82fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa82ff18, lpOverlapped=0x0 | out: lpBuffer=0xa82fef0*, lpNumberOfBytesWritten=0xa82ff18*=0x6, lpOverlapped=0x0) returned 1 [0108.451] CryptExportKey (in: hKey=0x2f246c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa82ff38 | out: pbData=0x0*, pdwDataLen=0xa82ff38*=0x10c) returned 1 [0108.452] CryptExportKey (in: hKey=0x2f246c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa82fd98, pdwDataLen=0xa82ff38 | out: pbData=0xa82fd98*, pdwDataLen=0xa82ff38*=0x10c) returned 1 [0108.452] WriteFile (in: hFile=0x548, lpBuffer=0xa82fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa82ff18, lpOverlapped=0x0 | out: lpBuffer=0xa82fd98*, lpNumberOfBytesWritten=0xa82ff18*=0x10c, lpOverlapped=0x0) returned 1 [0108.452] CloseHandle (hObject=0x548) returned 1 [0108.470] CryptDestroyKey (hKey=0x2f246c0) returned 1 [0108.470] MoveFileExW (lpExistingFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), lpNewFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.RYK" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log.ryk"), dwFlags=0x8) returned 1 Thread: id = 62 os_tid = 0x900 [0108.371] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd", dwFileAttributes=0x80) returned 1 [0108.422] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x544 [0108.423] GetFileSizeEx (in: hFile=0x544, lpFileSize=0xa92ff10 | out: lpFileSize=0xa92ff10*=577) returned 1 [0108.423] GetFileSizeEx (in: hFile=0x544, lpFileSize=0xa92ff50 | out: lpFileSize=0xa92ff50*=577) returned 1 [0108.423] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x11f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.423] ReadFile (in: hFile=0x544, lpBuffer=0xa92fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa92ff40, lpOverlapped=0x0 | out: lpBuffer=0xa92fed4*, lpNumberOfBytesRead=0xa92ff40*=0x19, lpOverlapped=0x0) returned 1 [0108.584] SetFilePointer (in: hFile=0x544, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.584] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa92ff48 | out: phKey=0xa92ff48*=0x2f246c0) returned 1 [0108.584] SetFilePointer (in: hFile=0x544, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.584] ReadFile (in: hFile=0x544, lpBuffer=0x4600000, nNumberOfBytesToRead=0x241, lpNumberOfBytesRead=0xa92ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa92ff28*=0x241, lpOverlapped=0x0) returned 1 [0108.585] CryptEncrypt (in: hKey=0x2f246c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa92ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa92ff2c*=0xf4250) returned 1 [0108.585] CryptEncrypt (in: hKey=0x2f246c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa92ff24*=0x241, dwBufLen=0xf4250 | out: pbData=0x4600000*, pdwDataLen=0xa92ff24*=0x250) returned 1 [0108.585] SetFilePointer (in: hFile=0x544, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.585] WriteFile (in: hFile=0x544, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0xa92ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa92ff28*=0x250, lpOverlapped=0x0) returned 1 [0108.585] WriteFile (in: hFile=0x544, lpBuffer=0xa92fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa92ff18, lpOverlapped=0x0 | out: lpBuffer=0xa92fef0*, lpNumberOfBytesWritten=0xa92ff18*=0x6, lpOverlapped=0x0) returned 1 [0108.585] CryptExportKey (in: hKey=0x2f246c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa92ff38 | out: pbData=0x0*, pdwDataLen=0xa92ff38*=0x10c) returned 1 [0108.585] CryptExportKey (in: hKey=0x2f246c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa92fd98, pdwDataLen=0xa92ff38 | out: pbData=0xa92fd98*, pdwDataLen=0xa92ff38*=0x10c) returned 1 [0108.585] WriteFile (in: hFile=0x544, lpBuffer=0xa92fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa92ff18, lpOverlapped=0x0 | out: lpBuffer=0xa92fd98*, lpNumberOfBytesWritten=0xa92ff18*=0x10c, lpOverlapped=0x0) returned 1 [0108.585] CloseHandle (hObject=0x544) returned 1 [0108.612] CryptDestroyKey (hKey=0x2f246c0) returned 1 [0108.612] MoveFileExW (lpExistingFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), lpNewFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.RYK" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd.ryk"), dwFlags=0x8) returned 1 Thread: id = 63 os_tid = 0xd0c [0108.502] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd", dwFileAttributes=0x80) returned 1 [0108.615] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x548 [0108.615] GetFileSizeEx (in: hFile=0x548, lpFileSize=0xaa6ff10 | out: lpFileSize=0xaa6ff10*=74) returned 1 [0108.615] GetFileSizeEx (in: hFile=0x548, lpFileSize=0xaa6ff50 | out: lpFileSize=0xaa6ff50*=74) returned 1 [0108.615] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xaa6ff48 | out: phKey=0xaa6ff48*=0x2f24740) returned 1 [0108.616] SetFilePointer (in: hFile=0x548, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.616] ReadFile (in: hFile=0x548, lpBuffer=0x4710000, nNumberOfBytesToRead=0x4a, lpNumberOfBytesRead=0xaa6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4710000*, lpNumberOfBytesRead=0xaa6ff28*=0x4a, lpOverlapped=0x0) returned 1 [0108.617] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xaa6ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xaa6ff2c*=0xf4250) returned 1 [0108.617] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4710000*, pdwDataLen=0xaa6ff24*=0x4a, dwBufLen=0xf4250 | out: pbData=0x4710000*, pdwDataLen=0xaa6ff24*=0x50) returned 1 [0108.617] SetFilePointer (in: hFile=0x548, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.617] WriteFile (in: hFile=0x548, lpBuffer=0x4710000*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xaa6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4710000*, lpNumberOfBytesWritten=0xaa6ff28*=0x50, lpOverlapped=0x0) returned 1 [0108.617] WriteFile (in: hFile=0x548, lpBuffer=0xaa6fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xaa6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaa6fef0*, lpNumberOfBytesWritten=0xaa6ff18*=0x6, lpOverlapped=0x0) returned 1 [0108.617] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xaa6ff38 | out: pbData=0x0*, pdwDataLen=0xaa6ff38*=0x10c) returned 1 [0108.617] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xaa6fd98, pdwDataLen=0xaa6ff38 | out: pbData=0xaa6fd98*, pdwDataLen=0xaa6ff38*=0x10c) returned 1 [0108.617] WriteFile (in: hFile=0x548, lpBuffer=0xaa6fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaa6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaa6fd98*, lpNumberOfBytesWritten=0xaa6ff18*=0x10c, lpOverlapped=0x0) returned 1 [0108.618] CloseHandle (hObject=0x548) returned 1 [0108.638] CryptDestroyKey (hKey=0x2f24740) returned 1 [0108.638] MoveFileExW (lpExistingFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), lpNewFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd.RYK" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd.ryk"), dwFlags=0x8) returned 1 Thread: id = 64 os_tid = 0xd18 [0108.503] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd", dwFileAttributes=0x80) returned 1 [0108.613] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x528 [0108.613] GetFileSizeEx (in: hFile=0x528, lpFileSize=0xabaff10 | out: lpFileSize=0xabaff10*=307) returned 1 [0108.613] GetFileSizeEx (in: hFile=0x528, lpFileSize=0xabaff50 | out: lpFileSize=0xabaff50*=307) returned 1 [0108.613] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x11, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.613] ReadFile (in: hFile=0x528, lpBuffer=0xabafed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xabaff40, lpOverlapped=0x0 | out: lpBuffer=0xabafed4*, lpNumberOfBytesRead=0xabaff40*=0x19, lpOverlapped=0x0) returned 1 [0108.614] SetFilePointer (in: hFile=0x528, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.614] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xabaff48 | out: phKey=0xabaff48*=0x2f246c0) returned 1 [0108.614] SetFilePointer (in: hFile=0x528, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.614] ReadFile (in: hFile=0x528, lpBuffer=0x4820000, nNumberOfBytesToRead=0x133, lpNumberOfBytesRead=0xabaff28, lpOverlapped=0x0 | out: lpBuffer=0x4820000*, lpNumberOfBytesRead=0xabaff28*=0x133, lpOverlapped=0x0) returned 1 [0108.614] CryptEncrypt (in: hKey=0x2f246c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xabaff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xabaff2c*=0xf4250) returned 1 [0108.614] CryptEncrypt (in: hKey=0x2f246c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4820000*, pdwDataLen=0xabaff24*=0x133, dwBufLen=0xf4250 | out: pbData=0x4820000*, pdwDataLen=0xabaff24*=0x140) returned 1 [0108.614] SetFilePointer (in: hFile=0x528, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.614] WriteFile (in: hFile=0x528, lpBuffer=0x4820000*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0xabaff28, lpOverlapped=0x0 | out: lpBuffer=0x4820000*, lpNumberOfBytesWritten=0xabaff28*=0x140, lpOverlapped=0x0) returned 1 [0108.614] WriteFile (in: hFile=0x528, lpBuffer=0xabafef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xabaff18, lpOverlapped=0x0 | out: lpBuffer=0xabafef0*, lpNumberOfBytesWritten=0xabaff18*=0x6, lpOverlapped=0x0) returned 1 [0108.614] CryptExportKey (in: hKey=0x2f246c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xabaff38 | out: pbData=0x0*, pdwDataLen=0xabaff38*=0x10c) returned 1 [0108.614] CryptExportKey (in: hKey=0x2f246c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xabafd98, pdwDataLen=0xabaff38 | out: pbData=0xabafd98*, pdwDataLen=0xabaff38*=0x10c) returned 1 [0108.615] WriteFile (in: hFile=0x528, lpBuffer=0xabafd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xabaff18, lpOverlapped=0x0 | out: lpBuffer=0xabafd98*, lpNumberOfBytesWritten=0xabaff18*=0x10c, lpOverlapped=0x0) returned 1 [0108.620] CloseHandle (hObject=0x528) returned 1 [0108.655] CryptDestroyKey (hKey=0x2f246c0) returned 1 [0108.656] MoveFileExW (lpExistingFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), lpNewFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd.RYK" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd.ryk"), dwFlags=0x8) returned 1 Thread: id = 66 os_tid = 0xa4c [0108.958] SetFileAttributesW (lpFileName="C:\\$WINRE_BACKUP_PARTITION.MARKER", dwFileAttributes=0x80) returned 1 [0108.959] CreateFileW (lpFileName="C:\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x544 [0108.959] GetFileSizeEx (in: hFile=0x544, lpFileSize=0xa62ff10 | out: lpFileSize=0xa62ff10*=0) returned 1 [0108.959] GetFileSizeEx (in: hFile=0x544, lpFileSize=0xa62ff50 | out: lpFileSize=0xa62ff50*=0) returned 1 [0108.959] CloseHandle (hObject=0x544) returned 1 [0108.959] MoveFileExW (lpExistingFileName="C:\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), lpNewFileName="C:\\$WINRE_BACKUP_PARTITION.MARKER.RYK" (normalized: "c:\\$winre_backup_partition.marker.ryk"), dwFlags=0x8) returned 1 Thread: id = 67 os_tid = 0xd54 [0108.961] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf", dwFileAttributes=0x80) returned 1 [0108.965] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x544 [0108.965] GetFileSizeEx (in: hFile=0x544, lpFileSize=0xa72ff10 | out: lpFileSize=0xa72ff10*=7567) returned 1 [0108.965] GetFileSizeEx (in: hFile=0x544, lpFileSize=0xa72ff50 | out: lpFileSize=0xa72ff50*=7567) returned 1 [0108.965] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x1c6d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.965] ReadFile (in: hFile=0x544, lpBuffer=0xa72fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa72ff40, lpOverlapped=0x0 | out: lpBuffer=0xa72fed4*, lpNumberOfBytesRead=0xa72ff40*=0x19, lpOverlapped=0x0) returned 1 [0108.968] SetFilePointer (in: hFile=0x544, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.968] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa72ff48 | out: phKey=0xa72ff48*=0x2f246c0) returned 1 [0108.968] SetFilePointer (in: hFile=0x544, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.968] ReadFile (in: hFile=0x544, lpBuffer=0x43e0000, nNumberOfBytesToRead=0x1d8f, lpNumberOfBytesRead=0xa72ff28, lpOverlapped=0x0 | out: lpBuffer=0x43e0000*, lpNumberOfBytesRead=0xa72ff28*=0x1d8f, lpOverlapped=0x0) returned 1 [0108.969] CryptEncrypt (in: hKey=0x2f246c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa72ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa72ff2c*=0xf4250) returned 1 [0108.969] CryptEncrypt (in: hKey=0x2f246c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x43e0000*, pdwDataLen=0xa72ff24*=0x1d8f, dwBufLen=0xf4250 | out: pbData=0x43e0000*, pdwDataLen=0xa72ff24*=0x1d90) returned 1 [0108.969] SetFilePointer (in: hFile=0x544, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.969] WriteFile (in: hFile=0x544, lpBuffer=0x43e0000*, nNumberOfBytesToWrite=0x1d90, lpNumberOfBytesWritten=0xa72ff28, lpOverlapped=0x0 | out: lpBuffer=0x43e0000*, lpNumberOfBytesWritten=0xa72ff28*=0x1d90, lpOverlapped=0x0) returned 1 [0108.969] WriteFile (in: hFile=0x544, lpBuffer=0xa72fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa72ff18, lpOverlapped=0x0 | out: lpBuffer=0xa72fef0*, lpNumberOfBytesWritten=0xa72ff18*=0x6, lpOverlapped=0x0) returned 1 [0108.969] CryptExportKey (in: hKey=0x2f246c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa72ff38 | out: pbData=0x0*, pdwDataLen=0xa72ff38*=0x10c) returned 1 [0108.969] CryptExportKey (in: hKey=0x2f246c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa72fd98, pdwDataLen=0xa72ff38 | out: pbData=0xa72fd98*, pdwDataLen=0xa72ff38*=0x10c) returned 1 [0108.970] WriteFile (in: hFile=0x544, lpBuffer=0xa72fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa72ff18, lpOverlapped=0x0 | out: lpBuffer=0xa72fd98*, lpNumberOfBytesWritten=0xa72ff18*=0x10c, lpOverlapped=0x0) returned 1 [0108.970] CloseHandle (hObject=0x544) returned 1 [0108.971] CryptDestroyKey (hKey=0x2f246c0) returned 1 [0108.971] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf.RYK" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf.ryk"), dwFlags=0x8) returned 1 Thread: id = 68 os_tid = 0xd80 [0108.966] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", dwFileAttributes=0x80) returned 1 [0108.967] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0108.967] GetFileSizeEx (in: hFile=0x570, lpFileSize=0xa82ff10 | out: lpFileSize=0xa82ff10*=74214) returned 1 [0108.967] GetFileSizeEx (in: hFile=0x570, lpFileSize=0xa82ff50 | out: lpFileSize=0xa82ff50*=74214) returned 1 [0108.967] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x120c4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.967] ReadFile (in: hFile=0x570, lpBuffer=0xa82fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa82ff40, lpOverlapped=0x0 | out: lpBuffer=0xa82fed4*, lpNumberOfBytesRead=0xa82ff40*=0x19, lpOverlapped=0x0) returned 1 [0108.972] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.973] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa82ff48 | out: phKey=0xa82ff48*=0x2f246c0) returned 1 [0108.973] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.973] ReadFile (in: hFile=0x570, lpBuffer=0x44f0000, nNumberOfBytesToRead=0x121e6, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x44f0000*, lpNumberOfBytesRead=0xa82ff28*=0x121e6, lpOverlapped=0x0) returned 1 [0108.974] CryptEncrypt (in: hKey=0x2f246c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4250) returned 1 [0108.974] CryptEncrypt (in: hKey=0x2f246c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x44f0000*, pdwDataLen=0xa82ff24*=0x121e6, dwBufLen=0xf4250 | out: pbData=0x44f0000*, pdwDataLen=0xa82ff24*=0x121f0) returned 1 [0108.974] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.975] WriteFile (in: hFile=0x570, lpBuffer=0x44f0000*, nNumberOfBytesToWrite=0x121f0, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x44f0000*, lpNumberOfBytesWritten=0xa82ff28*=0x121f0, lpOverlapped=0x0) returned 1 [0108.975] WriteFile (in: hFile=0x570, lpBuffer=0xa82fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa82ff18, lpOverlapped=0x0 | out: lpBuffer=0xa82fef0*, lpNumberOfBytesWritten=0xa82ff18*=0x6, lpOverlapped=0x0) returned 1 [0108.975] CryptExportKey (in: hKey=0x2f246c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa82ff38 | out: pbData=0x0*, pdwDataLen=0xa82ff38*=0x10c) returned 1 [0108.975] CryptExportKey (in: hKey=0x2f246c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa82fd98, pdwDataLen=0xa82ff38 | out: pbData=0xa82fd98*, pdwDataLen=0xa82ff38*=0x10c) returned 1 [0108.975] WriteFile (in: hFile=0x570, lpBuffer=0xa82fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa82ff18, lpOverlapped=0x0 | out: lpBuffer=0xa82fd98*, lpNumberOfBytesWritten=0xa82ff18*=0x10c, lpOverlapped=0x0) returned 1 [0108.975] CloseHandle (hObject=0x570) returned 1 [0108.977] CryptDestroyKey (hKey=0x2f246c0) returned 1 [0108.978] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 69 os_tid = 0xd78 [0108.979] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf", dwFileAttributes=0x80) returned 1 [0108.980] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0108.980] GetFileSizeEx (in: hFile=0x570, lpFileSize=0xa92ff10 | out: lpFileSize=0xa92ff10*=6309) returned 1 [0108.980] GetFileSizeEx (in: hFile=0x570, lpFileSize=0xa92ff50 | out: lpFileSize=0xa92ff50*=6309) returned 1 [0108.980] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x1783, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.980] ReadFile (in: hFile=0x570, lpBuffer=0xa92fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa92ff40, lpOverlapped=0x0 | out: lpBuffer=0xa92fed4*, lpNumberOfBytesRead=0xa92ff40*=0x19, lpOverlapped=0x0) returned 1 [0108.982] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.982] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa92ff48 | out: phKey=0xa92ff48*=0x2f246c0) returned 1 [0108.982] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.982] ReadFile (in: hFile=0x570, lpBuffer=0x4600000, nNumberOfBytesToRead=0x18a5, lpNumberOfBytesRead=0xa92ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa92ff28*=0x18a5, lpOverlapped=0x0) returned 1 [0108.982] CryptEncrypt (in: hKey=0x2f246c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa92ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa92ff2c*=0xf4250) returned 1 [0108.982] CryptEncrypt (in: hKey=0x2f246c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa92ff24*=0x18a5, dwBufLen=0xf4250 | out: pbData=0x4600000*, pdwDataLen=0xa92ff24*=0x18b0) returned 1 [0108.982] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.982] WriteFile (in: hFile=0x570, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0xa92ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa92ff28*=0x18b0, lpOverlapped=0x0) returned 1 [0108.982] WriteFile (in: hFile=0x570, lpBuffer=0xa92fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa92ff18, lpOverlapped=0x0 | out: lpBuffer=0xa92fef0*, lpNumberOfBytesWritten=0xa92ff18*=0x6, lpOverlapped=0x0) returned 1 [0108.983] CryptExportKey (in: hKey=0x2f246c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa92ff38 | out: pbData=0x0*, pdwDataLen=0xa92ff38*=0x10c) returned 1 [0108.983] CryptExportKey (in: hKey=0x2f246c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa92fd98, pdwDataLen=0xa92ff38 | out: pbData=0xa92fd98*, pdwDataLen=0xa92ff38*=0x10c) returned 1 [0108.983] WriteFile (in: hFile=0x570, lpBuffer=0xa92fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa92ff18, lpOverlapped=0x0 | out: lpBuffer=0xa92fd98*, lpNumberOfBytesWritten=0xa92ff18*=0x10c, lpOverlapped=0x0) returned 1 [0108.983] CloseHandle (hObject=0x570) returned 1 [0108.984] CryptDestroyKey (hKey=0x2f246c0) returned 1 [0108.984] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf.RYK" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf.ryk"), dwFlags=0x8) returned 1 Thread: id = 70 os_tid = 0xd90 [0108.982] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", dwFileAttributes=0x80) returned 1 [0108.986] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0108.986] GetFileSizeEx (in: hFile=0x570, lpFileSize=0xaa6ff10 | out: lpFileSize=0xaa6ff10*=60816) returned 1 [0108.986] GetFileSizeEx (in: hFile=0x570, lpFileSize=0xaa6ff50 | out: lpFileSize=0xaa6ff50*=60816) returned 1 [0108.986] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0xec6e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.987] ReadFile (in: hFile=0x570, lpBuffer=0xaa6fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xaa6ff40, lpOverlapped=0x0 | out: lpBuffer=0xaa6fed4*, lpNumberOfBytesRead=0xaa6ff40*=0x19, lpOverlapped=0x0) returned 1 [0108.988] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.988] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xaa6ff48 | out: phKey=0xaa6ff48*=0x2f246c0) returned 1 [0108.988] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.988] ReadFile (in: hFile=0x570, lpBuffer=0x4710000, nNumberOfBytesToRead=0xed90, lpNumberOfBytesRead=0xaa6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4710000*, lpNumberOfBytesRead=0xaa6ff28*=0xed90, lpOverlapped=0x0) returned 1 [0108.991] CryptEncrypt (in: hKey=0x2f246c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xaa6ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xaa6ff2c*=0xf4250) returned 1 [0108.991] CryptEncrypt (in: hKey=0x2f246c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4710000*, pdwDataLen=0xaa6ff24*=0xed90, dwBufLen=0xf4250 | out: pbData=0x4710000*, pdwDataLen=0xaa6ff24*=0xeda0) returned 1 [0108.991] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.991] WriteFile (in: hFile=0x570, lpBuffer=0x4710000*, nNumberOfBytesToWrite=0xeda0, lpNumberOfBytesWritten=0xaa6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4710000*, lpNumberOfBytesWritten=0xaa6ff28*=0xeda0, lpOverlapped=0x0) returned 1 [0108.991] WriteFile (in: hFile=0x570, lpBuffer=0xaa6fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xaa6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaa6fef0*, lpNumberOfBytesWritten=0xaa6ff18*=0x6, lpOverlapped=0x0) returned 1 [0108.991] CryptExportKey (in: hKey=0x2f246c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xaa6ff38 | out: pbData=0x0*, pdwDataLen=0xaa6ff38*=0x10c) returned 1 [0108.991] CryptExportKey (in: hKey=0x2f246c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xaa6fd98, pdwDataLen=0xaa6ff38 | out: pbData=0xaa6fd98*, pdwDataLen=0xaa6ff38*=0x10c) returned 1 [0108.991] WriteFile (in: hFile=0x570, lpBuffer=0xaa6fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaa6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaa6fd98*, lpNumberOfBytesWritten=0xaa6ff18*=0x10c, lpOverlapped=0x0) returned 1 [0108.992] CloseHandle (hObject=0x570) returned 1 [0108.993] CryptDestroyKey (hKey=0x2f246c0) returned 1 [0108.993] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 71 os_tid = 0xa78 [0108.988] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf", dwFileAttributes=0x80) returned 1 [0108.989] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x544 [0108.989] GetFileSizeEx (in: hFile=0x544, lpFileSize=0xabaff10 | out: lpFileSize=0xabaff10*=3726) returned 1 [0108.989] GetFileSizeEx (in: hFile=0x544, lpFileSize=0xabaff50 | out: lpFileSize=0xabaff50*=3726) returned 1 [0108.989] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0xd6c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.989] ReadFile (in: hFile=0x544, lpBuffer=0xabafed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xabaff40, lpOverlapped=0x0 | out: lpBuffer=0xabafed4*, lpNumberOfBytesRead=0xabaff40*=0x19, lpOverlapped=0x0) returned 1 [0108.994] SetFilePointer (in: hFile=0x544, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.995] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xabaff48 | out: phKey=0xabaff48*=0x2f246c0) returned 1 [0108.995] SetFilePointer (in: hFile=0x544, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.995] ReadFile (in: hFile=0x544, lpBuffer=0x4820000, nNumberOfBytesToRead=0xe8e, lpNumberOfBytesRead=0xabaff28, lpOverlapped=0x0 | out: lpBuffer=0x4820000*, lpNumberOfBytesRead=0xabaff28*=0xe8e, lpOverlapped=0x0) returned 1 [0108.995] CryptEncrypt (in: hKey=0x2f246c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xabaff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xabaff2c*=0xf4250) returned 1 [0108.995] CryptEncrypt (in: hKey=0x2f246c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4820000*, pdwDataLen=0xabaff24*=0xe8e, dwBufLen=0xf4250 | out: pbData=0x4820000*, pdwDataLen=0xabaff24*=0xe90) returned 1 [0108.996] SetFilePointer (in: hFile=0x544, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0108.996] WriteFile (in: hFile=0x544, lpBuffer=0x4820000*, nNumberOfBytesToWrite=0xe90, lpNumberOfBytesWritten=0xabaff28, lpOverlapped=0x0 | out: lpBuffer=0x4820000*, lpNumberOfBytesWritten=0xabaff28*=0xe90, lpOverlapped=0x0) returned 1 [0108.999] WriteFile (in: hFile=0x544, lpBuffer=0xabafef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xabaff18, lpOverlapped=0x0 | out: lpBuffer=0xabafef0*, lpNumberOfBytesWritten=0xabaff18*=0x6, lpOverlapped=0x0) returned 1 [0108.999] CryptExportKey (in: hKey=0x2f246c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xabaff38 | out: pbData=0x0*, pdwDataLen=0xabaff38*=0x10c) returned 1 [0109.000] CryptExportKey (in: hKey=0x2f246c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xabafd98, pdwDataLen=0xabaff38 | out: pbData=0xabafd98*, pdwDataLen=0xabaff38*=0x10c) returned 1 [0109.000] WriteFile (in: hFile=0x544, lpBuffer=0xabafd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xabaff18, lpOverlapped=0x0 | out: lpBuffer=0xabafd98*, lpNumberOfBytesWritten=0xabaff18*=0x10c, lpOverlapped=0x0) returned 1 [0109.000] CloseHandle (hObject=0x544) returned 1 [0109.001] CryptDestroyKey (hKey=0x2f246c0) returned 1 [0109.001] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf.RYK" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf.ryk"), dwFlags=0x8) returned 1 Thread: id = 72 os_tid = 0x139c [0109.003] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", dwFileAttributes=0x80) returned 1 [0109.004] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x544 [0109.004] GetFileSizeEx (in: hFile=0x544, lpFileSize=0xaceff10 | out: lpFileSize=0xaceff10*=80970) returned 1 [0109.004] GetFileSizeEx (in: hFile=0x544, lpFileSize=0xaceff50 | out: lpFileSize=0xaceff50*=80970) returned 1 [0109.004] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x13b28, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.004] ReadFile (in: hFile=0x544, lpBuffer=0xacefed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xaceff40, lpOverlapped=0x0 | out: lpBuffer=0xacefed4*, lpNumberOfBytesRead=0xaceff40*=0x19, lpOverlapped=0x0) returned 1 [0109.005] SetFilePointer (in: hFile=0x544, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0109.005] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xaceff48 | out: phKey=0xaceff48*=0x2f24b80) returned 1 [0109.006] SetFilePointer (in: hFile=0x544, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0109.006] ReadFile (in: hFile=0x544, lpBuffer=0x4930000, nNumberOfBytesToRead=0x13c4a, lpNumberOfBytesRead=0xaceff28, lpOverlapped=0x0 | out: lpBuffer=0x4930000*, lpNumberOfBytesRead=0xaceff28*=0x13c4a, lpOverlapped=0x0) returned 1 [0109.008] CryptEncrypt (in: hKey=0x2f24b80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xaceff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xaceff2c*=0xf4250) returned 1 [0109.008] CryptEncrypt (in: hKey=0x2f24b80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4930000*, pdwDataLen=0xaceff24*=0x13c4a, dwBufLen=0xf4250 | out: pbData=0x4930000*, pdwDataLen=0xaceff24*=0x13c50) returned 1 [0109.008] SetFilePointer (in: hFile=0x544, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0109.008] WriteFile (in: hFile=0x544, lpBuffer=0x4930000*, nNumberOfBytesToWrite=0x13c50, lpNumberOfBytesWritten=0xaceff28, lpOverlapped=0x0 | out: lpBuffer=0x4930000*, lpNumberOfBytesWritten=0xaceff28*=0x13c50, lpOverlapped=0x0) returned 1 [0109.009] WriteFile (in: hFile=0x544, lpBuffer=0xacefef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xaceff18, lpOverlapped=0x0 | out: lpBuffer=0xacefef0*, lpNumberOfBytesWritten=0xaceff18*=0x6, lpOverlapped=0x0) returned 1 [0109.009] CryptExportKey (in: hKey=0x2f24b80, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xaceff38 | out: pbData=0x0*, pdwDataLen=0xaceff38*=0x10c) returned 1 [0109.009] CryptExportKey (in: hKey=0x2f24b80, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xacefd98, pdwDataLen=0xaceff38 | out: pbData=0xacefd98*, pdwDataLen=0xaceff38*=0x10c) returned 1 [0109.009] WriteFile (in: hFile=0x544, lpBuffer=0xacefd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaceff18, lpOverlapped=0x0 | out: lpBuffer=0xacefd98*, lpNumberOfBytesWritten=0xaceff18*=0x10c, lpOverlapped=0x0) returned 1 [0109.009] CloseHandle (hObject=0x544) returned 1 [0109.034] CryptDestroyKey (hKey=0x2f24b80) returned 1 [0109.034] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 73 os_tid = 0x136c [0109.005] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf", dwFileAttributes=0x80) returned 1 [0109.007] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0109.007] GetFileSizeEx (in: hFile=0x570, lpFileSize=0xae2ff10 | out: lpFileSize=0xae2ff10*=3314) returned 1 [0109.007] GetFileSizeEx (in: hFile=0x570, lpFileSize=0xae2ff50 | out: lpFileSize=0xae2ff50*=3314) returned 1 [0109.007] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0xbd0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.007] ReadFile (in: hFile=0x570, lpBuffer=0xae2fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xae2ff40, lpOverlapped=0x0 | out: lpBuffer=0xae2fed4*, lpNumberOfBytesRead=0xae2ff40*=0x19, lpOverlapped=0x0) returned 1 [0109.038] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0109.038] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xae2ff48 | out: phKey=0xae2ff48*=0x2f246c0) returned 1 [0109.038] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0109.038] ReadFile (in: hFile=0x570, lpBuffer=0x4a40000, nNumberOfBytesToRead=0xcf2, lpNumberOfBytesRead=0xae2ff28, lpOverlapped=0x0 | out: lpBuffer=0x4a40000*, lpNumberOfBytesRead=0xae2ff28*=0xcf2, lpOverlapped=0x0) returned 1 [0109.038] CryptEncrypt (in: hKey=0x2f246c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xae2ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xae2ff2c*=0xf4250) returned 1 [0109.038] CryptEncrypt (in: hKey=0x2f246c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4a40000*, pdwDataLen=0xae2ff24*=0xcf2, dwBufLen=0xf4250 | out: pbData=0x4a40000*, pdwDataLen=0xae2ff24*=0xd00) returned 1 [0109.038] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0109.038] WriteFile (in: hFile=0x570, lpBuffer=0x4a40000*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0xae2ff28, lpOverlapped=0x0 | out: lpBuffer=0x4a40000*, lpNumberOfBytesWritten=0xae2ff28*=0xd00, lpOverlapped=0x0) returned 1 [0109.038] WriteFile (in: hFile=0x570, lpBuffer=0xae2fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xae2ff18, lpOverlapped=0x0 | out: lpBuffer=0xae2fef0*, lpNumberOfBytesWritten=0xae2ff18*=0x6, lpOverlapped=0x0) returned 1 [0109.038] CryptExportKey (in: hKey=0x2f246c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xae2ff38 | out: pbData=0x0*, pdwDataLen=0xae2ff38*=0x10c) returned 1 [0109.038] CryptExportKey (in: hKey=0x2f246c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xae2fd98, pdwDataLen=0xae2ff38 | out: pbData=0xae2fd98*, pdwDataLen=0xae2ff38*=0x10c) returned 1 [0109.038] WriteFile (in: hFile=0x570, lpBuffer=0xae2fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xae2ff18, lpOverlapped=0x0 | out: lpBuffer=0xae2fd98*, lpNumberOfBytesWritten=0xae2ff18*=0x10c, lpOverlapped=0x0) returned 1 [0109.038] CloseHandle (hObject=0x570) returned 1 [0109.057] CryptDestroyKey (hKey=0x2f246c0) returned 1 [0109.057] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf.RYK" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf.ryk"), dwFlags=0x8) returned 1 Thread: id = 74 os_tid = 0x1398 [0109.037] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", dwFileAttributes=0x80) returned 1 [0109.059] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0109.059] GetFileSizeEx (in: hFile=0x570, lpFileSize=0xaf6ff10 | out: lpFileSize=0xaf6ff10*=77748) returned 1 [0109.059] GetFileSizeEx (in: hFile=0x570, lpFileSize=0xaf6ff50 | out: lpFileSize=0xaf6ff50*=77748) returned 1 [0109.059] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x12e92, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.059] ReadFile (in: hFile=0x570, lpBuffer=0xaf6fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xaf6ff40, lpOverlapped=0x0 | out: lpBuffer=0xaf6fed4*, lpNumberOfBytesRead=0xaf6ff40*=0x19, lpOverlapped=0x0) returned 1 [0109.061] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0109.061] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xaf6ff48 | out: phKey=0xaf6ff48*=0x2f246c0) returned 1 [0109.061] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0109.062] ReadFile (in: hFile=0x570, lpBuffer=0x4b50000, nNumberOfBytesToRead=0x12fb4, lpNumberOfBytesRead=0xaf6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4b50000*, lpNumberOfBytesRead=0xaf6ff28*=0x12fb4, lpOverlapped=0x0) returned 1 [0109.064] CryptEncrypt (in: hKey=0x2f246c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xaf6ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xaf6ff2c*=0xf4250) returned 1 [0109.064] CryptEncrypt (in: hKey=0x2f246c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4b50000*, pdwDataLen=0xaf6ff24*=0x12fb4, dwBufLen=0xf4250 | out: pbData=0x4b50000*, pdwDataLen=0xaf6ff24*=0x12fc0) returned 1 [0109.064] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0109.064] WriteFile (in: hFile=0x570, lpBuffer=0x4b50000*, nNumberOfBytesToWrite=0x12fc0, lpNumberOfBytesWritten=0xaf6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4b50000*, lpNumberOfBytesWritten=0xaf6ff28*=0x12fc0, lpOverlapped=0x0) returned 1 [0109.064] WriteFile (in: hFile=0x570, lpBuffer=0xaf6fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xaf6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaf6fef0*, lpNumberOfBytesWritten=0xaf6ff18*=0x6, lpOverlapped=0x0) returned 1 [0109.064] CryptExportKey (in: hKey=0x2f246c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xaf6ff38 | out: pbData=0x0*, pdwDataLen=0xaf6ff38*=0x10c) returned 1 [0109.064] CryptExportKey (in: hKey=0x2f246c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xaf6fd98, pdwDataLen=0xaf6ff38 | out: pbData=0xaf6fd98*, pdwDataLen=0xaf6ff38*=0x10c) returned 1 [0109.064] WriteFile (in: hFile=0x570, lpBuffer=0xaf6fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaf6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaf6fd98*, lpNumberOfBytesWritten=0xaf6ff18*=0x10c, lpOverlapped=0x0) returned 1 [0109.065] CloseHandle (hObject=0x570) returned 1 [0109.083] CryptDestroyKey (hKey=0x2f246c0) returned 1 [0109.083] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 75 os_tid = 0x1388 [0109.061] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf", dwFileAttributes=0x80) returned 1 [0109.462] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0109.462] GetFileSizeEx (in: hFile=0x570, lpFileSize=0xb0aff10 | out: lpFileSize=0xb0aff10*=3419) returned 1 [0109.462] GetFileSizeEx (in: hFile=0x570, lpFileSize=0xb0aff50 | out: lpFileSize=0xb0aff50*=3419) returned 1 [0109.462] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0xc39, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.462] ReadFile (in: hFile=0x570, lpBuffer=0xb0afed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb0aff40, lpOverlapped=0x0 | out: lpBuffer=0xb0afed4*, lpNumberOfBytesRead=0xb0aff40*=0x19, lpOverlapped=0x0) returned 1 [0109.463] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0109.463] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb0aff48 | out: phKey=0xb0aff48*=0x2f246c0) returned 1 [0109.463] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0109.463] ReadFile (in: hFile=0x570, lpBuffer=0x4c60000, nNumberOfBytesToRead=0xd5b, lpNumberOfBytesRead=0xb0aff28, lpOverlapped=0x0 | out: lpBuffer=0x4c60000*, lpNumberOfBytesRead=0xb0aff28*=0xd5b, lpOverlapped=0x0) returned 1 [0109.463] CryptEncrypt (in: hKey=0x2f246c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb0aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb0aff2c*=0xf4250) returned 1 [0109.464] CryptEncrypt (in: hKey=0x2f246c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4c60000*, pdwDataLen=0xb0aff24*=0xd5b, dwBufLen=0xf4250 | out: pbData=0x4c60000*, pdwDataLen=0xb0aff24*=0xd60) returned 1 [0109.464] SetFilePointer (in: hFile=0x570, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0109.464] WriteFile (in: hFile=0x570, lpBuffer=0x4c60000*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0xb0aff28, lpOverlapped=0x0 | out: lpBuffer=0x4c60000*, lpNumberOfBytesWritten=0xb0aff28*=0xd60, lpOverlapped=0x0) returned 1 [0109.464] WriteFile (in: hFile=0x570, lpBuffer=0xb0afef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb0aff18, lpOverlapped=0x0 | out: lpBuffer=0xb0afef0*, lpNumberOfBytesWritten=0xb0aff18*=0x6, lpOverlapped=0x0) returned 1 [0109.464] CryptExportKey (in: hKey=0x2f246c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb0aff38 | out: pbData=0x0*, pdwDataLen=0xb0aff38*=0x10c) returned 1 [0109.464] CryptExportKey (in: hKey=0x2f246c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb0afd98, pdwDataLen=0xb0aff38 | out: pbData=0xb0afd98*, pdwDataLen=0xb0aff38*=0x10c) returned 1 [0109.464] WriteFile (in: hFile=0x570, lpBuffer=0xb0afd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb0aff18, lpOverlapped=0x0 | out: lpBuffer=0xb0afd98*, lpNumberOfBytesWritten=0xb0aff18*=0x10c, lpOverlapped=0x0) returned 1 [0109.464] CloseHandle (hObject=0x570) returned 1 [0109.478] CryptDestroyKey (hKey=0x2f246c0) returned 1 [0109.478] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf.RYK" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf.ryk"), dwFlags=0x8) returned 1 Thread: id = 76 os_tid = 0x1390 [0109.063] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", dwFileAttributes=0x80) returned 1 [0109.483] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x544 [0109.483] GetFileSizeEx (in: hFile=0x544, lpFileSize=0xb1eff10 | out: lpFileSize=0xb1eff10*=82346) returned 1 [0109.483] GetFileSizeEx (in: hFile=0x544, lpFileSize=0xb1eff50 | out: lpFileSize=0xb1eff50*=82346) returned 1 [0109.483] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x14088, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.483] ReadFile (in: hFile=0x544, lpBuffer=0xb1efed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb1eff40, lpOverlapped=0x0 | out: lpBuffer=0xb1efed4*, lpNumberOfBytesRead=0xb1eff40*=0x19, lpOverlapped=0x0) returned 1 [0109.488] SetFilePointer (in: hFile=0x544, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0109.488] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb1eff48 | out: phKey=0xb1eff48*=0x2f246c0) returned 1 [0109.488] SetFilePointer (in: hFile=0x544, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0109.488] ReadFile (in: hFile=0x544, lpBuffer=0x4d70000, nNumberOfBytesToRead=0x141aa, lpNumberOfBytesRead=0xb1eff28, lpOverlapped=0x0 | out: lpBuffer=0x4d70000*, lpNumberOfBytesRead=0xb1eff28*=0x141aa, lpOverlapped=0x0) returned 1 [0109.493] CryptEncrypt (in: hKey=0x2f246c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb1eff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb1eff2c*=0xf4250) returned 1 [0109.493] CryptEncrypt (in: hKey=0x2f246c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4d70000*, pdwDataLen=0xb1eff24*=0x141aa, dwBufLen=0xf4250 | out: pbData=0x4d70000*, pdwDataLen=0xb1eff24*=0x141b0) returned 1 [0109.493] SetFilePointer (in: hFile=0x544, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0109.493] WriteFile (in: hFile=0x544, lpBuffer=0x4d70000*, nNumberOfBytesToWrite=0x141b0, lpNumberOfBytesWritten=0xb1eff28, lpOverlapped=0x0 | out: lpBuffer=0x4d70000*, lpNumberOfBytesWritten=0xb1eff28*=0x141b0, lpOverlapped=0x0) returned 1 [0109.493] WriteFile (in: hFile=0x544, lpBuffer=0xb1efef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb1eff18, lpOverlapped=0x0 | out: lpBuffer=0xb1efef0*, lpNumberOfBytesWritten=0xb1eff18*=0x6, lpOverlapped=0x0) returned 1 [0109.493] CryptExportKey (in: hKey=0x2f246c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb1eff38 | out: pbData=0x0*, pdwDataLen=0xb1eff38*=0x10c) returned 1 [0109.493] CryptExportKey (in: hKey=0x2f246c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb1efd98, pdwDataLen=0xb1eff38 | out: pbData=0xb1efd98*, pdwDataLen=0xb1eff38*=0x10c) returned 1 [0109.494] WriteFile (in: hFile=0x544, lpBuffer=0xb1efd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb1eff18, lpOverlapped=0x0 | out: lpBuffer=0xb1efd98*, lpNumberOfBytesWritten=0xb1eff18*=0x10c, lpOverlapped=0x0) returned 1 [0109.494] CloseHandle (hObject=0x544) returned 1 [0109.655] CryptDestroyKey (hKey=0x2f246c0) returned 1 [0109.656] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 81 os_tid = 0x1384 [0110.004] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf", dwFileAttributes=0x80) returned 1 [0110.004] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x458 [0110.004] GetFileSizeEx (in: hFile=0x458, lpFileSize=0xa62ff10 | out: lpFileSize=0xa62ff10*=8876) returned 1 [0110.004] GetFileSizeEx (in: hFile=0x458, lpFileSize=0xa62ff50 | out: lpFileSize=0xa62ff50*=8876) returned 1 [0110.004] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x218a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.005] ReadFile (in: hFile=0x458, lpBuffer=0xa62fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa62ff40, lpOverlapped=0x0 | out: lpBuffer=0xa62fed4*, lpNumberOfBytesRead=0xa62ff40*=0x19, lpOverlapped=0x0) returned 1 [0110.006] SetFilePointer (in: hFile=0x458, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.006] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa62ff48 | out: phKey=0xa62ff48*=0x2f24e40) returned 1 [0110.006] SetFilePointer (in: hFile=0x458, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.006] ReadFile (in: hFile=0x458, lpBuffer=0x42d0000, nNumberOfBytesToRead=0x22ac, lpNumberOfBytesRead=0xa62ff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa62ff28*=0x22ac, lpOverlapped=0x0) returned 1 [0110.007] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa62ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa62ff2c*=0xf4250) returned 1 [0110.007] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa62ff24*=0x22ac, dwBufLen=0xf4250 | out: pbData=0x42d0000*, pdwDataLen=0xa62ff24*=0x22b0) returned 1 [0110.007] SetFilePointer (in: hFile=0x458, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.007] WriteFile (in: hFile=0x458, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0x22b0, lpNumberOfBytesWritten=0xa62ff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa62ff28*=0x22b0, lpOverlapped=0x0) returned 1 [0110.007] WriteFile (in: hFile=0x458, lpBuffer=0xa62fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa62ff18, lpOverlapped=0x0 | out: lpBuffer=0xa62fef0*, lpNumberOfBytesWritten=0xa62ff18*=0x6, lpOverlapped=0x0) returned 1 [0110.007] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa62ff38 | out: pbData=0x0*, pdwDataLen=0xa62ff38*=0x10c) returned 1 [0110.007] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa62fd98, pdwDataLen=0xa62ff38 | out: pbData=0xa62fd98*, pdwDataLen=0xa62ff38*=0x10c) returned 1 [0110.007] WriteFile (in: hFile=0x458, lpBuffer=0xa62fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa62ff18, lpOverlapped=0x0 | out: lpBuffer=0xa62fd98*, lpNumberOfBytesWritten=0xa62ff18*=0x10c, lpOverlapped=0x0) returned 1 [0110.007] CloseHandle (hObject=0x458) returned 1 [0110.009] CryptDestroyKey (hKey=0x2f24e40) returned 1 [0110.009] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf.RYK" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf.ryk"), dwFlags=0x8) returned 1 Thread: id = 82 os_tid = 0x1368 [0110.006] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", dwFileAttributes=0x80) returned 1 [0110.006] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5d4 [0110.010] GetFileSizeEx (in: hFile=0x5d4, lpFileSize=0xa72ff10 | out: lpFileSize=0xa72ff10*=86284) returned 1 [0110.010] GetFileSizeEx (in: hFile=0x5d4, lpFileSize=0xa72ff50 | out: lpFileSize=0xa72ff50*=86284) returned 1 [0110.010] SetFilePointerEx (in: hFile=0x5d4, liDistanceToMove=0x14fea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.011] ReadFile (in: hFile=0x5d4, lpBuffer=0xa72fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa72ff40, lpOverlapped=0x0 | out: lpBuffer=0xa72fed4*, lpNumberOfBytesRead=0xa72ff40*=0x19, lpOverlapped=0x0) returned 1 [0110.013] SetFilePointer (in: hFile=0x5d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.013] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa72ff48 | out: phKey=0xa72ff48*=0x2f24e40) returned 1 [0110.013] SetFilePointer (in: hFile=0x5d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.013] ReadFile (in: hFile=0x5d4, lpBuffer=0x43e0000, nNumberOfBytesToRead=0x1510c, lpNumberOfBytesRead=0xa72ff28, lpOverlapped=0x0 | out: lpBuffer=0x43e0000*, lpNumberOfBytesRead=0xa72ff28*=0x1510c, lpOverlapped=0x0) returned 1 [0110.014] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa72ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa72ff2c*=0xf4250) returned 1 [0110.014] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x43e0000*, pdwDataLen=0xa72ff24*=0x1510c, dwBufLen=0xf4250 | out: pbData=0x43e0000*, pdwDataLen=0xa72ff24*=0x15110) returned 1 [0110.014] SetFilePointer (in: hFile=0x5d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.015] WriteFile (in: hFile=0x5d4, lpBuffer=0x43e0000*, nNumberOfBytesToWrite=0x15110, lpNumberOfBytesWritten=0xa72ff28, lpOverlapped=0x0 | out: lpBuffer=0x43e0000*, lpNumberOfBytesWritten=0xa72ff28*=0x15110, lpOverlapped=0x0) returned 1 [0110.015] WriteFile (in: hFile=0x5d4, lpBuffer=0xa72fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa72ff18, lpOverlapped=0x0 | out: lpBuffer=0xa72fef0*, lpNumberOfBytesWritten=0xa72ff18*=0x6, lpOverlapped=0x0) returned 1 [0110.015] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa72ff38 | out: pbData=0x0*, pdwDataLen=0xa72ff38*=0x10c) returned 1 [0110.015] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa72fd98, pdwDataLen=0xa72ff38 | out: pbData=0xa72fd98*, pdwDataLen=0xa72ff38*=0x10c) returned 1 [0110.015] WriteFile (in: hFile=0x5d4, lpBuffer=0xa72fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa72ff18, lpOverlapped=0x0 | out: lpBuffer=0xa72fd98*, lpNumberOfBytesWritten=0xa72ff18*=0x10c, lpOverlapped=0x0) returned 1 [0110.015] CloseHandle (hObject=0x5d4) returned 1 [0110.018] CryptDestroyKey (hKey=0x2f24e40) returned 1 [0110.018] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 83 os_tid = 0x1378 [0110.012] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf", dwFileAttributes=0x80) returned 1 [0110.013] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x458 [0110.013] GetFileSizeEx (in: hFile=0x458, lpFileSize=0xa82ff10 | out: lpFileSize=0xa82ff10*=3188) returned 1 [0110.014] GetFileSizeEx (in: hFile=0x458, lpFileSize=0xa82ff50 | out: lpFileSize=0xa82ff50*=3188) returned 1 [0110.014] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0xb52, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.023] ReadFile (in: hFile=0x458, lpBuffer=0xa82fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa82ff40, lpOverlapped=0x0 | out: lpBuffer=0xa82fed4*, lpNumberOfBytesRead=0xa82ff40*=0x19, lpOverlapped=0x0) returned 1 [0110.025] SetFilePointer (in: hFile=0x458, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.025] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa82ff48 | out: phKey=0xa82ff48*=0x2f24e40) returned 1 [0110.026] SetFilePointer (in: hFile=0x458, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.026] ReadFile (in: hFile=0x458, lpBuffer=0x44f0000, nNumberOfBytesToRead=0xc74, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x44f0000*, lpNumberOfBytesRead=0xa82ff28*=0xc74, lpOverlapped=0x0) returned 1 [0110.026] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4250) returned 1 [0110.026] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x44f0000*, pdwDataLen=0xa82ff24*=0xc74, dwBufLen=0xf4250 | out: pbData=0x44f0000*, pdwDataLen=0xa82ff24*=0xc80) returned 1 [0110.026] SetFilePointer (in: hFile=0x458, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.026] WriteFile (in: hFile=0x458, lpBuffer=0x44f0000*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x44f0000*, lpNumberOfBytesWritten=0xa82ff28*=0xc80, lpOverlapped=0x0) returned 1 [0110.026] WriteFile (in: hFile=0x458, lpBuffer=0xa82fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa82ff18, lpOverlapped=0x0 | out: lpBuffer=0xa82fef0*, lpNumberOfBytesWritten=0xa82ff18*=0x6, lpOverlapped=0x0) returned 1 [0110.026] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa82ff38 | out: pbData=0x0*, pdwDataLen=0xa82ff38*=0x10c) returned 1 [0110.026] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa82fd98, pdwDataLen=0xa82ff38 | out: pbData=0xa82fd98*, pdwDataLen=0xa82ff38*=0x10c) returned 1 [0110.026] WriteFile (in: hFile=0x458, lpBuffer=0xa82fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa82ff18, lpOverlapped=0x0 | out: lpBuffer=0xa82fd98*, lpNumberOfBytesWritten=0xa82ff18*=0x10c, lpOverlapped=0x0) returned 1 [0110.026] CloseHandle (hObject=0x458) returned 1 [0110.027] CryptDestroyKey (hKey=0x2f24e40) returned 1 [0110.027] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf.RYK" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf.ryk"), dwFlags=0x8) returned 1 Thread: id = 84 os_tid = 0x1360 [0110.028] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", dwFileAttributes=0x80) returned 1 [0110.030] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x458 [0110.030] GetFileSizeEx (in: hFile=0x458, lpFileSize=0xa92ff10 | out: lpFileSize=0xa92ff10*=77232) returned 1 [0110.030] GetFileSizeEx (in: hFile=0x458, lpFileSize=0xa92ff50 | out: lpFileSize=0xa92ff50*=77232) returned 1 [0110.030] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x12c8e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.030] ReadFile (in: hFile=0x458, lpBuffer=0xa92fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa92ff40, lpOverlapped=0x0 | out: lpBuffer=0xa92fed4*, lpNumberOfBytesRead=0xa92ff40*=0x19, lpOverlapped=0x0) returned 1 [0110.031] SetFilePointer (in: hFile=0x458, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.032] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa92ff48 | out: phKey=0xa92ff48*=0x2f24e40) returned 1 [0110.032] SetFilePointer (in: hFile=0x458, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.032] ReadFile (in: hFile=0x458, lpBuffer=0x4600000, nNumberOfBytesToRead=0x12db0, lpNumberOfBytesRead=0xa92ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa92ff28*=0x12db0, lpOverlapped=0x0) returned 1 [0110.033] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa92ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa92ff2c*=0xf4250) returned 1 [0110.033] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa92ff24*=0x12db0, dwBufLen=0xf4250 | out: pbData=0x4600000*, pdwDataLen=0xa92ff24*=0x12dc0) returned 1 [0110.033] SetFilePointer (in: hFile=0x458, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.033] WriteFile (in: hFile=0x458, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0x12dc0, lpNumberOfBytesWritten=0xa92ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa92ff28*=0x12dc0, lpOverlapped=0x0) returned 1 [0110.033] WriteFile (in: hFile=0x458, lpBuffer=0xa92fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa92ff18, lpOverlapped=0x0 | out: lpBuffer=0xa92fef0*, lpNumberOfBytesWritten=0xa92ff18*=0x6, lpOverlapped=0x0) returned 1 [0110.033] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa92ff38 | out: pbData=0x0*, pdwDataLen=0xa92ff38*=0x10c) returned 1 [0110.033] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa92fd98, pdwDataLen=0xa92ff38 | out: pbData=0xa92fd98*, pdwDataLen=0xa92ff38*=0x10c) returned 1 [0110.034] WriteFile (in: hFile=0x458, lpBuffer=0xa92fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa92ff18, lpOverlapped=0x0 | out: lpBuffer=0xa92fd98*, lpNumberOfBytesWritten=0xa92ff18*=0x10c, lpOverlapped=0x0) returned 1 [0110.034] CloseHandle (hObject=0x458) returned 1 [0110.036] CryptDestroyKey (hKey=0x2f24e40) returned 1 [0110.036] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 85 os_tid = 0xde8 [0110.031] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf", dwFileAttributes=0x80) returned 1 [0110.032] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5d4 [0110.032] GetFileSizeEx (in: hFile=0x5d4, lpFileSize=0xaa6ff10 | out: lpFileSize=0xaa6ff10*=3702) returned 1 [0110.032] GetFileSizeEx (in: hFile=0x5d4, lpFileSize=0xaa6ff50 | out: lpFileSize=0xaa6ff50*=3702) returned 1 [0110.037] SetFilePointerEx (in: hFile=0x5d4, liDistanceToMove=0xd54, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.037] ReadFile (in: hFile=0x5d4, lpBuffer=0xaa6fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xaa6ff40, lpOverlapped=0x0 | out: lpBuffer=0xaa6fed4*, lpNumberOfBytesRead=0xaa6ff40*=0x19, lpOverlapped=0x0) returned 1 [0110.039] SetFilePointer (in: hFile=0x5d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.039] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xaa6ff48 | out: phKey=0xaa6ff48*=0x2f24e40) returned 1 [0110.039] SetFilePointer (in: hFile=0x5d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.039] ReadFile (in: hFile=0x5d4, lpBuffer=0x4710000, nNumberOfBytesToRead=0xe76, lpNumberOfBytesRead=0xaa6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4710000*, lpNumberOfBytesRead=0xaa6ff28*=0xe76, lpOverlapped=0x0) returned 1 [0110.039] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xaa6ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xaa6ff2c*=0xf4250) returned 1 [0110.039] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4710000*, pdwDataLen=0xaa6ff24*=0xe76, dwBufLen=0xf4250 | out: pbData=0x4710000*, pdwDataLen=0xaa6ff24*=0xe80) returned 1 [0110.039] SetFilePointer (in: hFile=0x5d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.039] WriteFile (in: hFile=0x5d4, lpBuffer=0x4710000*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0xaa6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4710000*, lpNumberOfBytesWritten=0xaa6ff28*=0xe80, lpOverlapped=0x0) returned 1 [0110.039] WriteFile (in: hFile=0x5d4, lpBuffer=0xaa6fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xaa6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaa6fef0*, lpNumberOfBytesWritten=0xaa6ff18*=0x6, lpOverlapped=0x0) returned 1 [0110.039] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xaa6ff38 | out: pbData=0x0*, pdwDataLen=0xaa6ff38*=0x10c) returned 1 [0110.039] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xaa6fd98, pdwDataLen=0xaa6ff38 | out: pbData=0xaa6fd98*, pdwDataLen=0xaa6ff38*=0x10c) returned 1 [0110.040] WriteFile (in: hFile=0x5d4, lpBuffer=0xaa6fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaa6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaa6fd98*, lpNumberOfBytesWritten=0xaa6ff18*=0x10c, lpOverlapped=0x0) returned 1 [0110.040] CloseHandle (hObject=0x5d4) returned 1 [0110.040] CryptDestroyKey (hKey=0x2f24e40) returned 1 [0110.040] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf.RYK" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf.ryk"), dwFlags=0x8) returned 1 Thread: id = 86 os_tid = 0x2cc [0110.038] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", dwFileAttributes=0x80) returned 1 [0110.042] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x458 [0110.042] GetFileSizeEx (in: hFile=0x458, lpFileSize=0xabaff10 | out: lpFileSize=0xabaff10*=77022) returned 1 [0110.042] GetFileSizeEx (in: hFile=0x458, lpFileSize=0xabaff50 | out: lpFileSize=0xabaff50*=77022) returned 1 [0110.042] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x12bbc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.042] ReadFile (in: hFile=0x458, lpBuffer=0xabafed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xabaff40, lpOverlapped=0x0 | out: lpBuffer=0xabafed4*, lpNumberOfBytesRead=0xabaff40*=0x19, lpOverlapped=0x0) returned 1 [0110.044] SetFilePointer (in: hFile=0x458, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.044] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xabaff48 | out: phKey=0xabaff48*=0x2f24e40) returned 1 [0110.044] SetFilePointer (in: hFile=0x458, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.044] ReadFile (in: hFile=0x458, lpBuffer=0x4820000, nNumberOfBytesToRead=0x12cde, lpNumberOfBytesRead=0xabaff28, lpOverlapped=0x0 | out: lpBuffer=0x4820000*, lpNumberOfBytesRead=0xabaff28*=0x12cde, lpOverlapped=0x0) returned 1 [0110.045] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xabaff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xabaff2c*=0xf4250) returned 1 [0110.045] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4820000*, pdwDataLen=0xabaff24*=0x12cde, dwBufLen=0xf4250 | out: pbData=0x4820000*, pdwDataLen=0xabaff24*=0x12ce0) returned 1 [0110.045] SetFilePointer (in: hFile=0x458, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.045] WriteFile (in: hFile=0x458, lpBuffer=0x4820000*, nNumberOfBytesToWrite=0x12ce0, lpNumberOfBytesWritten=0xabaff28, lpOverlapped=0x0 | out: lpBuffer=0x4820000*, lpNumberOfBytesWritten=0xabaff28*=0x12ce0, lpOverlapped=0x0) returned 1 [0110.046] WriteFile (in: hFile=0x458, lpBuffer=0xabafef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xabaff18, lpOverlapped=0x0 | out: lpBuffer=0xabafef0*, lpNumberOfBytesWritten=0xabaff18*=0x6, lpOverlapped=0x0) returned 1 [0110.046] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xabaff38 | out: pbData=0x0*, pdwDataLen=0xabaff38*=0x10c) returned 1 [0110.046] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xabafd98, pdwDataLen=0xabaff38 | out: pbData=0xabafd98*, pdwDataLen=0xabaff38*=0x10c) returned 1 [0110.046] WriteFile (in: hFile=0x458, lpBuffer=0xabafd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xabaff18, lpOverlapped=0x0 | out: lpBuffer=0xabafd98*, lpNumberOfBytesWritten=0xabaff18*=0x10c, lpOverlapped=0x0) returned 1 [0110.046] CloseHandle (hObject=0x458) returned 1 [0110.048] CryptDestroyKey (hKey=0x2f24e40) returned 1 [0110.048] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 87 os_tid = 0xbf4 [0110.044] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf", dwFileAttributes=0x80) returned 1 [0110.044] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5d4 [0110.044] GetFileSizeEx (in: hFile=0x5d4, lpFileSize=0xaceff10 | out: lpFileSize=0xaceff10*=3526) returned 1 [0110.044] GetFileSizeEx (in: hFile=0x5d4, lpFileSize=0xaceff50 | out: lpFileSize=0xaceff50*=3526) returned 1 [0110.048] SetFilePointerEx (in: hFile=0x5d4, liDistanceToMove=0xca4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.050] ReadFile (in: hFile=0x5d4, lpBuffer=0xacefed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xaceff40, lpOverlapped=0x0 | out: lpBuffer=0xacefed4*, lpNumberOfBytesRead=0xaceff40*=0x19, lpOverlapped=0x0) returned 1 [0110.051] SetFilePointer (in: hFile=0x5d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.052] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xaceff48 | out: phKey=0xaceff48*=0x2f24e40) returned 1 [0110.052] SetFilePointer (in: hFile=0x5d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.052] ReadFile (in: hFile=0x5d4, lpBuffer=0x4930000, nNumberOfBytesToRead=0xdc6, lpNumberOfBytesRead=0xaceff28, lpOverlapped=0x0 | out: lpBuffer=0x4930000*, lpNumberOfBytesRead=0xaceff28*=0xdc6, lpOverlapped=0x0) returned 1 [0110.052] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xaceff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xaceff2c*=0xf4250) returned 1 [0110.052] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4930000*, pdwDataLen=0xaceff24*=0xdc6, dwBufLen=0xf4250 | out: pbData=0x4930000*, pdwDataLen=0xaceff24*=0xdd0) returned 1 [0110.052] SetFilePointer (in: hFile=0x5d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.052] WriteFile (in: hFile=0x5d4, lpBuffer=0x4930000*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0xaceff28, lpOverlapped=0x0 | out: lpBuffer=0x4930000*, lpNumberOfBytesWritten=0xaceff28*=0xdd0, lpOverlapped=0x0) returned 1 [0110.052] WriteFile (in: hFile=0x5d4, lpBuffer=0xacefef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xaceff18, lpOverlapped=0x0 | out: lpBuffer=0xacefef0*, lpNumberOfBytesWritten=0xaceff18*=0x6, lpOverlapped=0x0) returned 1 [0110.052] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xaceff38 | out: pbData=0x0*, pdwDataLen=0xaceff38*=0x10c) returned 1 [0110.052] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xacefd98, pdwDataLen=0xaceff38 | out: pbData=0xacefd98*, pdwDataLen=0xaceff38*=0x10c) returned 1 [0110.052] WriteFile (in: hFile=0x5d4, lpBuffer=0xacefd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaceff18, lpOverlapped=0x0 | out: lpBuffer=0xacefd98*, lpNumberOfBytesWritten=0xaceff18*=0x10c, lpOverlapped=0x0) returned 1 [0110.052] CloseHandle (hObject=0x5d4) returned 1 [0110.053] CryptDestroyKey (hKey=0x2f24e40) returned 1 [0110.053] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf.RYK" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf.ryk"), dwFlags=0x8) returned 1 Thread: id = 88 os_tid = 0xde0 [0110.051] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", dwFileAttributes=0x80) returned 1 [0110.055] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x458 [0110.055] GetFileSizeEx (in: hFile=0x458, lpFileSize=0xae2ff10 | out: lpFileSize=0xae2ff10*=82962) returned 1 [0110.055] GetFileSizeEx (in: hFile=0x458, lpFileSize=0xae2ff50 | out: lpFileSize=0xae2ff50*=82962) returned 1 [0110.055] SetFilePointerEx (in: hFile=0x458, liDistanceToMove=0x142f0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.055] ReadFile (in: hFile=0x458, lpBuffer=0xae2fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xae2ff40, lpOverlapped=0x0 | out: lpBuffer=0xae2fed4*, lpNumberOfBytesRead=0xae2ff40*=0x19, lpOverlapped=0x0) returned 1 [0110.057] SetFilePointer (in: hFile=0x458, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.057] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xae2ff48 | out: phKey=0xae2ff48*=0x2f24e40) returned 1 [0110.057] SetFilePointer (in: hFile=0x458, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.057] ReadFile (in: hFile=0x458, lpBuffer=0x4a40000, nNumberOfBytesToRead=0x14412, lpNumberOfBytesRead=0xae2ff28, lpOverlapped=0x0 | out: lpBuffer=0x4a40000*, lpNumberOfBytesRead=0xae2ff28*=0x14412, lpOverlapped=0x0) returned 1 [0110.058] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xae2ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xae2ff2c*=0xf4250) returned 1 [0110.058] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4a40000*, pdwDataLen=0xae2ff24*=0x14412, dwBufLen=0xf4250 | out: pbData=0x4a40000*, pdwDataLen=0xae2ff24*=0x14420) returned 1 [0110.058] SetFilePointer (in: hFile=0x458, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.058] WriteFile (in: hFile=0x458, lpBuffer=0x4a40000*, nNumberOfBytesToWrite=0x14420, lpNumberOfBytesWritten=0xae2ff28, lpOverlapped=0x0 | out: lpBuffer=0x4a40000*, lpNumberOfBytesWritten=0xae2ff28*=0x14420, lpOverlapped=0x0) returned 1 [0110.059] WriteFile (in: hFile=0x458, lpBuffer=0xae2fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xae2ff18, lpOverlapped=0x0 | out: lpBuffer=0xae2fef0*, lpNumberOfBytesWritten=0xae2ff18*=0x6, lpOverlapped=0x0) returned 1 [0110.059] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xae2ff38 | out: pbData=0x0*, pdwDataLen=0xae2ff38*=0x10c) returned 1 [0110.059] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xae2fd98, pdwDataLen=0xae2ff38 | out: pbData=0xae2fd98*, pdwDataLen=0xae2ff38*=0x10c) returned 1 [0110.059] WriteFile (in: hFile=0x458, lpBuffer=0xae2fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xae2ff18, lpOverlapped=0x0 | out: lpBuffer=0xae2fd98*, lpNumberOfBytesWritten=0xae2ff18*=0x10c, lpOverlapped=0x0) returned 1 [0110.059] CloseHandle (hObject=0x458) returned 1 [0110.061] CryptDestroyKey (hKey=0x2f24e40) returned 1 [0110.061] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 89 os_tid = 0x1358 [0110.056] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf", dwFileAttributes=0x80) returned 1 [0110.057] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5d4 [0110.057] GetFileSizeEx (in: hFile=0x5d4, lpFileSize=0xaf6ff10 | out: lpFileSize=0xaf6ff10*=6851) returned 1 [0110.057] GetFileSizeEx (in: hFile=0x5d4, lpFileSize=0xaf6ff50 | out: lpFileSize=0xaf6ff50*=6851) returned 1 [0110.057] SetFilePointerEx (in: hFile=0x5d4, liDistanceToMove=0x19a1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.063] ReadFile (in: hFile=0x5d4, lpBuffer=0xaf6fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xaf6ff40, lpOverlapped=0x0 | out: lpBuffer=0xaf6fed4*, lpNumberOfBytesRead=0xaf6ff40*=0x19, lpOverlapped=0x0) returned 1 [0110.068] SetFilePointer (in: hFile=0x5d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.068] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xaf6ff48 | out: phKey=0xaf6ff48*=0x2f24e40) returned 1 [0110.068] SetFilePointer (in: hFile=0x5d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.068] ReadFile (in: hFile=0x5d4, lpBuffer=0x4b50000, nNumberOfBytesToRead=0x1ac3, lpNumberOfBytesRead=0xaf6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4b50000*, lpNumberOfBytesRead=0xaf6ff28*=0x1ac3, lpOverlapped=0x0) returned 1 [0110.068] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xaf6ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xaf6ff2c*=0xf4250) returned 1 [0110.068] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4b50000*, pdwDataLen=0xaf6ff24*=0x1ac3, dwBufLen=0xf4250 | out: pbData=0x4b50000*, pdwDataLen=0xaf6ff24*=0x1ad0) returned 1 [0110.068] SetFilePointer (in: hFile=0x5d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.068] WriteFile (in: hFile=0x5d4, lpBuffer=0x4b50000*, nNumberOfBytesToWrite=0x1ad0, lpNumberOfBytesWritten=0xaf6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4b50000*, lpNumberOfBytesWritten=0xaf6ff28*=0x1ad0, lpOverlapped=0x0) returned 1 [0110.069] WriteFile (in: hFile=0x5d4, lpBuffer=0xaf6fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xaf6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaf6fef0*, lpNumberOfBytesWritten=0xaf6ff18*=0x6, lpOverlapped=0x0) returned 1 [0110.069] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xaf6ff38 | out: pbData=0x0*, pdwDataLen=0xaf6ff38*=0x10c) returned 1 [0110.069] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xaf6fd98, pdwDataLen=0xaf6ff38 | out: pbData=0xaf6fd98*, pdwDataLen=0xaf6ff38*=0x10c) returned 1 [0110.069] WriteFile (in: hFile=0x5d4, lpBuffer=0xaf6fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaf6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaf6fd98*, lpNumberOfBytesWritten=0xaf6ff18*=0x10c, lpOverlapped=0x0) returned 1 [0110.069] CloseHandle (hObject=0x5d4) returned 1 [0110.070] CryptDestroyKey (hKey=0x2f24e40) returned 1 [0110.070] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf.RYK" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf.ryk"), dwFlags=0x8) returned 1 Thread: id = 90 os_tid = 0xb68 [0110.072] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", dwFileAttributes=0x80) returned 1 [0110.072] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5d4 [0110.072] GetFileSizeEx (in: hFile=0x5d4, lpFileSize=0xb0aff10 | out: lpFileSize=0xb0aff10*=72076) returned 1 [0110.072] GetFileSizeEx (in: hFile=0x5d4, lpFileSize=0xb0aff50 | out: lpFileSize=0xb0aff50*=72076) returned 1 [0110.072] SetFilePointerEx (in: hFile=0x5d4, liDistanceToMove=0x1186a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.072] ReadFile (in: hFile=0x5d4, lpBuffer=0xb0afed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb0aff40, lpOverlapped=0x0 | out: lpBuffer=0xb0afed4*, lpNumberOfBytesRead=0xb0aff40*=0x19, lpOverlapped=0x0) returned 1 [0110.074] SetFilePointer (in: hFile=0x5d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.074] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb0aff48 | out: phKey=0xb0aff48*=0x2f24e40) returned 1 [0110.074] SetFilePointer (in: hFile=0x5d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.074] ReadFile (in: hFile=0x5d4, lpBuffer=0x4c60000, nNumberOfBytesToRead=0x1198c, lpNumberOfBytesRead=0xb0aff28, lpOverlapped=0x0 | out: lpBuffer=0x4c60000*, lpNumberOfBytesRead=0xb0aff28*=0x1198c, lpOverlapped=0x0) returned 1 [0110.075] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb0aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb0aff2c*=0xf4250) returned 1 [0110.076] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4c60000*, pdwDataLen=0xb0aff24*=0x1198c, dwBufLen=0xf4250 | out: pbData=0x4c60000*, pdwDataLen=0xb0aff24*=0x11990) returned 1 [0110.076] SetFilePointer (in: hFile=0x5d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.076] WriteFile (in: hFile=0x5d4, lpBuffer=0x4c60000*, nNumberOfBytesToWrite=0x11990, lpNumberOfBytesWritten=0xb0aff28, lpOverlapped=0x0 | out: lpBuffer=0x4c60000*, lpNumberOfBytesWritten=0xb0aff28*=0x11990, lpOverlapped=0x0) returned 1 [0110.076] WriteFile (in: hFile=0x5d4, lpBuffer=0xb0afef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb0aff18, lpOverlapped=0x0 | out: lpBuffer=0xb0afef0*, lpNumberOfBytesWritten=0xb0aff18*=0x6, lpOverlapped=0x0) returned 1 [0110.076] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb0aff38 | out: pbData=0x0*, pdwDataLen=0xb0aff38*=0x10c) returned 1 [0110.076] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb0afd98, pdwDataLen=0xb0aff38 | out: pbData=0xb0afd98*, pdwDataLen=0xb0aff38*=0x10c) returned 1 [0110.076] WriteFile (in: hFile=0x5d4, lpBuffer=0xb0afd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb0aff18, lpOverlapped=0x0 | out: lpBuffer=0xb0afd98*, lpNumberOfBytesWritten=0xb0aff18*=0x10c, lpOverlapped=0x0) returned 1 [0110.076] CloseHandle (hObject=0x5d4) returned 1 [0110.078] CryptDestroyKey (hKey=0x2f24e40) returned 1 [0110.078] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 91 os_tid = 0xacc [0110.074] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf", dwFileAttributes=0x80) returned 1 [0110.423] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x508 [0110.423] GetFileSizeEx (in: hFile=0x508, lpFileSize=0xb1eff10 | out: lpFileSize=0xb1eff10*=4254) returned 1 [0110.423] GetFileSizeEx (in: hFile=0x508, lpFileSize=0xb1eff50 | out: lpFileSize=0xb1eff50*=4254) returned 1 [0110.423] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0xf7c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.423] ReadFile (in: hFile=0x508, lpBuffer=0xb1efed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb1eff40, lpOverlapped=0x0 | out: lpBuffer=0xb1efed4*, lpNumberOfBytesRead=0xb1eff40*=0x19, lpOverlapped=0x0) returned 1 [0110.426] SetFilePointer (in: hFile=0x508, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.426] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb1eff48 | out: phKey=0xb1eff48*=0x2f24bc0) returned 1 [0110.426] SetFilePointer (in: hFile=0x508, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.427] ReadFile (in: hFile=0x508, lpBuffer=0x4d70000, nNumberOfBytesToRead=0x109e, lpNumberOfBytesRead=0xb1eff28, lpOverlapped=0x0 | out: lpBuffer=0x4d70000*, lpNumberOfBytesRead=0xb1eff28*=0x109e, lpOverlapped=0x0) returned 1 [0110.428] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb1eff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb1eff2c*=0xf4250) returned 1 [0110.428] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4d70000*, pdwDataLen=0xb1eff24*=0x109e, dwBufLen=0xf4250 | out: pbData=0x4d70000*, pdwDataLen=0xb1eff24*=0x10a0) returned 1 [0110.428] SetFilePointer (in: hFile=0x508, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.428] WriteFile (in: hFile=0x508, lpBuffer=0x4d70000*, nNumberOfBytesToWrite=0x10a0, lpNumberOfBytesWritten=0xb1eff28, lpOverlapped=0x0 | out: lpBuffer=0x4d70000*, lpNumberOfBytesWritten=0xb1eff28*=0x10a0, lpOverlapped=0x0) returned 1 [0110.429] WriteFile (in: hFile=0x508, lpBuffer=0xb1efef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb1eff18, lpOverlapped=0x0 | out: lpBuffer=0xb1efef0*, lpNumberOfBytesWritten=0xb1eff18*=0x6, lpOverlapped=0x0) returned 1 [0110.429] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb1eff38 | out: pbData=0x0*, pdwDataLen=0xb1eff38*=0x10c) returned 1 [0110.429] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb1efd98, pdwDataLen=0xb1eff38 | out: pbData=0xb1efd98*, pdwDataLen=0xb1eff38*=0x10c) returned 1 [0110.429] WriteFile (in: hFile=0x508, lpBuffer=0xb1efd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb1eff18, lpOverlapped=0x0 | out: lpBuffer=0xb1efd98*, lpNumberOfBytesWritten=0xb1eff18*=0x10c, lpOverlapped=0x0) returned 1 [0110.429] CloseHandle (hObject=0x508) returned 1 [0110.430] CryptDestroyKey (hKey=0x2f24bc0) returned 1 [0110.430] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf.RYK" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf.ryk"), dwFlags=0x8) returned 1 Thread: id = 92 os_tid = 0xe08 [0110.074] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", dwFileAttributes=0x80) returned 1 [0110.427] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x520 [0110.427] GetFileSizeEx (in: hFile=0x520, lpFileSize=0xb32ff10 | out: lpFileSize=0xb32ff10*=86442) returned 1 [0110.427] GetFileSizeEx (in: hFile=0x520, lpFileSize=0xb32ff50 | out: lpFileSize=0xb32ff50*=86442) returned 1 [0110.427] SetFilePointerEx (in: hFile=0x520, liDistanceToMove=0x15088, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.427] ReadFile (in: hFile=0x520, lpBuffer=0xb32fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb32ff40, lpOverlapped=0x0 | out: lpBuffer=0xb32fed4*, lpNumberOfBytesRead=0xb32ff40*=0x19, lpOverlapped=0x0) returned 1 [0110.436] SetFilePointer (in: hFile=0x520, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.436] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb32ff48 | out: phKey=0xb32ff48*=0x2f24e40) returned 1 [0110.436] SetFilePointer (in: hFile=0x520, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.436] ReadFile (in: hFile=0x520, lpBuffer=0x4e80000, nNumberOfBytesToRead=0x151aa, lpNumberOfBytesRead=0xb32ff28, lpOverlapped=0x0 | out: lpBuffer=0x4e80000*, lpNumberOfBytesRead=0xb32ff28*=0x151aa, lpOverlapped=0x0) returned 1 [0110.445] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb32ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb32ff2c*=0xf4250) returned 1 [0110.445] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4e80000*, pdwDataLen=0xb32ff24*=0x151aa, dwBufLen=0xf4250 | out: pbData=0x4e80000*, pdwDataLen=0xb32ff24*=0x151b0) returned 1 [0110.445] SetFilePointer (in: hFile=0x520, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.445] WriteFile (in: hFile=0x520, lpBuffer=0x4e80000*, nNumberOfBytesToWrite=0x151b0, lpNumberOfBytesWritten=0xb32ff28, lpOverlapped=0x0 | out: lpBuffer=0x4e80000*, lpNumberOfBytesWritten=0xb32ff28*=0x151b0, lpOverlapped=0x0) returned 1 [0110.446] WriteFile (in: hFile=0x520, lpBuffer=0xb32fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb32ff18, lpOverlapped=0x0 | out: lpBuffer=0xb32fef0*, lpNumberOfBytesWritten=0xb32ff18*=0x6, lpOverlapped=0x0) returned 1 [0110.446] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb32ff38 | out: pbData=0x0*, pdwDataLen=0xb32ff38*=0x10c) returned 1 [0110.446] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb32fd98, pdwDataLen=0xb32ff38 | out: pbData=0xb32fd98*, pdwDataLen=0xb32ff38*=0x10c) returned 1 [0110.446] WriteFile (in: hFile=0x520, lpBuffer=0xb32fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb32ff18, lpOverlapped=0x0 | out: lpBuffer=0xb32fd98*, lpNumberOfBytesWritten=0xb32ff18*=0x10c, lpOverlapped=0x0) returned 1 [0110.446] CloseHandle (hObject=0x520) returned 1 [0110.463] CryptDestroyKey (hKey=0x2f24e40) returned 1 [0110.463] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 104 os_tid = 0xefc [0110.936] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf", dwFileAttributes=0x80) returned 1 [0110.937] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e4 [0110.937] GetFileSizeEx (in: hFile=0x5e4, lpFileSize=0xa62ff10 | out: lpFileSize=0xa62ff10*=3643) returned 1 [0110.937] GetFileSizeEx (in: hFile=0x5e4, lpFileSize=0xa62ff50 | out: lpFileSize=0xa62ff50*=3643) returned 1 [0110.938] SetFilePointerEx (in: hFile=0x5e4, liDistanceToMove=0xd19, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.938] ReadFile (in: hFile=0x5e4, lpBuffer=0xa62fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa62ff40, lpOverlapped=0x0 | out: lpBuffer=0xa62fed4*, lpNumberOfBytesRead=0xa62ff40*=0x19, lpOverlapped=0x0) returned 1 [0110.940] SetFilePointer (in: hFile=0x5e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.940] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa62ff48 | out: phKey=0xa62ff48*=0x2f24bc0) returned 1 [0110.940] SetFilePointer (in: hFile=0x5e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.940] ReadFile (in: hFile=0x5e4, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xe3b, lpNumberOfBytesRead=0xa62ff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa62ff28*=0xe3b, lpOverlapped=0x0) returned 1 [0110.940] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa62ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa62ff2c*=0xf4250) returned 1 [0110.940] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa62ff24*=0xe3b, dwBufLen=0xf4250 | out: pbData=0x42d0000*, pdwDataLen=0xa62ff24*=0xe40) returned 1 [0110.940] SetFilePointer (in: hFile=0x5e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.940] WriteFile (in: hFile=0x5e4, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0xa62ff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa62ff28*=0xe40, lpOverlapped=0x0) returned 1 [0110.940] WriteFile (in: hFile=0x5e4, lpBuffer=0xa62fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa62ff18, lpOverlapped=0x0 | out: lpBuffer=0xa62fef0*, lpNumberOfBytesWritten=0xa62ff18*=0x6, lpOverlapped=0x0) returned 1 [0110.940] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa62ff38 | out: pbData=0x0*, pdwDataLen=0xa62ff38*=0x10c) returned 1 [0110.940] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa62fd98, pdwDataLen=0xa62ff38 | out: pbData=0xa62fd98*, pdwDataLen=0xa62ff38*=0x10c) returned 1 [0110.941] WriteFile (in: hFile=0x5e4, lpBuffer=0xa62fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa62ff18, lpOverlapped=0x0 | out: lpBuffer=0xa62fd98*, lpNumberOfBytesWritten=0xa62ff18*=0x10c, lpOverlapped=0x0) returned 1 [0110.941] CloseHandle (hObject=0x5e4) returned 1 [0110.942] CryptDestroyKey (hKey=0x2f24bc0) returned 1 [0110.942] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf.RYK" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf.ryk"), dwFlags=0x8) returned 1 Thread: id = 105 os_tid = 0x13e0 [0110.948] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", dwFileAttributes=0x80) returned 1 [0110.962] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e8 [0110.962] GetFileSizeEx (in: hFile=0x5e8, lpFileSize=0xa72ff10 | out: lpFileSize=0xa72ff10*=80060) returned 1 [0110.962] GetFileSizeEx (in: hFile=0x5e8, lpFileSize=0xa72ff50 | out: lpFileSize=0xa72ff50*=80060) returned 1 [0110.962] SetFilePointerEx (in: hFile=0x5e8, liDistanceToMove=0x1379a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.962] ReadFile (in: hFile=0x5e8, lpBuffer=0xa72fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa72ff40, lpOverlapped=0x0 | out: lpBuffer=0xa72fed4*, lpNumberOfBytesRead=0xa72ff40*=0x19, lpOverlapped=0x0) returned 1 [0110.984] SetFilePointer (in: hFile=0x5e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.984] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa72ff48 | out: phKey=0xa72ff48*=0x2f24bc0) returned 1 [0110.984] SetFilePointer (in: hFile=0x5e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.984] ReadFile (in: hFile=0x5e8, lpBuffer=0x43e0000, nNumberOfBytesToRead=0x138bc, lpNumberOfBytesRead=0xa72ff28, lpOverlapped=0x0 | out: lpBuffer=0x43e0000*, lpNumberOfBytesRead=0xa72ff28*=0x138bc, lpOverlapped=0x0) returned 1 [0110.985] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa72ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa72ff2c*=0xf4250) returned 1 [0110.985] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x43e0000*, pdwDataLen=0xa72ff24*=0x138bc, dwBufLen=0xf4250 | out: pbData=0x43e0000*, pdwDataLen=0xa72ff24*=0x138c0) returned 1 [0110.985] SetFilePointer (in: hFile=0x5e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.985] WriteFile (in: hFile=0x5e8, lpBuffer=0x43e0000*, nNumberOfBytesToWrite=0x138c0, lpNumberOfBytesWritten=0xa72ff28, lpOverlapped=0x0 | out: lpBuffer=0x43e0000*, lpNumberOfBytesWritten=0xa72ff28*=0x138c0, lpOverlapped=0x0) returned 1 [0110.986] WriteFile (in: hFile=0x5e8, lpBuffer=0xa72fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa72ff18, lpOverlapped=0x0 | out: lpBuffer=0xa72fef0*, lpNumberOfBytesWritten=0xa72ff18*=0x6, lpOverlapped=0x0) returned 1 [0110.986] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa72ff38 | out: pbData=0x0*, pdwDataLen=0xa72ff38*=0x10c) returned 1 [0110.986] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa72fd98, pdwDataLen=0xa72ff38 | out: pbData=0xa72fd98*, pdwDataLen=0xa72ff38*=0x10c) returned 1 [0110.986] WriteFile (in: hFile=0x5e8, lpBuffer=0xa72fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa72ff18, lpOverlapped=0x0 | out: lpBuffer=0xa72fd98*, lpNumberOfBytesWritten=0xa72ff18*=0x10c, lpOverlapped=0x0) returned 1 [0110.986] CloseHandle (hObject=0x5e8) returned 1 [0110.988] CryptDestroyKey (hKey=0x2f24bc0) returned 1 [0110.988] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 106 os_tid = 0x13f0 [0110.983] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf", dwFileAttributes=0x80) returned 1 [0110.984] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x600 [0110.984] GetFileSizeEx (in: hFile=0x600, lpFileSize=0xa82ff10 | out: lpFileSize=0xa82ff10*=10125) returned 1 [0110.984] GetFileSizeEx (in: hFile=0x600, lpFileSize=0xa82ff50 | out: lpFileSize=0xa82ff50*=10125) returned 1 [0110.984] SetFilePointerEx (in: hFile=0x600, liDistanceToMove=0x266b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.984] ReadFile (in: hFile=0x600, lpBuffer=0xa82fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa82ff40, lpOverlapped=0x0 | out: lpBuffer=0xa82fed4*, lpNumberOfBytesRead=0xa82ff40*=0x19, lpOverlapped=0x0) returned 1 [0110.993] SetFilePointer (in: hFile=0x600, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.993] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa82ff48 | out: phKey=0xa82ff48*=0x2f24bc0) returned 1 [0110.993] SetFilePointer (in: hFile=0x600, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.993] ReadFile (in: hFile=0x600, lpBuffer=0x44f0000, nNumberOfBytesToRead=0x278d, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x44f0000*, lpNumberOfBytesRead=0xa82ff28*=0x278d, lpOverlapped=0x0) returned 1 [0110.994] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4250) returned 1 [0110.994] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x44f0000*, pdwDataLen=0xa82ff24*=0x278d, dwBufLen=0xf4250 | out: pbData=0x44f0000*, pdwDataLen=0xa82ff24*=0x2790) returned 1 [0110.994] SetFilePointer (in: hFile=0x600, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0110.994] WriteFile (in: hFile=0x600, lpBuffer=0x44f0000*, nNumberOfBytesToWrite=0x2790, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x44f0000*, lpNumberOfBytesWritten=0xa82ff28*=0x2790, lpOverlapped=0x0) returned 1 [0110.994] WriteFile (in: hFile=0x600, lpBuffer=0xa82fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa82ff18, lpOverlapped=0x0 | out: lpBuffer=0xa82fef0*, lpNumberOfBytesWritten=0xa82ff18*=0x6, lpOverlapped=0x0) returned 1 [0110.994] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa82ff38 | out: pbData=0x0*, pdwDataLen=0xa82ff38*=0x10c) returned 1 [0110.995] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa82fd98, pdwDataLen=0xa82ff38 | out: pbData=0xa82fd98*, pdwDataLen=0xa82ff38*=0x10c) returned 1 [0110.995] WriteFile (in: hFile=0x600, lpBuffer=0xa82fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa82ff18, lpOverlapped=0x0 | out: lpBuffer=0xa82fd98*, lpNumberOfBytesWritten=0xa82ff18*=0x10c, lpOverlapped=0x0) returned 1 [0110.995] CloseHandle (hObject=0x600) returned 1 [0110.996] CryptDestroyKey (hKey=0x2f24bc0) returned 1 [0110.996] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf.RYK" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf.ryk"), dwFlags=0x8) returned 1 Thread: id = 107 os_tid = 0xf40 [0110.994] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", dwFileAttributes=0x80) returned 1 [0110.998] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x600 [0110.998] GetFileSizeEx (in: hFile=0x600, lpFileSize=0xa92ff10 | out: lpFileSize=0xa92ff10*=68226) returned 1 [0110.998] GetFileSizeEx (in: hFile=0x600, lpFileSize=0xa92ff50 | out: lpFileSize=0xa92ff50*=68226) returned 1 [0110.998] SetFilePointerEx (in: hFile=0x600, liDistanceToMove=0x10960, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.998] ReadFile (in: hFile=0x600, lpBuffer=0xa92fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa92ff40, lpOverlapped=0x0 | out: lpBuffer=0xa92fed4*, lpNumberOfBytesRead=0xa92ff40*=0x19, lpOverlapped=0x0) returned 1 [0111.000] SetFilePointer (in: hFile=0x600, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.000] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa92ff48 | out: phKey=0xa92ff48*=0x2f24bc0) returned 1 [0111.000] SetFilePointer (in: hFile=0x600, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.000] ReadFile (in: hFile=0x600, lpBuffer=0x4600000, nNumberOfBytesToRead=0x10a82, lpNumberOfBytesRead=0xa92ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa92ff28*=0x10a82, lpOverlapped=0x0) returned 1 [0111.001] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa92ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa92ff2c*=0xf4250) returned 1 [0111.001] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa92ff24*=0x10a82, dwBufLen=0xf4250 | out: pbData=0x4600000*, pdwDataLen=0xa92ff24*=0x10a90) returned 1 [0111.001] SetFilePointer (in: hFile=0x600, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.001] WriteFile (in: hFile=0x600, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0x10a90, lpNumberOfBytesWritten=0xa92ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa92ff28*=0x10a90, lpOverlapped=0x0) returned 1 [0111.002] WriteFile (in: hFile=0x600, lpBuffer=0xa92fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa92ff18, lpOverlapped=0x0 | out: lpBuffer=0xa92fef0*, lpNumberOfBytesWritten=0xa92ff18*=0x6, lpOverlapped=0x0) returned 1 [0111.002] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa92ff38 | out: pbData=0x0*, pdwDataLen=0xa92ff38*=0x10c) returned 1 [0111.002] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa92fd98, pdwDataLen=0xa92ff38 | out: pbData=0xa92fd98*, pdwDataLen=0xa92ff38*=0x10c) returned 1 [0111.002] WriteFile (in: hFile=0x600, lpBuffer=0xa92fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa92ff18, lpOverlapped=0x0 | out: lpBuffer=0xa92fd98*, lpNumberOfBytesWritten=0xa92ff18*=0x10c, lpOverlapped=0x0) returned 1 [0111.002] CloseHandle (hObject=0x600) returned 1 [0111.004] CryptDestroyKey (hKey=0x2f24bc0) returned 1 [0111.004] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 108 os_tid = 0xfac [0111.000] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf", dwFileAttributes=0x80) returned 1 [0111.000] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e8 [0111.001] GetFileSizeEx (in: hFile=0x5e8, lpFileSize=0xaa6ff10 | out: lpFileSize=0xaa6ff10*=12687) returned 1 [0111.001] GetFileSizeEx (in: hFile=0x5e8, lpFileSize=0xaa6ff50 | out: lpFileSize=0xaa6ff50*=12687) returned 1 [0111.004] SetFilePointerEx (in: hFile=0x5e8, liDistanceToMove=0x306d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.006] ReadFile (in: hFile=0x5e8, lpBuffer=0xaa6fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xaa6ff40, lpOverlapped=0x0 | out: lpBuffer=0xaa6fed4*, lpNumberOfBytesRead=0xaa6ff40*=0x19, lpOverlapped=0x0) returned 1 [0111.007] SetFilePointer (in: hFile=0x5e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.007] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xaa6ff48 | out: phKey=0xaa6ff48*=0x2f24bc0) returned 1 [0111.007] SetFilePointer (in: hFile=0x5e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.007] ReadFile (in: hFile=0x5e8, lpBuffer=0x4710000, nNumberOfBytesToRead=0x318f, lpNumberOfBytesRead=0xaa6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4710000*, lpNumberOfBytesRead=0xaa6ff28*=0x318f, lpOverlapped=0x0) returned 1 [0111.008] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xaa6ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xaa6ff2c*=0xf4250) returned 1 [0111.008] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4710000*, pdwDataLen=0xaa6ff24*=0x318f, dwBufLen=0xf4250 | out: pbData=0x4710000*, pdwDataLen=0xaa6ff24*=0x3190) returned 1 [0111.008] SetFilePointer (in: hFile=0x5e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.008] WriteFile (in: hFile=0x5e8, lpBuffer=0x4710000*, nNumberOfBytesToWrite=0x3190, lpNumberOfBytesWritten=0xaa6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4710000*, lpNumberOfBytesWritten=0xaa6ff28*=0x3190, lpOverlapped=0x0) returned 1 [0111.008] WriteFile (in: hFile=0x5e8, lpBuffer=0xaa6fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xaa6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaa6fef0*, lpNumberOfBytesWritten=0xaa6ff18*=0x6, lpOverlapped=0x0) returned 1 [0111.009] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xaa6ff38 | out: pbData=0x0*, pdwDataLen=0xaa6ff38*=0x10c) returned 1 [0111.009] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xaa6fd98, pdwDataLen=0xaa6ff38 | out: pbData=0xaa6fd98*, pdwDataLen=0xaa6ff38*=0x10c) returned 1 [0111.009] WriteFile (in: hFile=0x5e8, lpBuffer=0xaa6fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaa6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaa6fd98*, lpNumberOfBytesWritten=0xaa6ff18*=0x10c, lpOverlapped=0x0) returned 1 [0111.009] CloseHandle (hObject=0x5e8) returned 1 [0111.010] CryptDestroyKey (hKey=0x2f24bc0) returned 1 [0111.010] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf.RYK" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf.ryk"), dwFlags=0x8) returned 1 Thread: id = 109 os_tid = 0x1154 [0111.007] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", dwFileAttributes=0x80) returned 1 [0111.010] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e8 [0111.012] GetFileSizeEx (in: hFile=0x5e8, lpFileSize=0xabaff10 | out: lpFileSize=0xabaff10*=65238) returned 1 [0111.012] GetFileSizeEx (in: hFile=0x5e8, lpFileSize=0xabaff50 | out: lpFileSize=0xabaff50*=65238) returned 1 [0111.012] SetFilePointerEx (in: hFile=0x5e8, liDistanceToMove=0xfdb4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.012] ReadFile (in: hFile=0x5e8, lpBuffer=0xabafed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xabaff40, lpOverlapped=0x0 | out: lpBuffer=0xabafed4*, lpNumberOfBytesRead=0xabaff40*=0x19, lpOverlapped=0x0) returned 1 [0111.013] SetFilePointer (in: hFile=0x5e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.013] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xabaff48 | out: phKey=0xabaff48*=0x2f24bc0) returned 1 [0111.013] SetFilePointer (in: hFile=0x5e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.013] ReadFile (in: hFile=0x5e8, lpBuffer=0x4820000, nNumberOfBytesToRead=0xfed6, lpNumberOfBytesRead=0xabaff28, lpOverlapped=0x0 | out: lpBuffer=0x4820000*, lpNumberOfBytesRead=0xabaff28*=0xfed6, lpOverlapped=0x0) returned 1 [0111.015] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xabaff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xabaff2c*=0xf4250) returned 1 [0111.015] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4820000*, pdwDataLen=0xabaff24*=0xfed6, dwBufLen=0xf4250 | out: pbData=0x4820000*, pdwDataLen=0xabaff24*=0xfee0) returned 1 [0111.015] SetFilePointer (in: hFile=0x5e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.015] WriteFile (in: hFile=0x5e8, lpBuffer=0x4820000*, nNumberOfBytesToWrite=0xfee0, lpNumberOfBytesWritten=0xabaff28, lpOverlapped=0x0 | out: lpBuffer=0x4820000*, lpNumberOfBytesWritten=0xabaff28*=0xfee0, lpOverlapped=0x0) returned 1 [0111.015] WriteFile (in: hFile=0x5e8, lpBuffer=0xabafef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xabaff18, lpOverlapped=0x0 | out: lpBuffer=0xabafef0*, lpNumberOfBytesWritten=0xabaff18*=0x6, lpOverlapped=0x0) returned 1 [0111.015] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xabaff38 | out: pbData=0x0*, pdwDataLen=0xabaff38*=0x10c) returned 1 [0111.015] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xabafd98, pdwDataLen=0xabaff38 | out: pbData=0xabafd98*, pdwDataLen=0xabaff38*=0x10c) returned 1 [0111.015] WriteFile (in: hFile=0x5e8, lpBuffer=0xabafd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xabaff18, lpOverlapped=0x0 | out: lpBuffer=0xabafd98*, lpNumberOfBytesWritten=0xabaff18*=0x10c, lpOverlapped=0x0) returned 1 [0111.015] CloseHandle (hObject=0x5e8) returned 1 [0111.017] CryptDestroyKey (hKey=0x2f24bc0) returned 1 [0111.017] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 110 os_tid = 0x6b0 [0111.014] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf", dwFileAttributes=0x80) returned 1 [0111.019] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e8 [0111.019] GetFileSizeEx (in: hFile=0x5e8, lpFileSize=0xaceff10 | out: lpFileSize=0xaceff10*=3546) returned 1 [0111.019] GetFileSizeEx (in: hFile=0x5e8, lpFileSize=0xaceff50 | out: lpFileSize=0xaceff50*=3546) returned 1 [0111.019] SetFilePointerEx (in: hFile=0x5e8, liDistanceToMove=0xcb8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.019] ReadFile (in: hFile=0x5e8, lpBuffer=0xacefed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xaceff40, lpOverlapped=0x0 | out: lpBuffer=0xacefed4*, lpNumberOfBytesRead=0xaceff40*=0x19, lpOverlapped=0x0) returned 1 [0111.021] SetFilePointer (in: hFile=0x5e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.021] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xaceff48 | out: phKey=0xaceff48*=0x2f24bc0) returned 1 [0111.021] SetFilePointer (in: hFile=0x5e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.021] ReadFile (in: hFile=0x5e8, lpBuffer=0x4930000, nNumberOfBytesToRead=0xdda, lpNumberOfBytesRead=0xaceff28, lpOverlapped=0x0 | out: lpBuffer=0x4930000*, lpNumberOfBytesRead=0xaceff28*=0xdda, lpOverlapped=0x0) returned 1 [0111.021] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xaceff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xaceff2c*=0xf4250) returned 1 [0111.021] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4930000*, pdwDataLen=0xaceff24*=0xdda, dwBufLen=0xf4250 | out: pbData=0x4930000*, pdwDataLen=0xaceff24*=0xde0) returned 1 [0111.021] SetFilePointer (in: hFile=0x5e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.021] WriteFile (in: hFile=0x5e8, lpBuffer=0x4930000*, nNumberOfBytesToWrite=0xde0, lpNumberOfBytesWritten=0xaceff28, lpOverlapped=0x0 | out: lpBuffer=0x4930000*, lpNumberOfBytesWritten=0xaceff28*=0xde0, lpOverlapped=0x0) returned 1 [0111.021] WriteFile (in: hFile=0x5e8, lpBuffer=0xacefef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xaceff18, lpOverlapped=0x0 | out: lpBuffer=0xacefef0*, lpNumberOfBytesWritten=0xaceff18*=0x6, lpOverlapped=0x0) returned 1 [0111.021] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xaceff38 | out: pbData=0x0*, pdwDataLen=0xaceff38*=0x10c) returned 1 [0111.022] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xacefd98, pdwDataLen=0xaceff38 | out: pbData=0xacefd98*, pdwDataLen=0xaceff38*=0x10c) returned 1 [0111.022] WriteFile (in: hFile=0x5e8, lpBuffer=0xacefd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaceff18, lpOverlapped=0x0 | out: lpBuffer=0xacefd98*, lpNumberOfBytesWritten=0xaceff18*=0x10c, lpOverlapped=0x0) returned 1 [0111.022] CloseHandle (hObject=0x5e8) returned 1 [0111.022] CryptDestroyKey (hKey=0x2f24bc0) returned 1 [0111.022] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf.RYK" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf.ryk"), dwFlags=0x8) returned 1 Thread: id = 111 os_tid = 0x6ac [0111.021] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", dwFileAttributes=0x80) returned 1 [0111.024] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e8 [0111.025] GetFileSizeEx (in: hFile=0x5e8, lpFileSize=0xae2ff10 | out: lpFileSize=0xae2ff10*=79634) returned 1 [0111.025] GetFileSizeEx (in: hFile=0x5e8, lpFileSize=0xae2ff50 | out: lpFileSize=0xae2ff50*=79634) returned 1 [0111.025] SetFilePointerEx (in: hFile=0x5e8, liDistanceToMove=0x135f0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.025] ReadFile (in: hFile=0x5e8, lpBuffer=0xae2fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xae2ff40, lpOverlapped=0x0 | out: lpBuffer=0xae2fed4*, lpNumberOfBytesRead=0xae2ff40*=0x19, lpOverlapped=0x0) returned 1 [0111.026] SetFilePointer (in: hFile=0x5e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.026] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xae2ff48 | out: phKey=0xae2ff48*=0x2f24bc0) returned 1 [0111.026] SetFilePointer (in: hFile=0x5e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.026] ReadFile (in: hFile=0x5e8, lpBuffer=0x4a40000, nNumberOfBytesToRead=0x13712, lpNumberOfBytesRead=0xae2ff28, lpOverlapped=0x0 | out: lpBuffer=0x4a40000*, lpNumberOfBytesRead=0xae2ff28*=0x13712, lpOverlapped=0x0) returned 1 [0111.028] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xae2ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xae2ff2c*=0xf4250) returned 1 [0111.028] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4a40000*, pdwDataLen=0xae2ff24*=0x13712, dwBufLen=0xf4250 | out: pbData=0x4a40000*, pdwDataLen=0xae2ff24*=0x13720) returned 1 [0111.028] SetFilePointer (in: hFile=0x5e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.028] WriteFile (in: hFile=0x5e8, lpBuffer=0x4a40000*, nNumberOfBytesToWrite=0x13720, lpNumberOfBytesWritten=0xae2ff28, lpOverlapped=0x0 | out: lpBuffer=0x4a40000*, lpNumberOfBytesWritten=0xae2ff28*=0x13720, lpOverlapped=0x0) returned 1 [0111.028] WriteFile (in: hFile=0x5e8, lpBuffer=0xae2fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xae2ff18, lpOverlapped=0x0 | out: lpBuffer=0xae2fef0*, lpNumberOfBytesWritten=0xae2ff18*=0x6, lpOverlapped=0x0) returned 1 [0111.028] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xae2ff38 | out: pbData=0x0*, pdwDataLen=0xae2ff38*=0x10c) returned 1 [0111.028] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xae2fd98, pdwDataLen=0xae2ff38 | out: pbData=0xae2fd98*, pdwDataLen=0xae2ff38*=0x10c) returned 1 [0111.029] WriteFile (in: hFile=0x5e8, lpBuffer=0xae2fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xae2ff18, lpOverlapped=0x0 | out: lpBuffer=0xae2fd98*, lpNumberOfBytesWritten=0xae2ff18*=0x10c, lpOverlapped=0x0) returned 1 [0111.029] CloseHandle (hObject=0x5e8) returned 1 [0111.031] CryptDestroyKey (hKey=0x2f24bc0) returned 1 [0111.031] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 112 os_tid = 0x1150 [0111.026] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf", dwFileAttributes=0x80) returned 1 [0111.027] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x600 [0111.027] GetFileSizeEx (in: hFile=0x600, lpFileSize=0xaf6ff10 | out: lpFileSize=0xaf6ff10*=3046) returned 1 [0111.027] GetFileSizeEx (in: hFile=0x600, lpFileSize=0xaf6ff50 | out: lpFileSize=0xaf6ff50*=3046) returned 1 [0111.027] SetFilePointerEx (in: hFile=0x600, liDistanceToMove=0xac4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.027] ReadFile (in: hFile=0x600, lpBuffer=0xaf6fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xaf6ff40, lpOverlapped=0x0 | out: lpBuffer=0xaf6fed4*, lpNumberOfBytesRead=0xaf6ff40*=0x19, lpOverlapped=0x0) returned 1 [0111.043] SetFilePointer (in: hFile=0x600, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.043] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xaf6ff48 | out: phKey=0xaf6ff48*=0x2f24bc0) returned 1 [0111.043] SetFilePointer (in: hFile=0x600, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.043] ReadFile (in: hFile=0x600, lpBuffer=0x4b50000, nNumberOfBytesToRead=0xbe6, lpNumberOfBytesRead=0xaf6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4b50000*, lpNumberOfBytesRead=0xaf6ff28*=0xbe6, lpOverlapped=0x0) returned 1 [0111.043] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xaf6ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xaf6ff2c*=0xf4250) returned 1 [0111.043] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4b50000*, pdwDataLen=0xaf6ff24*=0xbe6, dwBufLen=0xf4250 | out: pbData=0x4b50000*, pdwDataLen=0xaf6ff24*=0xbf0) returned 1 [0111.043] SetFilePointer (in: hFile=0x600, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.043] WriteFile (in: hFile=0x600, lpBuffer=0x4b50000*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0xaf6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4b50000*, lpNumberOfBytesWritten=0xaf6ff28*=0xbf0, lpOverlapped=0x0) returned 1 [0111.043] WriteFile (in: hFile=0x600, lpBuffer=0xaf6fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xaf6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaf6fef0*, lpNumberOfBytesWritten=0xaf6ff18*=0x6, lpOverlapped=0x0) returned 1 [0111.043] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xaf6ff38 | out: pbData=0x0*, pdwDataLen=0xaf6ff38*=0x10c) returned 1 [0111.043] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xaf6fd98, pdwDataLen=0xaf6ff38 | out: pbData=0xaf6fd98*, pdwDataLen=0xaf6ff38*=0x10c) returned 1 [0111.043] WriteFile (in: hFile=0x600, lpBuffer=0xaf6fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaf6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaf6fd98*, lpNumberOfBytesWritten=0xaf6ff18*=0x10c, lpOverlapped=0x0) returned 1 [0111.043] CloseHandle (hObject=0x600) returned 1 [0111.044] CryptDestroyKey (hKey=0x2f24bc0) returned 1 [0111.044] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf.RYK" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf.ryk"), dwFlags=0x8) returned 1 Thread: id = 113 os_tid = 0x1144 [0111.045] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", dwFileAttributes=0x80) returned 1 [0111.046] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x600 [0111.047] GetFileSizeEx (in: hFile=0x600, lpFileSize=0xb0aff10 | out: lpFileSize=0xb0aff10*=79296) returned 1 [0111.047] GetFileSizeEx (in: hFile=0x600, lpFileSize=0xb0aff50 | out: lpFileSize=0xb0aff50*=79296) returned 1 [0111.047] SetFilePointerEx (in: hFile=0x600, liDistanceToMove=0x1349e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.047] ReadFile (in: hFile=0x600, lpBuffer=0xb0afed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb0aff40, lpOverlapped=0x0 | out: lpBuffer=0xb0afed4*, lpNumberOfBytesRead=0xb0aff40*=0x19, lpOverlapped=0x0) returned 1 [0111.048] SetFilePointer (in: hFile=0x600, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.048] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb0aff48 | out: phKey=0xb0aff48*=0x2f24bc0) returned 1 [0111.048] SetFilePointer (in: hFile=0x600, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.048] ReadFile (in: hFile=0x600, lpBuffer=0x4c60000, nNumberOfBytesToRead=0x135c0, lpNumberOfBytesRead=0xb0aff28, lpOverlapped=0x0 | out: lpBuffer=0x4c60000*, lpNumberOfBytesRead=0xb0aff28*=0x135c0, lpOverlapped=0x0) returned 1 [0111.049] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb0aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb0aff2c*=0xf4250) returned 1 [0111.049] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4c60000*, pdwDataLen=0xb0aff24*=0x135c0, dwBufLen=0xf4250 | out: pbData=0x4c60000*, pdwDataLen=0xb0aff24*=0x135d0) returned 1 [0111.049] SetFilePointer (in: hFile=0x600, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.050] WriteFile (in: hFile=0x600, lpBuffer=0x4c60000*, nNumberOfBytesToWrite=0x135d0, lpNumberOfBytesWritten=0xb0aff28, lpOverlapped=0x0 | out: lpBuffer=0x4c60000*, lpNumberOfBytesWritten=0xb0aff28*=0x135d0, lpOverlapped=0x0) returned 1 [0111.050] WriteFile (in: hFile=0x600, lpBuffer=0xb0afef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb0aff18, lpOverlapped=0x0 | out: lpBuffer=0xb0afef0*, lpNumberOfBytesWritten=0xb0aff18*=0x6, lpOverlapped=0x0) returned 1 [0111.050] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb0aff38 | out: pbData=0x0*, pdwDataLen=0xb0aff38*=0x10c) returned 1 [0111.050] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb0afd98, pdwDataLen=0xb0aff38 | out: pbData=0xb0afd98*, pdwDataLen=0xb0aff38*=0x10c) returned 1 [0111.050] WriteFile (in: hFile=0x600, lpBuffer=0xb0afd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb0aff18, lpOverlapped=0x0 | out: lpBuffer=0xb0afd98*, lpNumberOfBytesWritten=0xb0aff18*=0x10c, lpOverlapped=0x0) returned 1 [0111.050] CloseHandle (hObject=0x600) returned 1 [0111.052] CryptDestroyKey (hKey=0x2f24bc0) returned 1 [0111.052] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 114 os_tid = 0x113c Thread: id = 115 os_tid = 0x1134 Thread: id = 117 os_tid = 0xeb0 [0111.433] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf", dwFileAttributes=0x80) returned 1 [0111.445] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f4 [0111.445] GetFileSizeEx (in: hFile=0x5f4, lpFileSize=0xa62ff10 | out: lpFileSize=0xa62ff10*=4040) returned 1 [0111.446] GetFileSizeEx (in: hFile=0x5f4, lpFileSize=0xa62ff50 | out: lpFileSize=0xa62ff50*=4040) returned 1 [0111.446] SetFilePointerEx (in: hFile=0x5f4, liDistanceToMove=0xea6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.446] ReadFile (in: hFile=0x5f4, lpBuffer=0xa62fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa62ff40, lpOverlapped=0x0 | out: lpBuffer=0xa62fed4*, lpNumberOfBytesRead=0xa62ff40*=0x19, lpOverlapped=0x0) returned 1 [0111.471] SetFilePointer (in: hFile=0x5f4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.471] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa62ff48 | out: phKey=0xa62ff48*=0x2f24bc0) returned 1 [0111.471] SetFilePointer (in: hFile=0x5f4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.471] ReadFile (in: hFile=0x5f4, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xfc8, lpNumberOfBytesRead=0xa62ff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa62ff28*=0xfc8, lpOverlapped=0x0) returned 1 [0111.471] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa62ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa62ff2c*=0xf4250) returned 1 [0111.471] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa62ff24*=0xfc8, dwBufLen=0xf4250 | out: pbData=0x42d0000*, pdwDataLen=0xa62ff24*=0xfd0) returned 1 [0111.471] SetFilePointer (in: hFile=0x5f4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.471] WriteFile (in: hFile=0x5f4, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xfd0, lpNumberOfBytesWritten=0xa62ff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa62ff28*=0xfd0, lpOverlapped=0x0) returned 1 [0111.471] WriteFile (in: hFile=0x5f4, lpBuffer=0xa62fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa62ff18, lpOverlapped=0x0 | out: lpBuffer=0xa62fef0*, lpNumberOfBytesWritten=0xa62ff18*=0x6, lpOverlapped=0x0) returned 1 [0111.471] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa62ff38 | out: pbData=0x0*, pdwDataLen=0xa62ff38*=0x10c) returned 1 [0111.471] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa62fd98, pdwDataLen=0xa62ff38 | out: pbData=0xa62fd98*, pdwDataLen=0xa62ff38*=0x10c) returned 1 [0111.471] WriteFile (in: hFile=0x5f4, lpBuffer=0xa62fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa62ff18, lpOverlapped=0x0 | out: lpBuffer=0xa62fd98*, lpNumberOfBytesWritten=0xa62ff18*=0x10c, lpOverlapped=0x0) returned 1 [0111.472] CloseHandle (hObject=0x5f4) returned 1 [0111.473] CryptDestroyKey (hKey=0x2f24bc0) returned 1 [0111.473] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf.RYK" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf.ryk"), dwFlags=0x8) returned 1 Thread: id = 118 os_tid = 0xf8c [0111.476] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", dwFileAttributes=0x80) returned 1 [0111.476] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f4 [0111.476] GetFileSizeEx (in: hFile=0x5f4, lpFileSize=0xb46ff10 | out: lpFileSize=0xb46ff10*=82374) returned 1 [0111.476] GetFileSizeEx (in: hFile=0x5f4, lpFileSize=0xb46ff50 | out: lpFileSize=0xb46ff50*=82374) returned 1 [0111.476] SetFilePointerEx (in: hFile=0x5f4, liDistanceToMove=0x140a4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.476] ReadFile (in: hFile=0x5f4, lpBuffer=0xb46fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb46ff40, lpOverlapped=0x0 | out: lpBuffer=0xb46fed4*, lpNumberOfBytesRead=0xb46ff40*=0x19, lpOverlapped=0x0) returned 1 [0111.478] SetFilePointer (in: hFile=0x5f4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.478] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb46ff48 | out: phKey=0xb46ff48*=0x2f24bc0) returned 1 [0111.478] SetFilePointer (in: hFile=0x5f4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.478] ReadFile (in: hFile=0x5f4, lpBuffer=0x4d70000, nNumberOfBytesToRead=0x141c6, lpNumberOfBytesRead=0xb46ff28, lpOverlapped=0x0 | out: lpBuffer=0x4d70000*, lpNumberOfBytesRead=0xb46ff28*=0x141c6, lpOverlapped=0x0) returned 1 [0111.479] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb46ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb46ff2c*=0xf4250) returned 1 [0111.480] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4d70000*, pdwDataLen=0xb46ff24*=0x141c6, dwBufLen=0xf4250 | out: pbData=0x4d70000*, pdwDataLen=0xb46ff24*=0x141d0) returned 1 [0111.480] SetFilePointer (in: hFile=0x5f4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.480] WriteFile (in: hFile=0x5f4, lpBuffer=0x4d70000*, nNumberOfBytesToWrite=0x141d0, lpNumberOfBytesWritten=0xb46ff28, lpOverlapped=0x0 | out: lpBuffer=0x4d70000*, lpNumberOfBytesWritten=0xb46ff28*=0x141d0, lpOverlapped=0x0) returned 1 [0111.480] WriteFile (in: hFile=0x5f4, lpBuffer=0xb46fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb46ff18, lpOverlapped=0x0 | out: lpBuffer=0xb46fef0*, lpNumberOfBytesWritten=0xb46ff18*=0x6, lpOverlapped=0x0) returned 1 [0111.480] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb46ff38 | out: pbData=0x0*, pdwDataLen=0xb46ff38*=0x10c) returned 1 [0111.480] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb46fd98, pdwDataLen=0xb46ff38 | out: pbData=0xb46fd98*, pdwDataLen=0xb46ff38*=0x10c) returned 1 [0111.480] WriteFile (in: hFile=0x5f4, lpBuffer=0xb46fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb46ff18, lpOverlapped=0x0 | out: lpBuffer=0xb46fd98*, lpNumberOfBytesWritten=0xb46ff18*=0x10c, lpOverlapped=0x0) returned 1 [0111.480] CloseHandle (hObject=0x5f4) returned 1 [0111.483] CryptDestroyKey (hKey=0x2f24bc0) returned 1 [0111.483] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 119 os_tid = 0xfa8 [0111.479] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf", dwFileAttributes=0x80) returned 1 [0111.479] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x518 [0111.484] GetFileSizeEx (in: hFile=0x518, lpFileSize=0xb5aff10 | out: lpFileSize=0xb5aff10*=3683) returned 1 [0111.487] GetFileSizeEx (in: hFile=0x518, lpFileSize=0xb5aff50 | out: lpFileSize=0xb5aff50*=3683) returned 1 [0111.487] SetFilePointerEx (in: hFile=0x518, liDistanceToMove=0xd41, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.489] ReadFile (in: hFile=0x518, lpBuffer=0xb5afed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb5aff40, lpOverlapped=0x0 | out: lpBuffer=0xb5afed4*, lpNumberOfBytesRead=0xb5aff40*=0x19, lpOverlapped=0x0) returned 1 [0111.490] SetFilePointer (in: hFile=0x518, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.490] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb5aff48 | out: phKey=0xb5aff48*=0x2f24bc0) returned 1 [0111.490] SetFilePointer (in: hFile=0x518, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.491] ReadFile (in: hFile=0x518, lpBuffer=0x4e80000, nNumberOfBytesToRead=0xe63, lpNumberOfBytesRead=0xb5aff28, lpOverlapped=0x0 | out: lpBuffer=0x4e80000*, lpNumberOfBytesRead=0xb5aff28*=0xe63, lpOverlapped=0x0) returned 1 [0111.491] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb5aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb5aff2c*=0xf4250) returned 1 [0111.491] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4e80000*, pdwDataLen=0xb5aff24*=0xe63, dwBufLen=0xf4250 | out: pbData=0x4e80000*, pdwDataLen=0xb5aff24*=0xe70) returned 1 [0111.491] SetFilePointer (in: hFile=0x518, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.491] WriteFile (in: hFile=0x518, lpBuffer=0x4e80000*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0xb5aff28, lpOverlapped=0x0 | out: lpBuffer=0x4e80000*, lpNumberOfBytesWritten=0xb5aff28*=0xe70, lpOverlapped=0x0) returned 1 [0111.491] WriteFile (in: hFile=0x518, lpBuffer=0xb5afef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb5aff18, lpOverlapped=0x0 | out: lpBuffer=0xb5afef0*, lpNumberOfBytesWritten=0xb5aff18*=0x6, lpOverlapped=0x0) returned 1 [0111.491] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb5aff38 | out: pbData=0x0*, pdwDataLen=0xb5aff38*=0x10c) returned 1 [0111.491] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb5afd98, pdwDataLen=0xb5aff38 | out: pbData=0xb5afd98*, pdwDataLen=0xb5aff38*=0x10c) returned 1 [0111.491] WriteFile (in: hFile=0x518, lpBuffer=0xb5afd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb5aff18, lpOverlapped=0x0 | out: lpBuffer=0xb5afd98*, lpNumberOfBytesWritten=0xb5aff18*=0x10c, lpOverlapped=0x0) returned 1 [0111.491] CloseHandle (hObject=0x518) returned 1 [0111.492] CryptDestroyKey (hKey=0x2f24bc0) returned 1 [0111.492] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf.RYK" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf.ryk"), dwFlags=0x8) returned 1 Thread: id = 120 os_tid = 0xea0 [0111.490] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", dwFileAttributes=0x80) returned 1 [0111.494] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x518 [0111.494] GetFileSizeEx (in: hFile=0x518, lpFileSize=0xb6eff10 | out: lpFileSize=0xb6eff10*=80738) returned 1 [0111.494] GetFileSizeEx (in: hFile=0x518, lpFileSize=0xb6eff50 | out: lpFileSize=0xb6eff50*=80738) returned 1 [0111.494] SetFilePointerEx (in: hFile=0x518, liDistanceToMove=0x13a40, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.494] ReadFile (in: hFile=0x518, lpBuffer=0xb6efed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb6eff40, lpOverlapped=0x0 | out: lpBuffer=0xb6efed4*, lpNumberOfBytesRead=0xb6eff40*=0x19, lpOverlapped=0x0) returned 1 [0111.496] SetFilePointer (in: hFile=0x518, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.496] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb6eff48 | out: phKey=0xb6eff48*=0x2f24bc0) returned 1 [0111.496] SetFilePointer (in: hFile=0x518, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.496] ReadFile (in: hFile=0x518, lpBuffer=0x4f90000, nNumberOfBytesToRead=0x13b62, lpNumberOfBytesRead=0xb6eff28, lpOverlapped=0x0 | out: lpBuffer=0x4f90000*, lpNumberOfBytesRead=0xb6eff28*=0x13b62, lpOverlapped=0x0) returned 1 [0111.497] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb6eff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb6eff2c*=0xf4250) returned 1 [0111.498] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4f90000*, pdwDataLen=0xb6eff24*=0x13b62, dwBufLen=0xf4250 | out: pbData=0x4f90000*, pdwDataLen=0xb6eff24*=0x13b70) returned 1 [0111.498] SetFilePointer (in: hFile=0x518, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.498] WriteFile (in: hFile=0x518, lpBuffer=0x4f90000*, nNumberOfBytesToWrite=0x13b70, lpNumberOfBytesWritten=0xb6eff28, lpOverlapped=0x0 | out: lpBuffer=0x4f90000*, lpNumberOfBytesWritten=0xb6eff28*=0x13b70, lpOverlapped=0x0) returned 1 [0111.498] WriteFile (in: hFile=0x518, lpBuffer=0xb6efef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb6eff18, lpOverlapped=0x0 | out: lpBuffer=0xb6efef0*, lpNumberOfBytesWritten=0xb6eff18*=0x6, lpOverlapped=0x0) returned 1 [0111.498] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb6eff38 | out: pbData=0x0*, pdwDataLen=0xb6eff38*=0x10c) returned 1 [0111.498] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb6efd98, pdwDataLen=0xb6eff38 | out: pbData=0xb6efd98*, pdwDataLen=0xb6eff38*=0x10c) returned 1 [0111.498] WriteFile (in: hFile=0x518, lpBuffer=0xb6efd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb6eff18, lpOverlapped=0x0 | out: lpBuffer=0xb6efd98*, lpNumberOfBytesWritten=0xb6eff18*=0x10c, lpOverlapped=0x0) returned 1 [0111.498] CloseHandle (hObject=0x518) returned 1 [0111.514] CryptDestroyKey (hKey=0x2f24bc0) returned 1 [0111.514] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 121 os_tid = 0x9b8 [0111.497] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf", dwFileAttributes=0x80) returned 1 [0111.516] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x518 [0111.516] GetFileSizeEx (in: hFile=0x518, lpFileSize=0xb82ff10 | out: lpFileSize=0xb82ff10*=54456) returned 1 [0111.516] GetFileSizeEx (in: hFile=0x518, lpFileSize=0xb82ff50 | out: lpFileSize=0xb82ff50*=54456) returned 1 [0111.516] SetFilePointerEx (in: hFile=0x518, liDistanceToMove=0xd396, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.516] ReadFile (in: hFile=0x518, lpBuffer=0xb82fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb82ff40, lpOverlapped=0x0 | out: lpBuffer=0xb82fed4*, lpNumberOfBytesRead=0xb82ff40*=0x19, lpOverlapped=0x0) returned 1 [0111.518] SetFilePointer (in: hFile=0x518, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.518] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb82ff48 | out: phKey=0xb82ff48*=0x2f24bc0) returned 1 [0111.518] SetFilePointer (in: hFile=0x518, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.518] ReadFile (in: hFile=0x518, lpBuffer=0x50a0000, nNumberOfBytesToRead=0xd4b8, lpNumberOfBytesRead=0xb82ff28, lpOverlapped=0x0 | out: lpBuffer=0x50a0000*, lpNumberOfBytesRead=0xb82ff28*=0xd4b8, lpOverlapped=0x0) returned 1 [0111.520] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb82ff2c*=0xf4250) returned 1 [0111.520] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x50a0000*, pdwDataLen=0xb82ff24*=0xd4b8, dwBufLen=0xf4250 | out: pbData=0x50a0000*, pdwDataLen=0xb82ff24*=0xd4c0) returned 1 [0111.520] SetFilePointer (in: hFile=0x518, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.520] WriteFile (in: hFile=0x518, lpBuffer=0x50a0000*, nNumberOfBytesToWrite=0xd4c0, lpNumberOfBytesWritten=0xb82ff28, lpOverlapped=0x0 | out: lpBuffer=0x50a0000*, lpNumberOfBytesWritten=0xb82ff28*=0xd4c0, lpOverlapped=0x0) returned 1 [0111.520] WriteFile (in: hFile=0x518, lpBuffer=0xb82fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb82ff18, lpOverlapped=0x0 | out: lpBuffer=0xb82fef0*, lpNumberOfBytesWritten=0xb82ff18*=0x6, lpOverlapped=0x0) returned 1 [0111.520] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb82ff38 | out: pbData=0x0*, pdwDataLen=0xb82ff38*=0x10c) returned 1 [0111.520] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb82fd98, pdwDataLen=0xb82ff38 | out: pbData=0xb82fd98*, pdwDataLen=0xb82ff38*=0x10c) returned 1 [0111.520] WriteFile (in: hFile=0x518, lpBuffer=0xb82fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb82ff18, lpOverlapped=0x0 | out: lpBuffer=0xb82fd98*, lpNumberOfBytesWritten=0xb82ff18*=0x10c, lpOverlapped=0x0) returned 1 [0111.520] CloseHandle (hObject=0x518) returned 1 [0111.534] CryptDestroyKey (hKey=0x2f24bc0) returned 1 [0111.534] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf.RYK" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf.ryk"), dwFlags=0x8) returned 1 Thread: id = 122 os_tid = 0x760 [0111.519] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", dwFileAttributes=0x80) returned 1 [0111.993] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f4 [0111.993] GetFileSizeEx (in: hFile=0x5f4, lpFileSize=0xb96ff10 | out: lpFileSize=0xb96ff10*=81482) returned 1 [0111.993] GetFileSizeEx (in: hFile=0x5f4, lpFileSize=0xb96ff50 | out: lpFileSize=0xb96ff50*=81482) returned 1 [0111.993] SetFilePointerEx (in: hFile=0x5f4, liDistanceToMove=0x13d28, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.994] ReadFile (in: hFile=0x5f4, lpBuffer=0xb96fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb96ff40, lpOverlapped=0x0 | out: lpBuffer=0xb96fed4*, lpNumberOfBytesRead=0xb96ff40*=0x19, lpOverlapped=0x0) returned 1 [0112.007] SetFilePointer (in: hFile=0x5f4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.007] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb96ff48 | out: phKey=0xb96ff48*=0x2f24c00) returned 1 [0112.007] SetFilePointer (in: hFile=0x5f4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.007] ReadFile (in: hFile=0x5f4, lpBuffer=0x51b0000, nNumberOfBytesToRead=0x13e4a, lpNumberOfBytesRead=0xb96ff28, lpOverlapped=0x0 | out: lpBuffer=0x51b0000*, lpNumberOfBytesRead=0xb96ff28*=0x13e4a, lpOverlapped=0x0) returned 1 [0112.010] CryptEncrypt (in: hKey=0x2f24c00, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb96ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb96ff2c*=0xf4250) returned 1 [0112.010] CryptEncrypt (in: hKey=0x2f24c00, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x51b0000*, pdwDataLen=0xb96ff24*=0x13e4a, dwBufLen=0xf4250 | out: pbData=0x51b0000*, pdwDataLen=0xb96ff24*=0x13e50) returned 1 [0112.010] SetFilePointer (in: hFile=0x5f4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.010] WriteFile (in: hFile=0x5f4, lpBuffer=0x51b0000*, nNumberOfBytesToWrite=0x13e50, lpNumberOfBytesWritten=0xb96ff28, lpOverlapped=0x0 | out: lpBuffer=0x51b0000*, lpNumberOfBytesWritten=0xb96ff28*=0x13e50, lpOverlapped=0x0) returned 1 [0112.010] WriteFile (in: hFile=0x5f4, lpBuffer=0xb96fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb96ff18, lpOverlapped=0x0 | out: lpBuffer=0xb96fef0*, lpNumberOfBytesWritten=0xb96ff18*=0x6, lpOverlapped=0x0) returned 1 [0112.010] CryptExportKey (in: hKey=0x2f24c00, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb96ff38 | out: pbData=0x0*, pdwDataLen=0xb96ff38*=0x10c) returned 1 [0112.010] CryptExportKey (in: hKey=0x2f24c00, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb96fd98, pdwDataLen=0xb96ff38 | out: pbData=0xb96fd98*, pdwDataLen=0xb96ff38*=0x10c) returned 1 [0112.011] WriteFile (in: hFile=0x5f4, lpBuffer=0xb96fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb96ff18, lpOverlapped=0x0 | out: lpBuffer=0xb96fd98*, lpNumberOfBytesWritten=0xb96ff18*=0x10c, lpOverlapped=0x0) returned 1 [0112.011] CloseHandle (hObject=0x5f4) returned 1 [0112.025] CryptDestroyKey (hKey=0x2f24c00) returned 1 [0112.025] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 123 os_tid = 0x960 [0111.536] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf", dwFileAttributes=0x80) returned 1 [0111.537] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x518 [0111.537] GetFileSizeEx (in: hFile=0x518, lpFileSize=0xbaaff10 | out: lpFileSize=0xbaaff10*=3865) returned 1 [0111.537] GetFileSizeEx (in: hFile=0x518, lpFileSize=0xbaaff50 | out: lpFileSize=0xbaaff50*=3865) returned 1 [0111.537] SetFilePointerEx (in: hFile=0x518, liDistanceToMove=0xdf7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.537] ReadFile (in: hFile=0x518, lpBuffer=0xbaafed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xbaaff40, lpOverlapped=0x0 | out: lpBuffer=0xbaafed4*, lpNumberOfBytesRead=0xbaaff40*=0x19, lpOverlapped=0x0) returned 1 [0111.538] SetFilePointer (in: hFile=0x518, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.538] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xbaaff48 | out: phKey=0xbaaff48*=0x2f24bc0) returned 1 [0111.538] SetFilePointer (in: hFile=0x518, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.538] ReadFile (in: hFile=0x518, lpBuffer=0x52c0000, nNumberOfBytesToRead=0xf19, lpNumberOfBytesRead=0xbaaff28, lpOverlapped=0x0 | out: lpBuffer=0x52c0000*, lpNumberOfBytesRead=0xbaaff28*=0xf19, lpOverlapped=0x0) returned 1 [0111.539] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xbaaff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xbaaff2c*=0xf4250) returned 1 [0111.539] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x52c0000*, pdwDataLen=0xbaaff24*=0xf19, dwBufLen=0xf4250 | out: pbData=0x52c0000*, pdwDataLen=0xbaaff24*=0xf20) returned 1 [0111.539] SetFilePointer (in: hFile=0x518, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.539] WriteFile (in: hFile=0x518, lpBuffer=0x52c0000*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0xbaaff28, lpOverlapped=0x0 | out: lpBuffer=0x52c0000*, lpNumberOfBytesWritten=0xbaaff28*=0xf20, lpOverlapped=0x0) returned 1 [0111.539] WriteFile (in: hFile=0x518, lpBuffer=0xbaafef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xbaaff18, lpOverlapped=0x0 | out: lpBuffer=0xbaafef0*, lpNumberOfBytesWritten=0xbaaff18*=0x6, lpOverlapped=0x0) returned 1 [0111.539] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xbaaff38 | out: pbData=0x0*, pdwDataLen=0xbaaff38*=0x10c) returned 1 [0111.539] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xbaafd98, pdwDataLen=0xbaaff38 | out: pbData=0xbaafd98*, pdwDataLen=0xbaaff38*=0x10c) returned 1 [0111.539] WriteFile (in: hFile=0x518, lpBuffer=0xbaafd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbaaff18, lpOverlapped=0x0 | out: lpBuffer=0xbaafd98*, lpNumberOfBytesWritten=0xbaaff18*=0x10c, lpOverlapped=0x0) returned 1 [0111.540] CloseHandle (hObject=0x518) returned 1 [0111.554] CryptDestroyKey (hKey=0x2f24bc0) returned 1 [0111.554] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf.RYK" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf.ryk"), dwFlags=0x8) returned 1 Thread: id = 124 os_tid = 0x508 [0111.555] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", dwFileAttributes=0x80) returned 1 [0111.557] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x518 [0111.557] GetFileSizeEx (in: hFile=0x518, lpFileSize=0xbbeff10 | out: lpFileSize=0xbbeff10*=77680) returned 1 [0111.557] GetFileSizeEx (in: hFile=0x518, lpFileSize=0xbbeff50 | out: lpFileSize=0xbbeff50*=77680) returned 1 [0111.557] SetFilePointerEx (in: hFile=0x518, liDistanceToMove=0x12e4e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.557] ReadFile (in: hFile=0x518, lpBuffer=0xbbefed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xbbeff40, lpOverlapped=0x0 | out: lpBuffer=0xbbefed4*, lpNumberOfBytesRead=0xbbeff40*=0x19, lpOverlapped=0x0) returned 1 [0111.558] SetFilePointer (in: hFile=0x518, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.559] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xbbeff48 | out: phKey=0xbbeff48*=0x2f24c00) returned 1 [0111.559] SetFilePointer (in: hFile=0x518, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.559] ReadFile (in: hFile=0x518, lpBuffer=0x53d0000, nNumberOfBytesToRead=0x12f70, lpNumberOfBytesRead=0xbbeff28, lpOverlapped=0x0 | out: lpBuffer=0x53d0000*, lpNumberOfBytesRead=0xbbeff28*=0x12f70, lpOverlapped=0x0) returned 1 [0111.561] CryptEncrypt (in: hKey=0x2f24c00, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xbbeff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xbbeff2c*=0xf4250) returned 1 [0111.561] CryptEncrypt (in: hKey=0x2f24c00, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x53d0000*, pdwDataLen=0xbbeff24*=0x12f70, dwBufLen=0xf4250 | out: pbData=0x53d0000*, pdwDataLen=0xbbeff24*=0x12f80) returned 1 [0111.561] SetFilePointer (in: hFile=0x518, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.561] WriteFile (in: hFile=0x518, lpBuffer=0x53d0000*, nNumberOfBytesToWrite=0x12f80, lpNumberOfBytesWritten=0xbbeff28, lpOverlapped=0x0 | out: lpBuffer=0x53d0000*, lpNumberOfBytesWritten=0xbbeff28*=0x12f80, lpOverlapped=0x0) returned 1 [0111.561] WriteFile (in: hFile=0x518, lpBuffer=0xbbefef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xbbeff18, lpOverlapped=0x0 | out: lpBuffer=0xbbefef0*, lpNumberOfBytesWritten=0xbbeff18*=0x6, lpOverlapped=0x0) returned 1 [0111.561] CryptExportKey (in: hKey=0x2f24c00, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xbbeff38 | out: pbData=0x0*, pdwDataLen=0xbbeff38*=0x10c) returned 1 [0111.561] CryptExportKey (in: hKey=0x2f24c00, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xbbefd98, pdwDataLen=0xbbeff38 | out: pbData=0xbbefd98*, pdwDataLen=0xbbeff38*=0x10c) returned 1 [0111.562] WriteFile (in: hFile=0x518, lpBuffer=0xbbefd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbbeff18, lpOverlapped=0x0 | out: lpBuffer=0xbbefd98*, lpNumberOfBytesWritten=0xbbeff18*=0x10c, lpOverlapped=0x0) returned 1 [0111.562] CloseHandle (hObject=0x518) returned 1 [0111.577] CryptDestroyKey (hKey=0x2f24c00) returned 1 [0111.577] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 125 os_tid = 0x884 [0111.558] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf", dwFileAttributes=0x80) returned 1 [0111.560] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f4 [0111.560] GetFileSizeEx (in: hFile=0x5f4, lpFileSize=0xbd2ff10 | out: lpFileSize=0xbd2ff10*=3859) returned 1 [0111.560] GetFileSizeEx (in: hFile=0x5f4, lpFileSize=0xbd2ff50 | out: lpFileSize=0xbd2ff50*=3859) returned 1 [0111.578] SetFilePointerEx (in: hFile=0x5f4, liDistanceToMove=0xdf1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.579] ReadFile (in: hFile=0x5f4, lpBuffer=0xbd2fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xbd2ff40, lpOverlapped=0x0 | out: lpBuffer=0xbd2fed4*, lpNumberOfBytesRead=0xbd2ff40*=0x19, lpOverlapped=0x0) returned 1 [0111.581] SetFilePointer (in: hFile=0x5f4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.581] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xbd2ff48 | out: phKey=0xbd2ff48*=0x2f24a80) returned 1 [0111.581] SetFilePointer (in: hFile=0x5f4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.581] ReadFile (in: hFile=0x5f4, lpBuffer=0x54e0000, nNumberOfBytesToRead=0xf13, lpNumberOfBytesRead=0xbd2ff28, lpOverlapped=0x0 | out: lpBuffer=0x54e0000*, lpNumberOfBytesRead=0xbd2ff28*=0xf13, lpOverlapped=0x0) returned 1 [0111.581] CryptEncrypt (in: hKey=0x2f24a80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xbd2ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xbd2ff2c*=0xf4250) returned 1 [0111.581] CryptEncrypt (in: hKey=0x2f24a80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x54e0000*, pdwDataLen=0xbd2ff24*=0xf13, dwBufLen=0xf4250 | out: pbData=0x54e0000*, pdwDataLen=0xbd2ff24*=0xf20) returned 1 [0111.581] SetFilePointer (in: hFile=0x5f4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.581] WriteFile (in: hFile=0x5f4, lpBuffer=0x54e0000*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0xbd2ff28, lpOverlapped=0x0 | out: lpBuffer=0x54e0000*, lpNumberOfBytesWritten=0xbd2ff28*=0xf20, lpOverlapped=0x0) returned 1 [0111.581] WriteFile (in: hFile=0x5f4, lpBuffer=0xbd2fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xbd2ff18, lpOverlapped=0x0 | out: lpBuffer=0xbd2fef0*, lpNumberOfBytesWritten=0xbd2ff18*=0x6, lpOverlapped=0x0) returned 1 [0111.581] CryptExportKey (in: hKey=0x2f24a80, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xbd2ff38 | out: pbData=0x0*, pdwDataLen=0xbd2ff38*=0x10c) returned 1 [0111.581] CryptExportKey (in: hKey=0x2f24a80, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xbd2fd98, pdwDataLen=0xbd2ff38 | out: pbData=0xbd2fd98*, pdwDataLen=0xbd2ff38*=0x10c) returned 1 [0111.582] WriteFile (in: hFile=0x5f4, lpBuffer=0xbd2fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbd2ff18, lpOverlapped=0x0 | out: lpBuffer=0xbd2fd98*, lpNumberOfBytesWritten=0xbd2ff18*=0x10c, lpOverlapped=0x0) returned 1 [0111.582] CloseHandle (hObject=0x5f4) returned 1 [0111.595] CryptDestroyKey (hKey=0x2f24a80) returned 1 [0111.595] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf.RYK" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf.ryk"), dwFlags=0x8) returned 1 Thread: id = 126 os_tid = 0x9ec [0111.597] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", dwFileAttributes=0x80) returned 1 [0111.598] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f4 [0111.598] GetFileSizeEx (in: hFile=0x5f4, lpFileSize=0xbe6ff10 | out: lpFileSize=0xbe6ff10*=76818) returned 1 [0111.599] GetFileSizeEx (in: hFile=0x5f4, lpFileSize=0xbe6ff50 | out: lpFileSize=0xbe6ff50*=76818) returned 1 [0111.599] SetFilePointerEx (in: hFile=0x5f4, liDistanceToMove=0x12af0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.599] ReadFile (in: hFile=0x5f4, lpBuffer=0xbe6fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xbe6ff40, lpOverlapped=0x0 | out: lpBuffer=0xbe6fed4*, lpNumberOfBytesRead=0xbe6ff40*=0x19, lpOverlapped=0x0) returned 1 [0111.600] SetFilePointer (in: hFile=0x5f4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.600] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xbe6ff48 | out: phKey=0xbe6ff48*=0x2f24e40) returned 1 [0111.600] SetFilePointer (in: hFile=0x5f4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.600] ReadFile (in: hFile=0x5f4, lpBuffer=0x55f0000, nNumberOfBytesToRead=0x12c12, lpNumberOfBytesRead=0xbe6ff28, lpOverlapped=0x0 | out: lpBuffer=0x55f0000*, lpNumberOfBytesRead=0xbe6ff28*=0x12c12, lpOverlapped=0x0) returned 1 [0111.609] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xbe6ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xbe6ff2c*=0xf4250) returned 1 [0111.609] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x55f0000*, pdwDataLen=0xbe6ff24*=0x12c12, dwBufLen=0xf4250 | out: pbData=0x55f0000*, pdwDataLen=0xbe6ff24*=0x12c20) returned 1 [0111.609] SetFilePointer (in: hFile=0x5f4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0111.609] WriteFile (in: hFile=0x5f4, lpBuffer=0x55f0000*, nNumberOfBytesToWrite=0x12c20, lpNumberOfBytesWritten=0xbe6ff28, lpOverlapped=0x0 | out: lpBuffer=0x55f0000*, lpNumberOfBytesWritten=0xbe6ff28*=0x12c20, lpOverlapped=0x0) returned 1 [0111.744] WriteFile (in: hFile=0x5f4, lpBuffer=0xbe6fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xbe6ff18, lpOverlapped=0x0 | out: lpBuffer=0xbe6fef0*, lpNumberOfBytesWritten=0xbe6ff18*=0x6, lpOverlapped=0x0) returned 1 [0111.744] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xbe6ff38 | out: pbData=0x0*, pdwDataLen=0xbe6ff38*=0x10c) returned 1 [0111.744] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xbe6fd98, pdwDataLen=0xbe6ff38 | out: pbData=0xbe6fd98*, pdwDataLen=0xbe6ff38*=0x10c) returned 1 [0111.744] WriteFile (in: hFile=0x5f4, lpBuffer=0xbe6fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbe6ff18, lpOverlapped=0x0 | out: lpBuffer=0xbe6fd98*, lpNumberOfBytesWritten=0xbe6ff18*=0x10c, lpOverlapped=0x0) returned 1 [0111.745] CloseHandle (hObject=0x5f4) returned 1 [0112.030] CryptDestroyKey (hKey=0x2f24e40) returned 1 [0112.032] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 127 os_tid = 0x1158 [0111.600] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf", dwFileAttributes=0x80) returned 1 [0112.035] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x518 [0112.035] GetFileSizeEx (in: hFile=0x518, lpFileSize=0xbfaff10 | out: lpFileSize=0xbfaff10*=5827) returned 1 [0112.035] GetFileSizeEx (in: hFile=0x518, lpFileSize=0xbfaff50 | out: lpFileSize=0xbfaff50*=5827) returned 1 [0112.036] SetFilePointerEx (in: hFile=0x518, liDistanceToMove=0x15a1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.036] ReadFile (in: hFile=0x518, lpBuffer=0xbfafed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xbfaff40, lpOverlapped=0x0 | out: lpBuffer=0xbfafed4*, lpNumberOfBytesRead=0xbfaff40*=0x19, lpOverlapped=0x0) returned 1 [0112.037] SetFilePointer (in: hFile=0x518, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.037] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xbfaff48 | out: phKey=0xbfaff48*=0x2f24e40) returned 1 [0112.037] SetFilePointer (in: hFile=0x518, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.037] ReadFile (in: hFile=0x518, lpBuffer=0x5700000, nNumberOfBytesToRead=0x16c3, lpNumberOfBytesRead=0xbfaff28, lpOverlapped=0x0 | out: lpBuffer=0x5700000*, lpNumberOfBytesRead=0xbfaff28*=0x16c3, lpOverlapped=0x0) returned 1 [0112.038] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xbfaff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xbfaff2c*=0xf4250) returned 1 [0112.038] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x5700000*, pdwDataLen=0xbfaff24*=0x16c3, dwBufLen=0xf4250 | out: pbData=0x5700000*, pdwDataLen=0xbfaff24*=0x16d0) returned 1 [0112.038] SetFilePointer (in: hFile=0x518, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.038] WriteFile (in: hFile=0x518, lpBuffer=0x5700000*, nNumberOfBytesToWrite=0x16d0, lpNumberOfBytesWritten=0xbfaff28, lpOverlapped=0x0 | out: lpBuffer=0x5700000*, lpNumberOfBytesWritten=0xbfaff28*=0x16d0, lpOverlapped=0x0) returned 1 [0112.038] WriteFile (in: hFile=0x518, lpBuffer=0xbfafef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xbfaff18, lpOverlapped=0x0 | out: lpBuffer=0xbfafef0*, lpNumberOfBytesWritten=0xbfaff18*=0x6, lpOverlapped=0x0) returned 1 [0112.038] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xbfaff38 | out: pbData=0x0*, pdwDataLen=0xbfaff38*=0x10c) returned 1 [0112.038] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xbfafd98, pdwDataLen=0xbfaff38 | out: pbData=0xbfafd98*, pdwDataLen=0xbfaff38*=0x10c) returned 1 [0112.038] WriteFile (in: hFile=0x518, lpBuffer=0xbfafd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbfaff18, lpOverlapped=0x0 | out: lpBuffer=0xbfafd98*, lpNumberOfBytesWritten=0xbfaff18*=0x10c, lpOverlapped=0x0) returned 1 [0112.038] CloseHandle (hObject=0x518) returned 1 [0112.052] CryptDestroyKey (hKey=0x2f24e40) returned 1 [0112.052] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf.RYK" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf.ryk"), dwFlags=0x8) returned 1 Thread: id = 128 os_tid = 0xff8 [0111.608] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", dwFileAttributes=0x80) returned 1 [0112.037] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0112.092] GetFileSizeEx (in: hFile=0x620, lpFileSize=0xc0eff10 | out: lpFileSize=0xc0eff10*=60684) returned 1 [0112.092] GetFileSizeEx (in: hFile=0x620, lpFileSize=0xc0eff50 | out: lpFileSize=0xc0eff50*=60684) returned 1 [0112.092] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0xebea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.092] ReadFile (in: hFile=0x620, lpBuffer=0xc0efed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xc0eff40, lpOverlapped=0x0 | out: lpBuffer=0xc0efed4*, lpNumberOfBytesRead=0xc0eff40*=0x19, lpOverlapped=0x0) returned 1 [0112.093] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.093] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xc0eff48 | out: phKey=0xc0eff48*=0x2f24e40) returned 1 [0112.093] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.093] ReadFile (in: hFile=0x620, lpBuffer=0x5810000, nNumberOfBytesToRead=0xed0c, lpNumberOfBytesRead=0xc0eff28, lpOverlapped=0x0 | out: lpBuffer=0x5810000*, lpNumberOfBytesRead=0xc0eff28*=0xed0c, lpOverlapped=0x0) returned 1 [0112.095] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xc0eff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xc0eff2c*=0xf4250) returned 1 [0112.095] CryptEncrypt (in: hKey=0x2f24e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x5810000*, pdwDataLen=0xc0eff24*=0xed0c, dwBufLen=0xf4250 | out: pbData=0x5810000*, pdwDataLen=0xc0eff24*=0xed10) returned 1 [0112.095] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.095] WriteFile (in: hFile=0x620, lpBuffer=0x5810000*, nNumberOfBytesToWrite=0xed10, lpNumberOfBytesWritten=0xc0eff28, lpOverlapped=0x0 | out: lpBuffer=0x5810000*, lpNumberOfBytesWritten=0xc0eff28*=0xed10, lpOverlapped=0x0) returned 1 [0112.096] WriteFile (in: hFile=0x620, lpBuffer=0xc0efef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xc0eff18, lpOverlapped=0x0 | out: lpBuffer=0xc0efef0*, lpNumberOfBytesWritten=0xc0eff18*=0x6, lpOverlapped=0x0) returned 1 [0112.096] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xc0eff38 | out: pbData=0x0*, pdwDataLen=0xc0eff38*=0x10c) returned 1 [0112.096] CryptExportKey (in: hKey=0x2f24e40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xc0efd98, pdwDataLen=0xc0eff38 | out: pbData=0xc0efd98*, pdwDataLen=0xc0eff38*=0x10c) returned 1 [0112.096] WriteFile (in: hFile=0x620, lpBuffer=0xc0efd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc0eff18, lpOverlapped=0x0 | out: lpBuffer=0xc0efd98*, lpNumberOfBytesWritten=0xc0eff18*=0x10c, lpOverlapped=0x0) returned 1 [0112.096] CloseHandle (hObject=0x620) returned 1 [0112.111] CryptDestroyKey (hKey=0x2f24e40) returned 1 [0112.111] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 137 os_tid = 0x101c [0112.481] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf", dwFileAttributes=0x80) returned 1 [0112.482] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0112.482] GetFileSizeEx (in: hFile=0x620, lpFileSize=0xa62ff10 | out: lpFileSize=0xa62ff10*=4015) returned 1 [0112.482] GetFileSizeEx (in: hFile=0x620, lpFileSize=0xa62ff50 | out: lpFileSize=0xa62ff50*=4015) returned 1 [0112.482] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0xe8d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.482] ReadFile (in: hFile=0x620, lpBuffer=0xa62fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa62ff40, lpOverlapped=0x0 | out: lpBuffer=0xa62fed4*, lpNumberOfBytesRead=0xa62ff40*=0x19, lpOverlapped=0x0) returned 1 [0112.484] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.484] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa62ff48 | out: phKey=0xa62ff48*=0x2f24d80) returned 1 [0112.484] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.484] ReadFile (in: hFile=0x620, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xfaf, lpNumberOfBytesRead=0xa62ff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa62ff28*=0xfaf, lpOverlapped=0x0) returned 1 [0112.484] CryptEncrypt (in: hKey=0x2f24d80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa62ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa62ff2c*=0xf4250) returned 1 [0112.484] CryptEncrypt (in: hKey=0x2f24d80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa62ff24*=0xfaf, dwBufLen=0xf4250 | out: pbData=0x42d0000*, pdwDataLen=0xa62ff24*=0xfb0) returned 1 [0112.484] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.484] WriteFile (in: hFile=0x620, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xfb0, lpNumberOfBytesWritten=0xa62ff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa62ff28*=0xfb0, lpOverlapped=0x0) returned 1 [0112.484] WriteFile (in: hFile=0x620, lpBuffer=0xa62fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa62ff18, lpOverlapped=0x0 | out: lpBuffer=0xa62fef0*, lpNumberOfBytesWritten=0xa62ff18*=0x6, lpOverlapped=0x0) returned 1 [0112.484] CryptExportKey (in: hKey=0x2f24d80, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa62ff38 | out: pbData=0x0*, pdwDataLen=0xa62ff38*=0x10c) returned 1 [0112.484] CryptExportKey (in: hKey=0x2f24d80, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa62fd98, pdwDataLen=0xa62ff38 | out: pbData=0xa62fd98*, pdwDataLen=0xa62ff38*=0x10c) returned 1 [0112.485] WriteFile (in: hFile=0x620, lpBuffer=0xa62fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa62ff18, lpOverlapped=0x0 | out: lpBuffer=0xa62fd98*, lpNumberOfBytesWritten=0xa62ff18*=0x10c, lpOverlapped=0x0) returned 1 [0112.485] CloseHandle (hObject=0x620) returned 1 [0112.486] CryptDestroyKey (hKey=0x2f24d80) returned 1 [0112.486] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf.RYK" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf.ryk"), dwFlags=0x8) returned 1 Thread: id = 138 os_tid = 0x1008 [0112.484] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", dwFileAttributes=0x80) returned 1 [0112.487] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x628 [0112.487] GetFileSizeEx (in: hFile=0x628, lpFileSize=0xa72ff10 | out: lpFileSize=0xa72ff10*=80254) returned 1 [0112.487] GetFileSizeEx (in: hFile=0x628, lpFileSize=0xa72ff50 | out: lpFileSize=0xa72ff50*=80254) returned 1 [0112.487] SetFilePointerEx (in: hFile=0x628, liDistanceToMove=0x1385c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.487] ReadFile (in: hFile=0x628, lpBuffer=0xa72fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa72ff40, lpOverlapped=0x0 | out: lpBuffer=0xa72fed4*, lpNumberOfBytesRead=0xa72ff40*=0x19, lpOverlapped=0x0) returned 1 [0112.490] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.490] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa72ff48 | out: phKey=0xa72ff48*=0x2f24740) returned 1 [0112.490] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.490] ReadFile (in: hFile=0x628, lpBuffer=0x43e0000, nNumberOfBytesToRead=0x1397e, lpNumberOfBytesRead=0xa72ff28, lpOverlapped=0x0 | out: lpBuffer=0x43e0000*, lpNumberOfBytesRead=0xa72ff28*=0x1397e, lpOverlapped=0x0) returned 1 [0112.492] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa72ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa72ff2c*=0xf4250) returned 1 [0112.492] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x43e0000*, pdwDataLen=0xa72ff24*=0x1397e, dwBufLen=0xf4250 | out: pbData=0x43e0000*, pdwDataLen=0xa72ff24*=0x13980) returned 1 [0112.492] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.492] WriteFile (in: hFile=0x628, lpBuffer=0x43e0000*, nNumberOfBytesToWrite=0x13980, lpNumberOfBytesWritten=0xa72ff28, lpOverlapped=0x0 | out: lpBuffer=0x43e0000*, lpNumberOfBytesWritten=0xa72ff28*=0x13980, lpOverlapped=0x0) returned 1 [0112.492] WriteFile (in: hFile=0x628, lpBuffer=0xa72fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa72ff18, lpOverlapped=0x0 | out: lpBuffer=0xa72fef0*, lpNumberOfBytesWritten=0xa72ff18*=0x6, lpOverlapped=0x0) returned 1 [0112.492] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa72ff38 | out: pbData=0x0*, pdwDataLen=0xa72ff38*=0x10c) returned 1 [0112.492] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa72fd98, pdwDataLen=0xa72ff38 | out: pbData=0xa72fd98*, pdwDataLen=0xa72ff38*=0x10c) returned 1 [0112.493] WriteFile (in: hFile=0x628, lpBuffer=0xa72fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa72ff18, lpOverlapped=0x0 | out: lpBuffer=0xa72fd98*, lpNumberOfBytesWritten=0xa72ff18*=0x10c, lpOverlapped=0x0) returned 1 [0112.493] CloseHandle (hObject=0x628) returned 1 [0112.495] CryptDestroyKey (hKey=0x2f24740) returned 1 [0112.495] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 139 os_tid = 0x1014 [0112.491] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf", dwFileAttributes=0x80) returned 1 [0112.497] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x628 [0112.497] GetFileSizeEx (in: hFile=0x628, lpFileSize=0xa82ff10 | out: lpFileSize=0xa82ff10*=6309) returned 1 [0112.497] GetFileSizeEx (in: hFile=0x628, lpFileSize=0xa82ff50 | out: lpFileSize=0xa82ff50*=6309) returned 1 [0112.497] SetFilePointerEx (in: hFile=0x628, liDistanceToMove=0x1783, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.497] ReadFile (in: hFile=0x628, lpBuffer=0xa82fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa82ff40, lpOverlapped=0x0 | out: lpBuffer=0xa82fed4*, lpNumberOfBytesRead=0xa82ff40*=0x19, lpOverlapped=0x0) returned 1 [0112.499] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.499] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa82ff48 | out: phKey=0xa82ff48*=0x2f24740) returned 1 [0112.499] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.499] ReadFile (in: hFile=0x628, lpBuffer=0x44f0000, nNumberOfBytesToRead=0x18a5, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x44f0000*, lpNumberOfBytesRead=0xa82ff28*=0x18a5, lpOverlapped=0x0) returned 1 [0112.499] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4250) returned 1 [0112.499] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x44f0000*, pdwDataLen=0xa82ff24*=0x18a5, dwBufLen=0xf4250 | out: pbData=0x44f0000*, pdwDataLen=0xa82ff24*=0x18b0) returned 1 [0112.500] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.500] WriteFile (in: hFile=0x628, lpBuffer=0x44f0000*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x44f0000*, lpNumberOfBytesWritten=0xa82ff28*=0x18b0, lpOverlapped=0x0) returned 1 [0112.500] WriteFile (in: hFile=0x628, lpBuffer=0xa82fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa82ff18, lpOverlapped=0x0 | out: lpBuffer=0xa82fef0*, lpNumberOfBytesWritten=0xa82ff18*=0x6, lpOverlapped=0x0) returned 1 [0112.500] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa82ff38 | out: pbData=0x0*, pdwDataLen=0xa82ff38*=0x10c) returned 1 [0112.500] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa82fd98, pdwDataLen=0xa82ff38 | out: pbData=0xa82fd98*, pdwDataLen=0xa82ff38*=0x10c) returned 1 [0112.500] WriteFile (in: hFile=0x628, lpBuffer=0xa82fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa82ff18, lpOverlapped=0x0 | out: lpBuffer=0xa82fd98*, lpNumberOfBytesWritten=0xa82ff18*=0x10c, lpOverlapped=0x0) returned 1 [0112.500] CloseHandle (hObject=0x628) returned 1 [0112.501] CryptDestroyKey (hKey=0x2f24740) returned 1 [0112.501] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf.RYK" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf.ryk"), dwFlags=0x8) returned 1 Thread: id = 140 os_tid = 0x11b8 [0112.498] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", dwFileAttributes=0x80) returned 1 [0112.503] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x628 [0112.503] GetFileSizeEx (in: hFile=0x628, lpFileSize=0xa92ff10 | out: lpFileSize=0xa92ff10*=60816) returned 1 [0112.503] GetFileSizeEx (in: hFile=0x628, lpFileSize=0xa92ff50 | out: lpFileSize=0xa92ff50*=60816) returned 1 [0112.503] SetFilePointerEx (in: hFile=0x628, liDistanceToMove=0xec6e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.503] ReadFile (in: hFile=0x628, lpBuffer=0xa92fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa92ff40, lpOverlapped=0x0 | out: lpBuffer=0xa92fed4*, lpNumberOfBytesRead=0xa92ff40*=0x19, lpOverlapped=0x0) returned 1 [0112.504] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.504] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa92ff48 | out: phKey=0xa92ff48*=0x2f24740) returned 1 [0112.504] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.504] ReadFile (in: hFile=0x628, lpBuffer=0x4600000, nNumberOfBytesToRead=0xed90, lpNumberOfBytesRead=0xa92ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa92ff28*=0xed90, lpOverlapped=0x0) returned 1 [0112.505] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa92ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa92ff2c*=0xf4250) returned 1 [0112.505] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa92ff24*=0xed90, dwBufLen=0xf4250 | out: pbData=0x4600000*, pdwDataLen=0xa92ff24*=0xeda0) returned 1 [0112.505] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.505] WriteFile (in: hFile=0x628, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xeda0, lpNumberOfBytesWritten=0xa92ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa92ff28*=0xeda0, lpOverlapped=0x0) returned 1 [0112.506] WriteFile (in: hFile=0x628, lpBuffer=0xa92fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa92ff18, lpOverlapped=0x0 | out: lpBuffer=0xa92fef0*, lpNumberOfBytesWritten=0xa92ff18*=0x6, lpOverlapped=0x0) returned 1 [0112.506] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa92ff38 | out: pbData=0x0*, pdwDataLen=0xa92ff38*=0x10c) returned 1 [0112.506] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa92fd98, pdwDataLen=0xa92ff38 | out: pbData=0xa92fd98*, pdwDataLen=0xa92ff38*=0x10c) returned 1 [0112.506] WriteFile (in: hFile=0x628, lpBuffer=0xa92fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa92ff18, lpOverlapped=0x0 | out: lpBuffer=0xa92fd98*, lpNumberOfBytesWritten=0xa92ff18*=0x10c, lpOverlapped=0x0) returned 1 [0112.506] CloseHandle (hObject=0x628) returned 1 [0112.508] CryptDestroyKey (hKey=0x2f24740) returned 1 [0112.508] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 141 os_tid = 0x13b0 [0112.505] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf", dwFileAttributes=0x80) returned 1 [0112.510] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x628 [0112.510] GetFileSizeEx (in: hFile=0x628, lpFileSize=0xaa6ff10 | out: lpFileSize=0xaa6ff10*=3069) returned 1 [0112.510] GetFileSizeEx (in: hFile=0x628, lpFileSize=0xaa6ff50 | out: lpFileSize=0xaa6ff50*=3069) returned 1 [0112.510] SetFilePointerEx (in: hFile=0x628, liDistanceToMove=0xadb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.510] ReadFile (in: hFile=0x628, lpBuffer=0xaa6fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xaa6ff40, lpOverlapped=0x0 | out: lpBuffer=0xaa6fed4*, lpNumberOfBytesRead=0xaa6ff40*=0x19, lpOverlapped=0x0) returned 1 [0112.511] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.511] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xaa6ff48 | out: phKey=0xaa6ff48*=0x2f24740) returned 1 [0112.512] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.512] ReadFile (in: hFile=0x628, lpBuffer=0x4710000, nNumberOfBytesToRead=0xbfd, lpNumberOfBytesRead=0xaa6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4710000*, lpNumberOfBytesRead=0xaa6ff28*=0xbfd, lpOverlapped=0x0) returned 1 [0112.512] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xaa6ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xaa6ff2c*=0xf4250) returned 1 [0112.512] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4710000*, pdwDataLen=0xaa6ff24*=0xbfd, dwBufLen=0xf4250 | out: pbData=0x4710000*, pdwDataLen=0xaa6ff24*=0xc00) returned 1 [0112.512] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.512] WriteFile (in: hFile=0x628, lpBuffer=0x4710000*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0xaa6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4710000*, lpNumberOfBytesWritten=0xaa6ff28*=0xc00, lpOverlapped=0x0) returned 1 [0112.512] WriteFile (in: hFile=0x628, lpBuffer=0xaa6fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xaa6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaa6fef0*, lpNumberOfBytesWritten=0xaa6ff18*=0x6, lpOverlapped=0x0) returned 1 [0112.512] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xaa6ff38 | out: pbData=0x0*, pdwDataLen=0xaa6ff38*=0x10c) returned 1 [0112.512] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xaa6fd98, pdwDataLen=0xaa6ff38 | out: pbData=0xaa6fd98*, pdwDataLen=0xaa6ff38*=0x10c) returned 1 [0112.512] WriteFile (in: hFile=0x628, lpBuffer=0xaa6fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaa6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaa6fd98*, lpNumberOfBytesWritten=0xaa6ff18*=0x10c, lpOverlapped=0x0) returned 1 [0112.512] CloseHandle (hObject=0x628) returned 1 [0112.513] CryptDestroyKey (hKey=0x2f24740) returned 1 [0112.513] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf.RYK" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf.ryk"), dwFlags=0x8) returned 1 Thread: id = 142 os_tid = 0x12b4 [0112.511] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", dwFileAttributes=0x80) returned 1 [0112.515] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x628 [0112.515] GetFileSizeEx (in: hFile=0x628, lpFileSize=0xabaff10 | out: lpFileSize=0xabaff10*=79996) returned 1 [0112.515] GetFileSizeEx (in: hFile=0x628, lpFileSize=0xabaff50 | out: lpFileSize=0xabaff50*=79996) returned 1 [0112.515] SetFilePointerEx (in: hFile=0x628, liDistanceToMove=0x1375a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.515] ReadFile (in: hFile=0x628, lpBuffer=0xabafed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xabaff40, lpOverlapped=0x0 | out: lpBuffer=0xabafed4*, lpNumberOfBytesRead=0xabaff40*=0x19, lpOverlapped=0x0) returned 1 [0112.517] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.517] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xabaff48 | out: phKey=0xabaff48*=0x2f24740) returned 1 [0112.517] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.517] ReadFile (in: hFile=0x628, lpBuffer=0x4820000, nNumberOfBytesToRead=0x1387c, lpNumberOfBytesRead=0xabaff28, lpOverlapped=0x0 | out: lpBuffer=0x4820000*, lpNumberOfBytesRead=0xabaff28*=0x1387c, lpOverlapped=0x0) returned 1 [0112.518] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xabaff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xabaff2c*=0xf4250) returned 1 [0112.518] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4820000*, pdwDataLen=0xabaff24*=0x1387c, dwBufLen=0xf4250 | out: pbData=0x4820000*, pdwDataLen=0xabaff24*=0x13880) returned 1 [0112.518] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.518] WriteFile (in: hFile=0x628, lpBuffer=0x4820000*, nNumberOfBytesToWrite=0x13880, lpNumberOfBytesWritten=0xabaff28, lpOverlapped=0x0 | out: lpBuffer=0x4820000*, lpNumberOfBytesWritten=0xabaff28*=0x13880, lpOverlapped=0x0) returned 1 [0112.519] WriteFile (in: hFile=0x628, lpBuffer=0xabafef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xabaff18, lpOverlapped=0x0 | out: lpBuffer=0xabafef0*, lpNumberOfBytesWritten=0xabaff18*=0x6, lpOverlapped=0x0) returned 1 [0112.519] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xabaff38 | out: pbData=0x0*, pdwDataLen=0xabaff38*=0x10c) returned 1 [0112.519] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xabafd98, pdwDataLen=0xabaff38 | out: pbData=0xabafd98*, pdwDataLen=0xabaff38*=0x10c) returned 1 [0112.519] WriteFile (in: hFile=0x628, lpBuffer=0xabafd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xabaff18, lpOverlapped=0x0 | out: lpBuffer=0xabafd98*, lpNumberOfBytesWritten=0xabaff18*=0x10c, lpOverlapped=0x0) returned 1 [0112.519] CloseHandle (hObject=0x628) returned 1 [0112.521] CryptDestroyKey (hKey=0x2f24740) returned 1 [0112.521] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 143 os_tid = 0x131c [0112.517] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", dwFileAttributes=0x80) returned 1 [0112.527] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0112.527] GetFileSizeEx (in: hFile=0x620, lpFileSize=0xaceff10 | out: lpFileSize=0xaceff10*=201796) returned 1 [0112.527] GetFileSizeEx (in: hFile=0x620, lpFileSize=0xaceff50 | out: lpFileSize=0xaceff50*=201796) returned 1 [0112.527] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0x31322, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.527] ReadFile (in: hFile=0x620, lpBuffer=0xacefed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xaceff40, lpOverlapped=0x0 | out: lpBuffer=0xacefed4*, lpNumberOfBytesRead=0xaceff40*=0x19, lpOverlapped=0x0) returned 1 [0112.529] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.529] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xaceff48 | out: phKey=0xaceff48*=0x2f24740) returned 1 [0112.529] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.529] ReadFile (in: hFile=0x620, lpBuffer=0x4930000, nNumberOfBytesToRead=0x31444, lpNumberOfBytesRead=0xaceff28, lpOverlapped=0x0 | out: lpBuffer=0x4930000*, lpNumberOfBytesRead=0xaceff28*=0x31444, lpOverlapped=0x0) returned 1 [0112.532] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xaceff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xaceff2c*=0xf4250) returned 1 [0112.532] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4930000*, pdwDataLen=0xaceff24*=0x31444, dwBufLen=0xf4250 | out: pbData=0x4930000*, pdwDataLen=0xaceff24*=0x31450) returned 1 [0112.533] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.533] WriteFile (in: hFile=0x620, lpBuffer=0x4930000*, nNumberOfBytesToWrite=0x31450, lpNumberOfBytesWritten=0xaceff28, lpOverlapped=0x0 | out: lpBuffer=0x4930000*, lpNumberOfBytesWritten=0xaceff28*=0x31450, lpOverlapped=0x0) returned 1 [0112.533] WriteFile (in: hFile=0x620, lpBuffer=0xacefef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xaceff18, lpOverlapped=0x0 | out: lpBuffer=0xacefef0*, lpNumberOfBytesWritten=0xaceff18*=0x6, lpOverlapped=0x0) returned 1 [0112.533] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xaceff38 | out: pbData=0x0*, pdwDataLen=0xaceff38*=0x10c) returned 1 [0112.533] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xacefd98, pdwDataLen=0xaceff38 | out: pbData=0xacefd98*, pdwDataLen=0xaceff38*=0x10c) returned 1 [0112.534] WriteFile (in: hFile=0x620, lpBuffer=0xacefd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaceff18, lpOverlapped=0x0 | out: lpBuffer=0xacefd98*, lpNumberOfBytesWritten=0xaceff18*=0x10c, lpOverlapped=0x0) returned 1 [0112.534] CloseHandle (hObject=0x620) returned 1 [0112.538] CryptDestroyKey (hKey=0x2f24740) returned 1 [0112.538] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 144 os_tid = 0x13fc [0112.529] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", dwFileAttributes=0x80) returned 1 [0112.530] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x628 [0112.531] GetFileSizeEx (in: hFile=0x628, lpFileSize=0xae2ff10 | out: lpFileSize=0xae2ff10*=39042) returned 1 [0112.531] GetFileSizeEx (in: hFile=0x628, lpFileSize=0xae2ff50 | out: lpFileSize=0xae2ff50*=39042) returned 1 [0112.531] SetFilePointerEx (in: hFile=0x628, liDistanceToMove=0x9760, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.531] ReadFile (in: hFile=0x628, lpBuffer=0xae2fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xae2ff40, lpOverlapped=0x0 | out: lpBuffer=0xae2fed4*, lpNumberOfBytesRead=0xae2ff40*=0x19, lpOverlapped=0x0) returned 1 [0112.540] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.540] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xae2ff48 | out: phKey=0xae2ff48*=0x2f24740) returned 1 [0112.540] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.540] ReadFile (in: hFile=0x628, lpBuffer=0x4a40000, nNumberOfBytesToRead=0x9882, lpNumberOfBytesRead=0xae2ff28, lpOverlapped=0x0 | out: lpBuffer=0x4a40000*, lpNumberOfBytesRead=0xae2ff28*=0x9882, lpOverlapped=0x0) returned 1 [0112.541] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xae2ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xae2ff2c*=0xf4250) returned 1 [0112.541] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4a40000*, pdwDataLen=0xae2ff24*=0x9882, dwBufLen=0xf4250 | out: pbData=0x4a40000*, pdwDataLen=0xae2ff24*=0x9890) returned 1 [0112.541] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.541] WriteFile (in: hFile=0x628, lpBuffer=0x4a40000*, nNumberOfBytesToWrite=0x9890, lpNumberOfBytesWritten=0xae2ff28, lpOverlapped=0x0 | out: lpBuffer=0x4a40000*, lpNumberOfBytesWritten=0xae2ff28*=0x9890, lpOverlapped=0x0) returned 1 [0112.541] WriteFile (in: hFile=0x628, lpBuffer=0xae2fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xae2ff18, lpOverlapped=0x0 | out: lpBuffer=0xae2fef0*, lpNumberOfBytesWritten=0xae2ff18*=0x6, lpOverlapped=0x0) returned 1 [0112.541] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xae2ff38 | out: pbData=0x0*, pdwDataLen=0xae2ff38*=0x10c) returned 1 [0112.541] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xae2fd98, pdwDataLen=0xae2ff38 | out: pbData=0xae2fd98*, pdwDataLen=0xae2ff38*=0x10c) returned 1 [0112.542] WriteFile (in: hFile=0x628, lpBuffer=0xae2fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xae2ff18, lpOverlapped=0x0 | out: lpBuffer=0xae2fd98*, lpNumberOfBytesWritten=0xae2ff18*=0x10c, lpOverlapped=0x0) returned 1 [0112.542] CloseHandle (hObject=0x628) returned 1 [0112.543] CryptDestroyKey (hKey=0x2f24740) returned 1 [0112.543] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 145 os_tid = 0x12b0 [0112.540] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html", dwFileAttributes=0x80) returned 1 [0112.544] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0112.544] GetFileSizeEx (in: hFile=0x620, lpFileSize=0xaf6ff10 | out: lpFileSize=0xaf6ff10*=16118) returned 1 [0112.544] GetFileSizeEx (in: hFile=0x620, lpFileSize=0xaf6ff50 | out: lpFileSize=0xaf6ff50*=16118) returned 1 [0112.546] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0x3dd4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.547] ReadFile (in: hFile=0x620, lpBuffer=0xaf6fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xaf6ff40, lpOverlapped=0x0 | out: lpBuffer=0xaf6fed4*, lpNumberOfBytesRead=0xaf6ff40*=0x19, lpOverlapped=0x0) returned 1 [0112.548] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.548] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xaf6ff48 | out: phKey=0xaf6ff48*=0x2f24740) returned 1 [0112.548] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.548] ReadFile (in: hFile=0x620, lpBuffer=0x4b50000, nNumberOfBytesToRead=0x3ef6, lpNumberOfBytesRead=0xaf6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4b50000*, lpNumberOfBytesRead=0xaf6ff28*=0x3ef6, lpOverlapped=0x0) returned 1 [0112.549] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xaf6ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xaf6ff2c*=0xf4250) returned 1 [0112.549] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4b50000*, pdwDataLen=0xaf6ff24*=0x3ef6, dwBufLen=0xf4250 | out: pbData=0x4b50000*, pdwDataLen=0xaf6ff24*=0x3f00) returned 1 [0112.549] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.549] WriteFile (in: hFile=0x620, lpBuffer=0x4b50000*, nNumberOfBytesToWrite=0x3f00, lpNumberOfBytesWritten=0xaf6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4b50000*, lpNumberOfBytesWritten=0xaf6ff28*=0x3f00, lpOverlapped=0x0) returned 1 [0112.549] WriteFile (in: hFile=0x620, lpBuffer=0xaf6fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xaf6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaf6fef0*, lpNumberOfBytesWritten=0xaf6ff18*=0x6, lpOverlapped=0x0) returned 1 [0112.549] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xaf6ff38 | out: pbData=0x0*, pdwDataLen=0xaf6ff38*=0x10c) returned 1 [0112.549] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xaf6fd98, pdwDataLen=0xaf6ff38 | out: pbData=0xaf6fd98*, pdwDataLen=0xaf6ff38*=0x10c) returned 1 [0112.550] WriteFile (in: hFile=0x620, lpBuffer=0xaf6fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaf6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaf6fd98*, lpNumberOfBytesWritten=0xaf6ff18*=0x10c, lpOverlapped=0x0) returned 1 [0112.550] CloseHandle (hObject=0x620) returned 1 [0112.551] CryptDestroyKey (hKey=0x2f24740) returned 1 [0112.551] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), lpNewFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html.RYK" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html.ryk"), dwFlags=0x8) returned 1 Thread: id = 146 os_tid = 0x121c [0112.548] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico", dwFileAttributes=0x80) returned 1 [0112.553] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0112.554] GetFileSizeEx (in: hFile=0x620, lpFileSize=0xb0aff10 | out: lpFileSize=0xb0aff10*=88533) returned 1 [0112.554] GetFileSizeEx (in: hFile=0x620, lpFileSize=0xb0aff50 | out: lpFileSize=0xb0aff50*=88533) returned 1 [0112.554] SetFilePointerEx (in: hFile=0x620, liDistanceToMove=0x158b3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.554] ReadFile (in: hFile=0x620, lpBuffer=0xb0afed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb0aff40, lpOverlapped=0x0 | out: lpBuffer=0xb0afed4*, lpNumberOfBytesRead=0xb0aff40*=0x19, lpOverlapped=0x0) returned 1 [0112.555] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.555] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb0aff48 | out: phKey=0xb0aff48*=0x2f24740) returned 1 [0112.555] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.555] ReadFile (in: hFile=0x620, lpBuffer=0x4c60000, nNumberOfBytesToRead=0x159d5, lpNumberOfBytesRead=0xb0aff28, lpOverlapped=0x0 | out: lpBuffer=0x4c60000*, lpNumberOfBytesRead=0xb0aff28*=0x159d5, lpOverlapped=0x0) returned 1 [0112.556] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb0aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb0aff2c*=0xf4250) returned 1 [0112.556] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4c60000*, pdwDataLen=0xb0aff24*=0x159d5, dwBufLen=0xf4250 | out: pbData=0x4c60000*, pdwDataLen=0xb0aff24*=0x159e0) returned 1 [0112.556] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.556] WriteFile (in: hFile=0x620, lpBuffer=0x4c60000*, nNumberOfBytesToWrite=0x159e0, lpNumberOfBytesWritten=0xb0aff28, lpOverlapped=0x0 | out: lpBuffer=0x4c60000*, lpNumberOfBytesWritten=0xb0aff28*=0x159e0, lpOverlapped=0x0) returned 1 [0112.557] WriteFile (in: hFile=0x620, lpBuffer=0xb0afef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb0aff18, lpOverlapped=0x0 | out: lpBuffer=0xb0afef0*, lpNumberOfBytesWritten=0xb0aff18*=0x6, lpOverlapped=0x0) returned 1 [0112.557] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb0aff38 | out: pbData=0x0*, pdwDataLen=0xb0aff38*=0x10c) returned 1 [0112.557] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb0afd98, pdwDataLen=0xb0aff38 | out: pbData=0xb0afd98*, pdwDataLen=0xb0aff38*=0x10c) returned 1 [0112.557] WriteFile (in: hFile=0x620, lpBuffer=0xb0afd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb0aff18, lpOverlapped=0x0 | out: lpBuffer=0xb0afd98*, lpNumberOfBytesWritten=0xb0aff18*=0x10c, lpOverlapped=0x0) returned 1 [0112.557] CloseHandle (hObject=0x620) returned 1 [0112.559] CryptDestroyKey (hKey=0x2f24740) returned 1 [0112.559] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), lpNewFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico.RYK" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico.ryk"), dwFlags=0x8) returned 1 Thread: id = 147 os_tid = 0x11b4 [0112.556] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", dwFileAttributes=0x80) returned 1 [0112.561] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x628 [0112.561] GetFileSizeEx (in: hFile=0x628, lpFileSize=0xb46ff10 | out: lpFileSize=0xb46ff10*=93314) returned 1 [0112.561] GetFileSizeEx (in: hFile=0x628, lpFileSize=0xb46ff50 | out: lpFileSize=0xb46ff50*=93314) returned 1 [0112.561] SetFilePointerEx (in: hFile=0x628, liDistanceToMove=0x16b60, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.561] ReadFile (in: hFile=0x628, lpBuffer=0xb46fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb46ff40, lpOverlapped=0x0 | out: lpBuffer=0xb46fed4*, lpNumberOfBytesRead=0xb46ff40*=0x19, lpOverlapped=0x0) returned 1 [0112.610] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.610] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb46ff48 | out: phKey=0xb46ff48*=0x2f24740) returned 1 [0112.610] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.610] ReadFile (in: hFile=0x628, lpBuffer=0x4d70000, nNumberOfBytesToRead=0x16c82, lpNumberOfBytesRead=0xb46ff28, lpOverlapped=0x0 | out: lpBuffer=0x4d70000*, lpNumberOfBytesRead=0xb46ff28*=0x16c82, lpOverlapped=0x0) returned 1 [0112.611] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb46ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb46ff2c*=0xf4250) returned 1 [0112.611] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4d70000*, pdwDataLen=0xb46ff24*=0x16c82, dwBufLen=0xf4250 | out: pbData=0x4d70000*, pdwDataLen=0xb46ff24*=0x16c90) returned 1 [0112.611] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.611] WriteFile (in: hFile=0x628, lpBuffer=0x4d70000*, nNumberOfBytesToWrite=0x16c90, lpNumberOfBytesWritten=0xb46ff28, lpOverlapped=0x0 | out: lpBuffer=0x4d70000*, lpNumberOfBytesWritten=0xb46ff28*=0x16c90, lpOverlapped=0x0) returned 1 [0112.612] WriteFile (in: hFile=0x628, lpBuffer=0xb46fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb46ff18, lpOverlapped=0x0 | out: lpBuffer=0xb46fef0*, lpNumberOfBytesWritten=0xb46ff18*=0x6, lpOverlapped=0x0) returned 1 [0112.612] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb46ff38 | out: pbData=0x0*, pdwDataLen=0xb46ff38*=0x10c) returned 1 [0112.612] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb46fd98, pdwDataLen=0xb46ff38 | out: pbData=0xb46fd98*, pdwDataLen=0xb46ff38*=0x10c) returned 1 [0112.612] WriteFile (in: hFile=0x628, lpBuffer=0xb46fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb46ff18, lpOverlapped=0x0 | out: lpBuffer=0xb46fd98*, lpNumberOfBytesWritten=0xb46ff18*=0x10c, lpOverlapped=0x0) returned 1 [0112.612] CloseHandle (hObject=0x628) returned 1 [0112.615] CryptDestroyKey (hKey=0x2f24740) returned 1 [0112.615] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 148 os_tid = 0x11e4 [0112.610] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", dwFileAttributes=0x80) returned 1 [0112.610] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x628 [0112.617] GetFileSizeEx (in: hFile=0x628, lpFileSize=0xb5aff10 | out: lpFileSize=0xb5aff10*=39050) returned 1 [0112.617] GetFileSizeEx (in: hFile=0x628, lpFileSize=0xb5aff50 | out: lpFileSize=0xb5aff50*=39050) returned 1 [0112.617] SetFilePointerEx (in: hFile=0x628, liDistanceToMove=0x9768, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.617] ReadFile (in: hFile=0x628, lpBuffer=0xb5afed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb5aff40, lpOverlapped=0x0 | out: lpBuffer=0xb5afed4*, lpNumberOfBytesRead=0xb5aff40*=0x19, lpOverlapped=0x0) returned 1 [0112.618] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.618] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb5aff48 | out: phKey=0xb5aff48*=0x2f24740) returned 1 [0112.618] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.618] ReadFile (in: hFile=0x628, lpBuffer=0x4e80000, nNumberOfBytesToRead=0x988a, lpNumberOfBytesRead=0xb5aff28, lpOverlapped=0x0 | out: lpBuffer=0x4e80000*, lpNumberOfBytesRead=0xb5aff28*=0x988a, lpOverlapped=0x0) returned 1 [0112.621] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb5aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb5aff2c*=0xf4250) returned 1 [0112.622] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4e80000*, pdwDataLen=0xb5aff24*=0x988a, dwBufLen=0xf4250 | out: pbData=0x4e80000*, pdwDataLen=0xb5aff24*=0x9890) returned 1 [0112.622] SetFilePointer (in: hFile=0x628, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.622] WriteFile (in: hFile=0x628, lpBuffer=0x4e80000*, nNumberOfBytesToWrite=0x9890, lpNumberOfBytesWritten=0xb5aff28, lpOverlapped=0x0 | out: lpBuffer=0x4e80000*, lpNumberOfBytesWritten=0xb5aff28*=0x9890, lpOverlapped=0x0) returned 1 [0112.622] WriteFile (in: hFile=0x628, lpBuffer=0xb5afef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb5aff18, lpOverlapped=0x0 | out: lpBuffer=0xb5afef0*, lpNumberOfBytesWritten=0xb5aff18*=0x6, lpOverlapped=0x0) returned 1 [0112.622] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb5aff38 | out: pbData=0x0*, pdwDataLen=0xb5aff38*=0x10c) returned 1 [0112.622] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb5afd98, pdwDataLen=0xb5aff38 | out: pbData=0xb5afd98*, pdwDataLen=0xb5aff38*=0x10c) returned 1 [0112.622] WriteFile (in: hFile=0x628, lpBuffer=0xb5afd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb5aff18, lpOverlapped=0x0 | out: lpBuffer=0xb5afd98*, lpNumberOfBytesWritten=0xb5aff18*=0x10c, lpOverlapped=0x0) returned 1 [0112.622] CloseHandle (hObject=0x628) returned 1 [0112.624] CryptDestroyKey (hKey=0x2f24740) returned 1 [0112.624] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 152 os_tid = 0xf4c [0112.988] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico", dwFileAttributes=0x80) returned 1 [0112.989] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x448 [0112.989] GetFileSizeEx (in: hFile=0x448, lpFileSize=0xa62ff10 | out: lpFileSize=0xa62ff10*=1150) returned 1 [0112.989] GetFileSizeEx (in: hFile=0x448, lpFileSize=0xa62ff50 | out: lpFileSize=0xa62ff50*=1150) returned 1 [0112.989] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x35c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.989] ReadFile (in: hFile=0x448, lpBuffer=0xa62fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa62ff40, lpOverlapped=0x0 | out: lpBuffer=0xa62fed4*, lpNumberOfBytesRead=0xa62ff40*=0x19, lpOverlapped=0x0) returned 1 [0112.991] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.991] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa62ff48 | out: phKey=0xa62ff48*=0x2f24740) returned 1 [0112.991] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.991] ReadFile (in: hFile=0x448, lpBuffer=0x42d0000, nNumberOfBytesToRead=0x47e, lpNumberOfBytesRead=0xa62ff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa62ff28*=0x47e, lpOverlapped=0x0) returned 1 [0112.991] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa62ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa62ff2c*=0xf4250) returned 1 [0112.991] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa62ff24*=0x47e, dwBufLen=0xf4250 | out: pbData=0x42d0000*, pdwDataLen=0xa62ff24*=0x480) returned 1 [0112.991] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.991] WriteFile (in: hFile=0x448, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0xa62ff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa62ff28*=0x480, lpOverlapped=0x0) returned 1 [0112.991] WriteFile (in: hFile=0x448, lpBuffer=0xa62fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa62ff18, lpOverlapped=0x0 | out: lpBuffer=0xa62fef0*, lpNumberOfBytesWritten=0xa62ff18*=0x6, lpOverlapped=0x0) returned 1 [0112.991] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa62ff38 | out: pbData=0x0*, pdwDataLen=0xa62ff38*=0x10c) returned 1 [0112.991] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa62fd98, pdwDataLen=0xa62ff38 | out: pbData=0xa62fd98*, pdwDataLen=0xa62ff38*=0x10c) returned 1 [0112.991] WriteFile (in: hFile=0x448, lpBuffer=0xa62fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa62ff18, lpOverlapped=0x0 | out: lpBuffer=0xa62fd98*, lpNumberOfBytesWritten=0xa62ff18*=0x10c, lpOverlapped=0x0) returned 1 [0112.992] CloseHandle (hObject=0x448) returned 1 [0112.993] CryptDestroyKey (hKey=0x2f24740) returned 1 [0112.993] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico.RYK" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico.ryk"), dwFlags=0x8) returned 1 Thread: id = 153 os_tid = 0x12c0 [0112.990] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico", dwFileAttributes=0x80) returned 1 [0112.995] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x478 [0112.995] GetFileSizeEx (in: hFile=0x478, lpFileSize=0xa72ff10 | out: lpFileSize=0xa72ff10*=894) returned 1 [0112.995] GetFileSizeEx (in: hFile=0x478, lpFileSize=0xa72ff50 | out: lpFileSize=0xa72ff50*=894) returned 1 [0112.995] SetFilePointerEx (in: hFile=0x478, liDistanceToMove=0x25c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.995] ReadFile (in: hFile=0x478, lpBuffer=0xa72fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa72ff40, lpOverlapped=0x0 | out: lpBuffer=0xa72fed4*, lpNumberOfBytesRead=0xa72ff40*=0x19, lpOverlapped=0x0) returned 1 [0112.997] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.997] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa72ff48 | out: phKey=0xa72ff48*=0x2f24740) returned 1 [0112.997] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.998] ReadFile (in: hFile=0x478, lpBuffer=0x43e0000, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0xa72ff28, lpOverlapped=0x0 | out: lpBuffer=0x43e0000*, lpNumberOfBytesRead=0xa72ff28*=0x37e, lpOverlapped=0x0) returned 1 [0112.998] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa72ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa72ff2c*=0xf4250) returned 1 [0112.998] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x43e0000*, pdwDataLen=0xa72ff24*=0x37e, dwBufLen=0xf4250 | out: pbData=0x43e0000*, pdwDataLen=0xa72ff24*=0x380) returned 1 [0112.998] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0112.998] WriteFile (in: hFile=0x478, lpBuffer=0x43e0000*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0xa72ff28, lpOverlapped=0x0 | out: lpBuffer=0x43e0000*, lpNumberOfBytesWritten=0xa72ff28*=0x380, lpOverlapped=0x0) returned 1 [0112.998] WriteFile (in: hFile=0x478, lpBuffer=0xa72fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa72ff18, lpOverlapped=0x0 | out: lpBuffer=0xa72fef0*, lpNumberOfBytesWritten=0xa72ff18*=0x6, lpOverlapped=0x0) returned 1 [0112.998] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa72ff38 | out: pbData=0x0*, pdwDataLen=0xa72ff38*=0x10c) returned 1 [0112.998] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa72fd98, pdwDataLen=0xa72ff38 | out: pbData=0xa72fd98*, pdwDataLen=0xa72ff38*=0x10c) returned 1 [0112.998] WriteFile (in: hFile=0x478, lpBuffer=0xa72fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa72ff18, lpOverlapped=0x0 | out: lpBuffer=0xa72fd98*, lpNumberOfBytesWritten=0xa72ff18*=0x10c, lpOverlapped=0x0) returned 1 [0112.998] CloseHandle (hObject=0x478) returned 1 [0112.999] CryptDestroyKey (hKey=0x2f24740) returned 1 [0112.999] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico.RYK" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico.ryk"), dwFlags=0x8) returned 1 Thread: id = 154 os_tid = 0x1174 [0112.997] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico", dwFileAttributes=0x80) returned 1 [0113.001] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x478 [0113.001] GetFileSizeEx (in: hFile=0x478, lpFileSize=0xa82ff10 | out: lpFileSize=0xa82ff10*=894) returned 1 [0113.001] GetFileSizeEx (in: hFile=0x478, lpFileSize=0xa82ff50 | out: lpFileSize=0xa82ff50*=894) returned 1 [0113.001] SetFilePointerEx (in: hFile=0x478, liDistanceToMove=0x25c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.001] ReadFile (in: hFile=0x478, lpBuffer=0xa82fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa82ff40, lpOverlapped=0x0 | out: lpBuffer=0xa82fed4*, lpNumberOfBytesRead=0xa82ff40*=0x19, lpOverlapped=0x0) returned 1 [0113.003] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.003] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa82ff48 | out: phKey=0xa82ff48*=0x2f24740) returned 1 [0113.003] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.003] ReadFile (in: hFile=0x478, lpBuffer=0x44f0000, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x44f0000*, lpNumberOfBytesRead=0xa82ff28*=0x37e, lpOverlapped=0x0) returned 1 [0113.003] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4250) returned 1 [0113.003] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x44f0000*, pdwDataLen=0xa82ff24*=0x37e, dwBufLen=0xf4250 | out: pbData=0x44f0000*, pdwDataLen=0xa82ff24*=0x380) returned 1 [0113.003] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.003] WriteFile (in: hFile=0x478, lpBuffer=0x44f0000*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x44f0000*, lpNumberOfBytesWritten=0xa82ff28*=0x380, lpOverlapped=0x0) returned 1 [0113.003] WriteFile (in: hFile=0x478, lpBuffer=0xa82fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa82ff18, lpOverlapped=0x0 | out: lpBuffer=0xa82fef0*, lpNumberOfBytesWritten=0xa82ff18*=0x6, lpOverlapped=0x0) returned 1 [0113.003] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa82ff38 | out: pbData=0x0*, pdwDataLen=0xa82ff38*=0x10c) returned 1 [0113.003] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa82fd98, pdwDataLen=0xa82ff38 | out: pbData=0xa82fd98*, pdwDataLen=0xa82ff38*=0x10c) returned 1 [0113.003] WriteFile (in: hFile=0x478, lpBuffer=0xa82fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa82ff18, lpOverlapped=0x0 | out: lpBuffer=0xa82fd98*, lpNumberOfBytesWritten=0xa82ff18*=0x10c, lpOverlapped=0x0) returned 1 [0113.004] CloseHandle (hObject=0x478) returned 1 [0113.004] CryptDestroyKey (hKey=0x2f24740) returned 1 [0113.004] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico.RYK" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico.ryk"), dwFlags=0x8) returned 1 Thread: id = 155 os_tid = 0xd28 [0113.007] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico", dwFileAttributes=0x80) returned 1 [0113.007] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x478 [0113.007] GetFileSizeEx (in: hFile=0x478, lpFileSize=0xa92ff10 | out: lpFileSize=0xa92ff10*=894) returned 1 [0113.007] GetFileSizeEx (in: hFile=0x478, lpFileSize=0xa92ff50 | out: lpFileSize=0xa92ff50*=894) returned 1 [0113.007] SetFilePointerEx (in: hFile=0x478, liDistanceToMove=0x25c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.007] ReadFile (in: hFile=0x478, lpBuffer=0xa92fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa92ff40, lpOverlapped=0x0 | out: lpBuffer=0xa92fed4*, lpNumberOfBytesRead=0xa92ff40*=0x19, lpOverlapped=0x0) returned 1 [0113.008] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.008] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa92ff48 | out: phKey=0xa92ff48*=0x2f24740) returned 1 [0113.008] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.008] ReadFile (in: hFile=0x478, lpBuffer=0x4600000, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0xa92ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa92ff28*=0x37e, lpOverlapped=0x0) returned 1 [0113.009] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa92ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa92ff2c*=0xf4250) returned 1 [0113.009] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa92ff24*=0x37e, dwBufLen=0xf4250 | out: pbData=0x4600000*, pdwDataLen=0xa92ff24*=0x380) returned 1 [0113.009] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.009] WriteFile (in: hFile=0x478, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0xa92ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa92ff28*=0x380, lpOverlapped=0x0) returned 1 [0113.009] WriteFile (in: hFile=0x478, lpBuffer=0xa92fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa92ff18, lpOverlapped=0x0 | out: lpBuffer=0xa92fef0*, lpNumberOfBytesWritten=0xa92ff18*=0x6, lpOverlapped=0x0) returned 1 [0113.009] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa92ff38 | out: pbData=0x0*, pdwDataLen=0xa92ff38*=0x10c) returned 1 [0113.009] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa92fd98, pdwDataLen=0xa92ff38 | out: pbData=0xa92fd98*, pdwDataLen=0xa92ff38*=0x10c) returned 1 [0113.009] WriteFile (in: hFile=0x478, lpBuffer=0xa92fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa92ff18, lpOverlapped=0x0 | out: lpBuffer=0xa92fd98*, lpNumberOfBytesWritten=0xa92ff18*=0x10c, lpOverlapped=0x0) returned 1 [0113.009] CloseHandle (hObject=0x478) returned 1 [0113.010] CryptDestroyKey (hKey=0x2f24740) returned 1 [0113.010] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico.RYK" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico.ryk"), dwFlags=0x8) returned 1 Thread: id = 156 os_tid = 0x620 [0113.011] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico", dwFileAttributes=0x80) returned 1 [0113.013] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x478 [0113.013] GetFileSizeEx (in: hFile=0x478, lpFileSize=0xaa6ff10 | out: lpFileSize=0xaa6ff10*=894) returned 1 [0113.013] GetFileSizeEx (in: hFile=0x478, lpFileSize=0xaa6ff50 | out: lpFileSize=0xaa6ff50*=894) returned 1 [0113.013] SetFilePointerEx (in: hFile=0x478, liDistanceToMove=0x25c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.013] ReadFile (in: hFile=0x478, lpBuffer=0xaa6fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xaa6ff40, lpOverlapped=0x0 | out: lpBuffer=0xaa6fed4*, lpNumberOfBytesRead=0xaa6ff40*=0x19, lpOverlapped=0x0) returned 1 [0113.014] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.014] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xaa6ff48 | out: phKey=0xaa6ff48*=0x2f24740) returned 1 [0113.014] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.015] ReadFile (in: hFile=0x478, lpBuffer=0x4710000, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0xaa6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4710000*, lpNumberOfBytesRead=0xaa6ff28*=0x37e, lpOverlapped=0x0) returned 1 [0113.015] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xaa6ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xaa6ff2c*=0xf4250) returned 1 [0113.015] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4710000*, pdwDataLen=0xaa6ff24*=0x37e, dwBufLen=0xf4250 | out: pbData=0x4710000*, pdwDataLen=0xaa6ff24*=0x380) returned 1 [0113.015] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.015] WriteFile (in: hFile=0x478, lpBuffer=0x4710000*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0xaa6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4710000*, lpNumberOfBytesWritten=0xaa6ff28*=0x380, lpOverlapped=0x0) returned 1 [0113.015] WriteFile (in: hFile=0x478, lpBuffer=0xaa6fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xaa6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaa6fef0*, lpNumberOfBytesWritten=0xaa6ff18*=0x6, lpOverlapped=0x0) returned 1 [0113.015] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xaa6ff38 | out: pbData=0x0*, pdwDataLen=0xaa6ff38*=0x10c) returned 1 [0113.015] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xaa6fd98, pdwDataLen=0xaa6ff38 | out: pbData=0xaa6fd98*, pdwDataLen=0xaa6ff38*=0x10c) returned 1 [0113.015] WriteFile (in: hFile=0x478, lpBuffer=0xaa6fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaa6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaa6fd98*, lpNumberOfBytesWritten=0xaa6ff18*=0x10c, lpOverlapped=0x0) returned 1 [0113.015] CloseHandle (hObject=0x478) returned 1 [0113.016] CryptDestroyKey (hKey=0x2f24740) returned 1 [0113.016] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico.RYK" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico.ryk"), dwFlags=0x8) returned 1 Thread: id = 157 os_tid = 0xc10 [0113.014] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico", dwFileAttributes=0x80) returned 1 [0113.018] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x478 [0113.018] GetFileSizeEx (in: hFile=0x478, lpFileSize=0xabaff10 | out: lpFileSize=0xabaff10*=894) returned 1 [0113.018] GetFileSizeEx (in: hFile=0x478, lpFileSize=0xabaff50 | out: lpFileSize=0xabaff50*=894) returned 1 [0113.018] SetFilePointerEx (in: hFile=0x478, liDistanceToMove=0x25c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.018] ReadFile (in: hFile=0x478, lpBuffer=0xabafed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xabaff40, lpOverlapped=0x0 | out: lpBuffer=0xabafed4*, lpNumberOfBytesRead=0xabaff40*=0x19, lpOverlapped=0x0) returned 1 [0113.020] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.020] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xabaff48 | out: phKey=0xabaff48*=0x2f24740) returned 1 [0113.020] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.020] ReadFile (in: hFile=0x478, lpBuffer=0x4820000, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0xabaff28, lpOverlapped=0x0 | out: lpBuffer=0x4820000*, lpNumberOfBytesRead=0xabaff28*=0x37e, lpOverlapped=0x0) returned 1 [0113.020] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xabaff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xabaff2c*=0xf4250) returned 1 [0113.020] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4820000*, pdwDataLen=0xabaff24*=0x37e, dwBufLen=0xf4250 | out: pbData=0x4820000*, pdwDataLen=0xabaff24*=0x380) returned 1 [0113.020] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.020] WriteFile (in: hFile=0x478, lpBuffer=0x4820000*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0xabaff28, lpOverlapped=0x0 | out: lpBuffer=0x4820000*, lpNumberOfBytesWritten=0xabaff28*=0x380, lpOverlapped=0x0) returned 1 [0113.020] WriteFile (in: hFile=0x478, lpBuffer=0xabafef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xabaff18, lpOverlapped=0x0 | out: lpBuffer=0xabafef0*, lpNumberOfBytesWritten=0xabaff18*=0x6, lpOverlapped=0x0) returned 1 [0113.020] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xabaff38 | out: pbData=0x0*, pdwDataLen=0xabaff38*=0x10c) returned 1 [0113.020] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xabafd98, pdwDataLen=0xabaff38 | out: pbData=0xabafd98*, pdwDataLen=0xabaff38*=0x10c) returned 1 [0113.021] WriteFile (in: hFile=0x478, lpBuffer=0xabafd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xabaff18, lpOverlapped=0x0 | out: lpBuffer=0xabafd98*, lpNumberOfBytesWritten=0xabaff18*=0x10c, lpOverlapped=0x0) returned 1 [0113.021] CloseHandle (hObject=0x478) returned 1 [0113.021] CryptDestroyKey (hKey=0x2f24740) returned 1 [0113.021] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico.RYK" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico.ryk"), dwFlags=0x8) returned 1 Thread: id = 158 os_tid = 0xad8 [0113.020] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico", dwFileAttributes=0x80) returned 1 [0113.024] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x478 [0113.024] GetFileSizeEx (in: hFile=0x478, lpFileSize=0xaceff10 | out: lpFileSize=0xaceff10*=894) returned 1 [0113.024] GetFileSizeEx (in: hFile=0x478, lpFileSize=0xaceff50 | out: lpFileSize=0xaceff50*=894) returned 1 [0113.024] SetFilePointerEx (in: hFile=0x478, liDistanceToMove=0x25c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.024] ReadFile (in: hFile=0x478, lpBuffer=0xacefed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xaceff40, lpOverlapped=0x0 | out: lpBuffer=0xacefed4*, lpNumberOfBytesRead=0xaceff40*=0x19, lpOverlapped=0x0) returned 1 [0113.026] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.026] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xaceff48 | out: phKey=0xaceff48*=0x2f24740) returned 1 [0113.026] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.026] ReadFile (in: hFile=0x478, lpBuffer=0x4930000, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0xaceff28, lpOverlapped=0x0 | out: lpBuffer=0x4930000*, lpNumberOfBytesRead=0xaceff28*=0x37e, lpOverlapped=0x0) returned 1 [0113.026] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xaceff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xaceff2c*=0xf4250) returned 1 [0113.026] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4930000*, pdwDataLen=0xaceff24*=0x37e, dwBufLen=0xf4250 | out: pbData=0x4930000*, pdwDataLen=0xaceff24*=0x380) returned 1 [0113.026] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.026] WriteFile (in: hFile=0x478, lpBuffer=0x4930000*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0xaceff28, lpOverlapped=0x0 | out: lpBuffer=0x4930000*, lpNumberOfBytesWritten=0xaceff28*=0x380, lpOverlapped=0x0) returned 1 [0113.026] WriteFile (in: hFile=0x478, lpBuffer=0xacefef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xaceff18, lpOverlapped=0x0 | out: lpBuffer=0xacefef0*, lpNumberOfBytesWritten=0xaceff18*=0x6, lpOverlapped=0x0) returned 1 [0113.026] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xaceff38 | out: pbData=0x0*, pdwDataLen=0xaceff38*=0x10c) returned 1 [0113.026] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xacefd98, pdwDataLen=0xaceff38 | out: pbData=0xacefd98*, pdwDataLen=0xaceff38*=0x10c) returned 1 [0113.027] WriteFile (in: hFile=0x478, lpBuffer=0xacefd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaceff18, lpOverlapped=0x0 | out: lpBuffer=0xacefd98*, lpNumberOfBytesWritten=0xaceff18*=0x10c, lpOverlapped=0x0) returned 1 [0113.027] CloseHandle (hObject=0x478) returned 1 [0113.027] CryptDestroyKey (hKey=0x2f24740) returned 1 [0113.027] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico.RYK" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico.ryk"), dwFlags=0x8) returned 1 Thread: id = 159 os_tid = 0xcd8 [0113.025] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico", dwFileAttributes=0x80) returned 1 [0113.031] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x478 [0113.031] GetFileSizeEx (in: hFile=0x478, lpFileSize=0xae2ff10 | out: lpFileSize=0xae2ff10*=894) returned 1 [0113.031] GetFileSizeEx (in: hFile=0x478, lpFileSize=0xae2ff50 | out: lpFileSize=0xae2ff50*=894) returned 1 [0113.031] SetFilePointerEx (in: hFile=0x478, liDistanceToMove=0x25c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.031] ReadFile (in: hFile=0x478, lpBuffer=0xae2fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xae2ff40, lpOverlapped=0x0 | out: lpBuffer=0xae2fed4*, lpNumberOfBytesRead=0xae2ff40*=0x19, lpOverlapped=0x0) returned 1 [0113.034] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.034] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xae2ff48 | out: phKey=0xae2ff48*=0x2f24740) returned 1 [0113.034] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.034] ReadFile (in: hFile=0x478, lpBuffer=0x4a40000, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0xae2ff28, lpOverlapped=0x0 | out: lpBuffer=0x4a40000*, lpNumberOfBytesRead=0xae2ff28*=0x37e, lpOverlapped=0x0) returned 1 [0113.034] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xae2ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xae2ff2c*=0xf4250) returned 1 [0113.034] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4a40000*, pdwDataLen=0xae2ff24*=0x37e, dwBufLen=0xf4250 | out: pbData=0x4a40000*, pdwDataLen=0xae2ff24*=0x380) returned 1 [0113.034] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.034] WriteFile (in: hFile=0x478, lpBuffer=0x4a40000*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0xae2ff28, lpOverlapped=0x0 | out: lpBuffer=0x4a40000*, lpNumberOfBytesWritten=0xae2ff28*=0x380, lpOverlapped=0x0) returned 1 [0113.035] WriteFile (in: hFile=0x478, lpBuffer=0xae2fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xae2ff18, lpOverlapped=0x0 | out: lpBuffer=0xae2fef0*, lpNumberOfBytesWritten=0xae2ff18*=0x6, lpOverlapped=0x0) returned 1 [0113.035] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xae2ff38 | out: pbData=0x0*, pdwDataLen=0xae2ff38*=0x10c) returned 1 [0113.035] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xae2fd98, pdwDataLen=0xae2ff38 | out: pbData=0xae2fd98*, pdwDataLen=0xae2ff38*=0x10c) returned 1 [0113.035] WriteFile (in: hFile=0x478, lpBuffer=0xae2fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xae2ff18, lpOverlapped=0x0 | out: lpBuffer=0xae2fd98*, lpNumberOfBytesWritten=0xae2ff18*=0x10c, lpOverlapped=0x0) returned 1 [0113.035] CloseHandle (hObject=0x478) returned 1 [0113.036] CryptDestroyKey (hKey=0x2f24740) returned 1 [0113.036] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico.RYK" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico.ryk"), dwFlags=0x8) returned 1 Thread: id = 160 os_tid = 0xdbc [0113.029] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico", dwFileAttributes=0x80) returned 1 [0113.033] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x448 [0113.033] GetFileSizeEx (in: hFile=0x448, lpFileSize=0xaf6ff10 | out: lpFileSize=0xaf6ff10*=894) returned 1 [0113.033] GetFileSizeEx (in: hFile=0x448, lpFileSize=0xaf6ff50 | out: lpFileSize=0xaf6ff50*=894) returned 1 [0113.033] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x25c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.033] ReadFile (in: hFile=0x448, lpBuffer=0xaf6fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xaf6ff40, lpOverlapped=0x0 | out: lpBuffer=0xaf6fed4*, lpNumberOfBytesRead=0xaf6ff40*=0x19, lpOverlapped=0x0) returned 1 [0113.038] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.038] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xaf6ff48 | out: phKey=0xaf6ff48*=0x2f24740) returned 1 [0113.038] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.038] ReadFile (in: hFile=0x448, lpBuffer=0x4b50000, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0xaf6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4b50000*, lpNumberOfBytesRead=0xaf6ff28*=0x37e, lpOverlapped=0x0) returned 1 [0113.038] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xaf6ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xaf6ff2c*=0xf4250) returned 1 [0113.038] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4b50000*, pdwDataLen=0xaf6ff24*=0x37e, dwBufLen=0xf4250 | out: pbData=0x4b50000*, pdwDataLen=0xaf6ff24*=0x380) returned 1 [0113.038] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.038] WriteFile (in: hFile=0x448, lpBuffer=0x4b50000*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0xaf6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4b50000*, lpNumberOfBytesWritten=0xaf6ff28*=0x380, lpOverlapped=0x0) returned 1 [0113.038] WriteFile (in: hFile=0x448, lpBuffer=0xaf6fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xaf6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaf6fef0*, lpNumberOfBytesWritten=0xaf6ff18*=0x6, lpOverlapped=0x0) returned 1 [0113.038] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xaf6ff38 | out: pbData=0x0*, pdwDataLen=0xaf6ff38*=0x10c) returned 1 [0113.038] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xaf6fd98, pdwDataLen=0xaf6ff38 | out: pbData=0xaf6fd98*, pdwDataLen=0xaf6ff38*=0x10c) returned 1 [0113.038] WriteFile (in: hFile=0x448, lpBuffer=0xaf6fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaf6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaf6fd98*, lpNumberOfBytesWritten=0xaf6ff18*=0x10c, lpOverlapped=0x0) returned 1 [0113.038] CloseHandle (hObject=0x448) returned 1 [0113.039] CryptDestroyKey (hKey=0x2f24740) returned 1 [0113.039] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico.RYK" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico.ryk"), dwFlags=0x8) returned 1 Thread: id = 161 os_tid = 0x2c8 [0113.041] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico", dwFileAttributes=0x80) returned 1 [0113.041] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x448 [0113.042] GetFileSizeEx (in: hFile=0x448, lpFileSize=0xb0aff10 | out: lpFileSize=0xb0aff10*=1150) returned 1 [0113.042] GetFileSizeEx (in: hFile=0x448, lpFileSize=0xb0aff50 | out: lpFileSize=0xb0aff50*=1150) returned 1 [0113.042] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x35c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.042] ReadFile (in: hFile=0x448, lpBuffer=0xb0afed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb0aff40, lpOverlapped=0x0 | out: lpBuffer=0xb0afed4*, lpNumberOfBytesRead=0xb0aff40*=0x19, lpOverlapped=0x0) returned 1 [0113.043] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.043] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb0aff48 | out: phKey=0xb0aff48*=0x2f24740) returned 1 [0113.043] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.043] ReadFile (in: hFile=0x448, lpBuffer=0x4c60000, nNumberOfBytesToRead=0x47e, lpNumberOfBytesRead=0xb0aff28, lpOverlapped=0x0 | out: lpBuffer=0x4c60000*, lpNumberOfBytesRead=0xb0aff28*=0x47e, lpOverlapped=0x0) returned 1 [0113.043] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb0aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb0aff2c*=0xf4250) returned 1 [0113.043] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4c60000*, pdwDataLen=0xb0aff24*=0x47e, dwBufLen=0xf4250 | out: pbData=0x4c60000*, pdwDataLen=0xb0aff24*=0x480) returned 1 [0113.043] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.043] WriteFile (in: hFile=0x448, lpBuffer=0x4c60000*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0xb0aff28, lpOverlapped=0x0 | out: lpBuffer=0x4c60000*, lpNumberOfBytesWritten=0xb0aff28*=0x480, lpOverlapped=0x0) returned 1 [0113.044] WriteFile (in: hFile=0x448, lpBuffer=0xb0afef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb0aff18, lpOverlapped=0x0 | out: lpBuffer=0xb0afef0*, lpNumberOfBytesWritten=0xb0aff18*=0x6, lpOverlapped=0x0) returned 1 [0113.044] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb0aff38 | out: pbData=0x0*, pdwDataLen=0xb0aff38*=0x10c) returned 1 [0113.044] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb0afd98, pdwDataLen=0xb0aff38 | out: pbData=0xb0afd98*, pdwDataLen=0xb0aff38*=0x10c) returned 1 [0113.044] WriteFile (in: hFile=0x448, lpBuffer=0xb0afd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb0aff18, lpOverlapped=0x0 | out: lpBuffer=0xb0afd98*, lpNumberOfBytesWritten=0xb0aff18*=0x10c, lpOverlapped=0x0) returned 1 [0113.044] CloseHandle (hObject=0x448) returned 1 [0113.045] CryptDestroyKey (hKey=0x2f24740) returned 1 [0113.045] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico.RYK" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico.ryk"), dwFlags=0x8) returned 1 Thread: id = 162 os_tid = 0x3c0 [0113.043] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico", dwFileAttributes=0x80) returned 1 [0113.047] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x448 [0113.047] GetFileSizeEx (in: hFile=0x448, lpFileSize=0xb46ff10 | out: lpFileSize=0xb46ff10*=36710) returned 1 [0113.047] GetFileSizeEx (in: hFile=0x448, lpFileSize=0xb46ff50 | out: lpFileSize=0xb46ff50*=36710) returned 1 [0113.047] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x8e44, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.047] ReadFile (in: hFile=0x448, lpBuffer=0xb46fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb46ff40, lpOverlapped=0x0 | out: lpBuffer=0xb46fed4*, lpNumberOfBytesRead=0xb46ff40*=0x19, lpOverlapped=0x0) returned 1 [0113.048] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.048] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb46ff48 | out: phKey=0xb46ff48*=0x2f24740) returned 1 [0113.048] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.048] ReadFile (in: hFile=0x448, lpBuffer=0x4d70000, nNumberOfBytesToRead=0x8f66, lpNumberOfBytesRead=0xb46ff28, lpOverlapped=0x0 | out: lpBuffer=0x4d70000*, lpNumberOfBytesRead=0xb46ff28*=0x8f66, lpOverlapped=0x0) returned 1 [0113.049] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb46ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb46ff2c*=0xf4250) returned 1 [0113.049] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4d70000*, pdwDataLen=0xb46ff24*=0x8f66, dwBufLen=0xf4250 | out: pbData=0x4d70000*, pdwDataLen=0xb46ff24*=0x8f70) returned 1 [0113.049] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.049] WriteFile (in: hFile=0x448, lpBuffer=0x4d70000*, nNumberOfBytesToWrite=0x8f70, lpNumberOfBytesWritten=0xb46ff28, lpOverlapped=0x0 | out: lpBuffer=0x4d70000*, lpNumberOfBytesWritten=0xb46ff28*=0x8f70, lpOverlapped=0x0) returned 1 [0113.050] WriteFile (in: hFile=0x448, lpBuffer=0xb46fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb46ff18, lpOverlapped=0x0 | out: lpBuffer=0xb46fef0*, lpNumberOfBytesWritten=0xb46ff18*=0x6, lpOverlapped=0x0) returned 1 [0113.050] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb46ff38 | out: pbData=0x0*, pdwDataLen=0xb46ff38*=0x10c) returned 1 [0113.050] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb46fd98, pdwDataLen=0xb46ff38 | out: pbData=0xb46fd98*, pdwDataLen=0xb46ff38*=0x10c) returned 1 [0113.050] WriteFile (in: hFile=0x448, lpBuffer=0xb46fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb46ff18, lpOverlapped=0x0 | out: lpBuffer=0xb46fd98*, lpNumberOfBytesWritten=0xb46ff18*=0x10c, lpOverlapped=0x0) returned 1 [0113.050] CloseHandle (hObject=0x448) returned 1 [0113.052] CryptDestroyKey (hKey=0x2f24740) returned 1 [0113.052] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico.RYK" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico.ryk"), dwFlags=0x8) returned 1 Thread: id = 163 os_tid = 0x474 [0113.049] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico", dwFileAttributes=0x80) returned 1 [0113.054] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x448 [0113.054] GetFileSizeEx (in: hFile=0x448, lpFileSize=0xb6eff10 | out: lpFileSize=0xb6eff10*=10134) returned 1 [0113.054] GetFileSizeEx (in: hFile=0x448, lpFileSize=0xb6eff50 | out: lpFileSize=0xb6eff50*=10134) returned 1 [0113.054] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x2674, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.054] ReadFile (in: hFile=0x448, lpBuffer=0xb6efed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb6eff40, lpOverlapped=0x0 | out: lpBuffer=0xb6efed4*, lpNumberOfBytesRead=0xb6eff40*=0x19, lpOverlapped=0x0) returned 1 [0113.056] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.056] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb6eff48 | out: phKey=0xb6eff48*=0x2f24740) returned 1 [0113.056] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.056] ReadFile (in: hFile=0x448, lpBuffer=0x4f90000, nNumberOfBytesToRead=0x2796, lpNumberOfBytesRead=0xb6eff28, lpOverlapped=0x0 | out: lpBuffer=0x4f90000*, lpNumberOfBytesRead=0xb6eff28*=0x2796, lpOverlapped=0x0) returned 1 [0113.056] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb6eff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb6eff2c*=0xf4250) returned 1 [0113.056] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4f90000*, pdwDataLen=0xb6eff24*=0x2796, dwBufLen=0xf4250 | out: pbData=0x4f90000*, pdwDataLen=0xb6eff24*=0x27a0) returned 1 [0113.056] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.057] WriteFile (in: hFile=0x448, lpBuffer=0x4f90000*, nNumberOfBytesToWrite=0x27a0, lpNumberOfBytesWritten=0xb6eff28, lpOverlapped=0x0 | out: lpBuffer=0x4f90000*, lpNumberOfBytesWritten=0xb6eff28*=0x27a0, lpOverlapped=0x0) returned 1 [0113.057] WriteFile (in: hFile=0x448, lpBuffer=0xb6efef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb6eff18, lpOverlapped=0x0 | out: lpBuffer=0xb6efef0*, lpNumberOfBytesWritten=0xb6eff18*=0x6, lpOverlapped=0x0) returned 1 [0113.057] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb6eff38 | out: pbData=0x0*, pdwDataLen=0xb6eff38*=0x10c) returned 1 [0113.057] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb6efd98, pdwDataLen=0xb6eff38 | out: pbData=0xb6efd98*, pdwDataLen=0xb6eff38*=0x10c) returned 1 [0113.057] WriteFile (in: hFile=0x448, lpBuffer=0xb6efd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb6eff18, lpOverlapped=0x0 | out: lpBuffer=0xb6efd98*, lpNumberOfBytesWritten=0xb6eff18*=0x10c, lpOverlapped=0x0) returned 1 [0113.057] CloseHandle (hObject=0x448) returned 1 [0113.058] CryptDestroyKey (hKey=0x2f24740) returned 1 [0113.058] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico.RYK" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico.ryk"), dwFlags=0x8) returned 1 Thread: id = 164 os_tid = 0x6d0 [0113.055] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico", dwFileAttributes=0x80) returned 1 [0113.058] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x448 [0113.060] GetFileSizeEx (in: hFile=0x448, lpFileSize=0xb82ff10 | out: lpFileSize=0xb82ff10*=1150) returned 1 [0113.060] GetFileSizeEx (in: hFile=0x448, lpFileSize=0xb82ff50 | out: lpFileSize=0xb82ff50*=1150) returned 1 [0113.060] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x35c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.060] ReadFile (in: hFile=0x448, lpBuffer=0xb82fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb82ff40, lpOverlapped=0x0 | out: lpBuffer=0xb82fed4*, lpNumberOfBytesRead=0xb82ff40*=0x19, lpOverlapped=0x0) returned 1 [0113.061] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.061] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb82ff48 | out: phKey=0xb82ff48*=0x2f24740) returned 1 [0113.061] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.061] ReadFile (in: hFile=0x448, lpBuffer=0x50a0000, nNumberOfBytesToRead=0x47e, lpNumberOfBytesRead=0xb82ff28, lpOverlapped=0x0 | out: lpBuffer=0x50a0000*, lpNumberOfBytesRead=0xb82ff28*=0x47e, lpOverlapped=0x0) returned 1 [0113.061] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb82ff2c*=0xf4250) returned 1 [0113.062] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x50a0000*, pdwDataLen=0xb82ff24*=0x47e, dwBufLen=0xf4250 | out: pbData=0x50a0000*, pdwDataLen=0xb82ff24*=0x480) returned 1 [0113.062] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.062] WriteFile (in: hFile=0x448, lpBuffer=0x50a0000*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0xb82ff28, lpOverlapped=0x0 | out: lpBuffer=0x50a0000*, lpNumberOfBytesWritten=0xb82ff28*=0x480, lpOverlapped=0x0) returned 1 [0113.062] WriteFile (in: hFile=0x448, lpBuffer=0xb82fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb82ff18, lpOverlapped=0x0 | out: lpBuffer=0xb82fef0*, lpNumberOfBytesWritten=0xb82ff18*=0x6, lpOverlapped=0x0) returned 1 [0113.062] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb82ff38 | out: pbData=0x0*, pdwDataLen=0xb82ff38*=0x10c) returned 1 [0113.062] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb82fd98, pdwDataLen=0xb82ff38 | out: pbData=0xb82fd98*, pdwDataLen=0xb82ff38*=0x10c) returned 1 [0113.062] WriteFile (in: hFile=0x448, lpBuffer=0xb82fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb82ff18, lpOverlapped=0x0 | out: lpBuffer=0xb82fd98*, lpNumberOfBytesWritten=0xb82ff18*=0x10c, lpOverlapped=0x0) returned 1 [0113.062] CloseHandle (hObject=0x448) returned 1 [0113.063] CryptDestroyKey (hKey=0x2f24740) returned 1 [0113.063] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.RYK" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico.ryk"), dwFlags=0x8) returned 1 Thread: id = 165 os_tid = 0xa68 [0113.065] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico", dwFileAttributes=0x80) returned 1 [0113.066] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x448 [0113.066] GetFileSizeEx (in: hFile=0x448, lpFileSize=0xb96ff10 | out: lpFileSize=0xb96ff10*=1150) returned 1 [0113.066] GetFileSizeEx (in: hFile=0x448, lpFileSize=0xb96ff50 | out: lpFileSize=0xb96ff50*=1150) returned 1 [0113.066] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x35c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.066] ReadFile (in: hFile=0x448, lpBuffer=0xb96fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb96ff40, lpOverlapped=0x0 | out: lpBuffer=0xb96fed4*, lpNumberOfBytesRead=0xb96ff40*=0x19, lpOverlapped=0x0) returned 1 [0113.067] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.067] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb96ff48 | out: phKey=0xb96ff48*=0x2f24740) returned 1 [0113.067] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.067] ReadFile (in: hFile=0x448, lpBuffer=0x51b0000, nNumberOfBytesToRead=0x47e, lpNumberOfBytesRead=0xb96ff28, lpOverlapped=0x0 | out: lpBuffer=0x51b0000*, lpNumberOfBytesRead=0xb96ff28*=0x47e, lpOverlapped=0x0) returned 1 [0113.067] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb96ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb96ff2c*=0xf4250) returned 1 [0113.067] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x51b0000*, pdwDataLen=0xb96ff24*=0x47e, dwBufLen=0xf4250 | out: pbData=0x51b0000*, pdwDataLen=0xb96ff24*=0x480) returned 1 [0113.067] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.067] WriteFile (in: hFile=0x448, lpBuffer=0x51b0000*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0xb96ff28, lpOverlapped=0x0 | out: lpBuffer=0x51b0000*, lpNumberOfBytesWritten=0xb96ff28*=0x480, lpOverlapped=0x0) returned 1 [0113.068] WriteFile (in: hFile=0x448, lpBuffer=0xb96fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb96ff18, lpOverlapped=0x0 | out: lpBuffer=0xb96fef0*, lpNumberOfBytesWritten=0xb96ff18*=0x6, lpOverlapped=0x0) returned 1 [0113.068] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb96ff38 | out: pbData=0x0*, pdwDataLen=0xb96ff38*=0x10c) returned 1 [0113.068] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb96fd98, pdwDataLen=0xb96ff38 | out: pbData=0xb96fd98*, pdwDataLen=0xb96ff38*=0x10c) returned 1 [0113.068] WriteFile (in: hFile=0x448, lpBuffer=0xb96fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb96ff18, lpOverlapped=0x0 | out: lpBuffer=0xb96fd98*, lpNumberOfBytesWritten=0xb96ff18*=0x10c, lpOverlapped=0x0) returned 1 [0113.068] CloseHandle (hObject=0x448) returned 1 [0113.069] CryptDestroyKey (hKey=0x2f24740) returned 1 [0113.069] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.RYK" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico.ryk"), dwFlags=0x8) returned 1 Thread: id = 166 os_tid = 0x448 [0113.069] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico", dwFileAttributes=0x80) returned 1 [0113.071] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x448 [0113.071] GetFileSizeEx (in: hFile=0x448, lpFileSize=0xbaaff10 | out: lpFileSize=0xbaaff10*=10134) returned 1 [0113.071] GetFileSizeEx (in: hFile=0x448, lpFileSize=0xbaaff50 | out: lpFileSize=0xbaaff50*=10134) returned 1 [0113.071] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0x2674, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.071] ReadFile (in: hFile=0x448, lpBuffer=0xbaafed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xbaaff40, lpOverlapped=0x0 | out: lpBuffer=0xbaafed4*, lpNumberOfBytesRead=0xbaaff40*=0x19, lpOverlapped=0x0) returned 1 [0113.073] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.073] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xbaaff48 | out: phKey=0xbaaff48*=0x2f24740) returned 1 [0113.073] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.073] ReadFile (in: hFile=0x448, lpBuffer=0x52c0000, nNumberOfBytesToRead=0x2796, lpNumberOfBytesRead=0xbaaff28, lpOverlapped=0x0 | out: lpBuffer=0x52c0000*, lpNumberOfBytesRead=0xbaaff28*=0x2796, lpOverlapped=0x0) returned 1 [0113.074] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xbaaff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xbaaff2c*=0xf4250) returned 1 [0113.074] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x52c0000*, pdwDataLen=0xbaaff24*=0x2796, dwBufLen=0xf4250 | out: pbData=0x52c0000*, pdwDataLen=0xbaaff24*=0x27a0) returned 1 [0113.074] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.074] WriteFile (in: hFile=0x448, lpBuffer=0x52c0000*, nNumberOfBytesToWrite=0x27a0, lpNumberOfBytesWritten=0xbaaff28, lpOverlapped=0x0 | out: lpBuffer=0x52c0000*, lpNumberOfBytesWritten=0xbaaff28*=0x27a0, lpOverlapped=0x0) returned 1 [0113.074] WriteFile (in: hFile=0x448, lpBuffer=0xbaafef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xbaaff18, lpOverlapped=0x0 | out: lpBuffer=0xbaafef0*, lpNumberOfBytesWritten=0xbaaff18*=0x6, lpOverlapped=0x0) returned 1 [0113.074] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xbaaff38 | out: pbData=0x0*, pdwDataLen=0xbaaff38*=0x10c) returned 1 [0113.074] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xbaafd98, pdwDataLen=0xbaaff38 | out: pbData=0xbaafd98*, pdwDataLen=0xbaaff38*=0x10c) returned 1 [0113.074] WriteFile (in: hFile=0x448, lpBuffer=0xbaafd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbaaff18, lpOverlapped=0x0 | out: lpBuffer=0xbaafd98*, lpNumberOfBytesWritten=0xbaaff18*=0x10c, lpOverlapped=0x0) returned 1 [0113.074] CloseHandle (hObject=0x448) returned 1 [0113.075] CryptDestroyKey (hKey=0x2f24740) returned 1 [0113.075] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico.RYK" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico.ryk"), dwFlags=0x8) returned 1 Thread: id = 167 os_tid = 0x12d8 [0113.073] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\header.bmp", dwFileAttributes=0x80) returned 1 [0113.077] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x448 [0113.077] GetFileSizeEx (in: hFile=0x448, lpFileSize=0xbbeff10 | out: lpFileSize=0xbbeff10*=3628) returned 1 [0113.077] GetFileSizeEx (in: hFile=0x448, lpFileSize=0xbbeff50 | out: lpFileSize=0xbbeff50*=3628) returned 1 [0113.077] SetFilePointerEx (in: hFile=0x448, liDistanceToMove=0xd0a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.078] ReadFile (in: hFile=0x448, lpBuffer=0xbbefed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xbbeff40, lpOverlapped=0x0 | out: lpBuffer=0xbbefed4*, lpNumberOfBytesRead=0xbbeff40*=0x19, lpOverlapped=0x0) returned 1 [0113.079] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.079] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xbbeff48 | out: phKey=0xbbeff48*=0x2f24740) returned 1 [0113.079] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.079] ReadFile (in: hFile=0x448, lpBuffer=0x53d0000, nNumberOfBytesToRead=0xe2c, lpNumberOfBytesRead=0xbbeff28, lpOverlapped=0x0 | out: lpBuffer=0x53d0000*, lpNumberOfBytesRead=0xbbeff28*=0xe2c, lpOverlapped=0x0) returned 1 [0113.079] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xbbeff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xbbeff2c*=0xf4250) returned 1 [0113.079] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x53d0000*, pdwDataLen=0xbbeff24*=0xe2c, dwBufLen=0xf4250 | out: pbData=0x53d0000*, pdwDataLen=0xbbeff24*=0xe30) returned 1 [0113.079] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.079] WriteFile (in: hFile=0x448, lpBuffer=0x53d0000*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0xbbeff28, lpOverlapped=0x0 | out: lpBuffer=0x53d0000*, lpNumberOfBytesWritten=0xbbeff28*=0xe30, lpOverlapped=0x0) returned 1 [0113.080] WriteFile (in: hFile=0x448, lpBuffer=0xbbefef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xbbeff18, lpOverlapped=0x0 | out: lpBuffer=0xbbefef0*, lpNumberOfBytesWritten=0xbbeff18*=0x6, lpOverlapped=0x0) returned 1 [0113.080] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xbbeff38 | out: pbData=0x0*, pdwDataLen=0xbbeff38*=0x10c) returned 1 [0113.080] CryptExportKey (in: hKey=0x2f24740, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xbbefd98, pdwDataLen=0xbbeff38 | out: pbData=0xbbefd98*, pdwDataLen=0xbbeff38*=0x10c) returned 1 [0113.080] WriteFile (in: hFile=0x448, lpBuffer=0xbbefd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbbeff18, lpOverlapped=0x0 | out: lpBuffer=0xbbefd98*, lpNumberOfBytesWritten=0xbbeff18*=0x10c, lpOverlapped=0x0) returned 1 [0113.080] CloseHandle (hObject=0x448) returned 1 [0113.081] CryptDestroyKey (hKey=0x2f24740) returned 1 [0113.081] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), lpNewFileName="C:\\588bce7c90097ed212\\header.bmp.RYK" (normalized: "c:\\588bce7c90097ed212\\header.bmp.ryk"), dwFlags=0x8) returned 1 Thread: id = 170 os_tid = 0xf28 [0113.474] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz", dwFileAttributes=0x80) returned 1 [0113.475] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6ac [0113.475] GetFileSizeEx (in: hFile=0x6ac, lpFileSize=0xa3aff10 | out: lpFileSize=0xa3aff10*=181483595) returned 1 [0113.475] GetFileSizeEx (in: hFile=0x6ac, lpFileSize=0xa3aff50 | out: lpFileSize=0xa3aff50*=181483595) returned 1 [0113.475] SetFilePointerEx (in: hFile=0x6ac, liDistanceToMove=0xad13729, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.475] ReadFile (in: hFile=0x6ac, lpBuffer=0xa3afed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa3aff40, lpOverlapped=0x0 | out: lpBuffer=0xa3afed4*, lpNumberOfBytesRead=0xa3aff40*=0x19, lpOverlapped=0x0) returned 1 [0113.481] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.481] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa3aff48 | out: phKey=0xa3aff48*=0x2f24740) returned 1 [0113.481] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=49000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2ebae40 [0113.481] ReadFile (in: hFile=0x6ac, lpBuffer=0xa3afec4, nNumberOfBytesToRead=0x10, lpNumberOfBytesRead=0xa3aff08, lpOverlapped=0x0 | out: lpBuffer=0xa3afec4*, lpNumberOfBytesRead=0xa3aff08*=0x10, lpOverlapped=0x0) returned 1 [0113.483] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.483] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.484] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0113.628] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0113.628] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0113.629] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.629] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0113.632] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0113.632] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0113.829] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0113.829] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0113.830] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0113.830] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0114.238] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0114.239] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0114.584] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0114.584] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0114.585] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0114.586] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0114.589] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0114.589] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0115.334] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0115.334] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0115.335] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0115.335] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0115.338] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=4000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x3d0900 [0115.338] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0116.124] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0116.124] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0116.126] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=4000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x3d0900 [0116.126] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0116.129] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=5000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x4c4b40 [0116.129] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0116.159] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0116.159] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0116.160] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=5000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x4c4b40 [0116.160] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0116.163] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=6000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5b8d80 [0116.163] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0116.530] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0116.530] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0116.531] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=6000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5b8d80 [0116.531] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0116.535] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=7000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6acfc0 [0116.535] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0116.548] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0116.548] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0116.549] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=7000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6acfc0 [0116.549] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0116.553] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=8000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7a1200 [0116.553] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0117.151] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0117.151] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0117.152] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=8000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7a1200 [0117.152] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0117.156] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=9000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x895440 [0117.156] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0117.170] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0117.170] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0117.171] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=9000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x895440 [0117.172] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0117.770] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=10000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x989680 [0117.770] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0117.796] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0117.796] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0117.797] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=10000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x989680 [0117.797] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0117.991] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=11000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xa7d8c0 [0117.991] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0118.466] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0118.466] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0118.467] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=11000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xa7d8c0 [0118.467] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0118.471] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=12000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xb71b00 [0118.471] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0118.516] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0118.516] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0118.517] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=12000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xb71b00 [0118.518] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0118.522] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=13000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xc65d40 [0118.522] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0118.536] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0118.536] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0118.537] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=13000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xc65d40 [0118.537] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0119.191] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=14000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xd59f80 [0119.191] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0119.218] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0119.218] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0119.219] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=14000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xd59f80 [0119.219] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0119.224] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=15000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xe4e1c0 [0119.224] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0119.542] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0119.542] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0119.544] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=15000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xe4e1c0 [0119.544] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0119.548] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=16000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf42400 [0119.548] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0119.575] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0119.575] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0119.577] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=16000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf42400 [0119.577] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0119.581] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=17000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1036640 [0119.581] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0119.595] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0119.595] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0120.128] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=17000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1036640 [0120.128] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0120.139] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=18000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x112a880 [0120.139] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0120.162] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0120.162] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0120.163] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=18000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x112a880 [0120.163] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0120.174] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=19000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x121eac0 [0120.174] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0120.434] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0120.434] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0120.435] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=19000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x121eac0 [0120.435] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0120.447] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=20000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1312d00 [0120.447] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0120.925] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0120.925] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0120.926] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=20000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1312d00 [0120.926] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0120.939] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=21000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1406f40 [0120.939] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0120.955] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0120.955] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0120.956] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=21000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1406f40 [0120.956] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0120.958] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=22000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x14fb180 [0120.958] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0120.967] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0120.967] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0120.969] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=22000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x14fb180 [0120.969] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0121.831] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=23000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x15ef3c0 [0121.831] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0121.841] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0121.841] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0121.842] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=23000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x15ef3c0 [0121.842] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0121.845] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=24000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x16e3600 [0121.845] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0121.856] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0121.856] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0121.857] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=24000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x16e3600 [0121.857] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0121.860] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=25000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x17d7840 [0121.860] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0121.870] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0121.870] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0121.872] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=25000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x17d7840 [0121.872] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0121.876] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=26000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x18cba80 [0121.876] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0122.680] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0122.680] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0122.681] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=26000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x18cba80 [0122.681] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0122.684] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=27000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x19bfcc0 [0122.684] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0122.694] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0122.694] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0122.696] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=27000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x19bfcc0 [0122.696] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0122.699] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=28000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1ab3f00 [0122.699] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0123.113] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0123.113] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0123.114] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=28000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1ab3f00 [0123.114] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0123.117] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=29000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1ba8140 [0123.117] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0123.128] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0123.128] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0123.129] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=29000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1ba8140 [0123.129] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0123.132] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=30000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1c9c380 [0123.132] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0123.818] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0123.818] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0123.831] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=30000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1c9c380 [0123.831] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0123.835] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=31000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1d905c0 [0123.835] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0123.860] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0123.860] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0123.861] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=31000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1d905c0 [0123.861] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0123.864] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=32000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e84800 [0123.864] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0123.890] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0123.890] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0123.891] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=32000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e84800 [0123.891] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0124.473] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=33000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1f78a40 [0124.480] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0124.498] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0124.498] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0124.500] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=33000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1f78a40 [0124.500] WriteFile (in: hFile=0x6ac, lpBuffer=0x42d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesWritten=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0124.504] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=34000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x206cc80 [0124.504] ReadFile (in: hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa3aff28, lpOverlapped=0x0 | out: lpBuffer=0x42d0000*, lpNumberOfBytesRead=0xa3aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0124.531] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa3aff2c*=0xf4240) returned 1 [0124.531] CryptEncrypt (in: hKey=0x2f24740, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x42d0000*, pdwDataLen=0xa3aff24*=0xf4240) returned 1 [0124.532] SetFilePointer (in: hFile=0x6ac, lDistanceToMove=34000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x206cc80 [0124.532] WriteFile (hFile=0x6ac, lpBuffer=0x42d0000, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa3aff28, lpOverlapped=0x0) Thread: id = 171 os_tid = 0xda0 [0113.478] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi", dwFileAttributes=0x80) returned 1 [0113.479] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6b0 [0113.479] GetFileSizeEx (in: hFile=0x6b0, lpFileSize=0xa62ff10 | out: lpFileSize=0xa62ff10*=1901056) returned 1 [0113.480] GetFileSizeEx (in: hFile=0x6b0, lpFileSize=0xa62ff50 | out: lpFileSize=0xa62ff50*=1901056) returned 1 [0113.480] SetFilePointerEx (in: hFile=0x6b0, liDistanceToMove=0x1d00de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.480] ReadFile (in: hFile=0x6b0, lpBuffer=0xa62fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa62ff40, lpOverlapped=0x0 | out: lpBuffer=0xa62fed4*, lpNumberOfBytesRead=0xa62ff40*=0x19, lpOverlapped=0x0) returned 1 [0113.482] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.482] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa62ff48 | out: phKey=0xa62ff48*=0x2f24800) returned 1 [0113.482] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.482] ReadFile (in: hFile=0x6b0, lpBuffer=0x43e0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa62ff28, lpOverlapped=0x0 | out: lpBuffer=0x43e0000*, lpNumberOfBytesRead=0xa62ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0113.495] CryptEncrypt (in: hKey=0x2f24800, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa62ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa62ff2c*=0xf4240) returned 1 [0113.495] CryptEncrypt (in: hKey=0x2f24800, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x43e0000*, pdwDataLen=0xa62ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x43e0000*, pdwDataLen=0xa62ff24*=0xf4240) returned 1 [0113.496] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.496] WriteFile (in: hFile=0x6b0, lpBuffer=0x43e0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa62ff28, lpOverlapped=0x0 | out: lpBuffer=0x43e0000*, lpNumberOfBytesWritten=0xa62ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0113.620] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0113.620] ReadFile (in: hFile=0x6b0, lpBuffer=0x43e0000, nNumberOfBytesToRead=0xdbfc0, lpNumberOfBytesRead=0xa62ff28, lpOverlapped=0x0 | out: lpBuffer=0x43e0000*, lpNumberOfBytesRead=0xa62ff28*=0xdbfc0, lpOverlapped=0x0) returned 1 [0113.798] CryptEncrypt (in: hKey=0x2f24800, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa62ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa62ff2c*=0xf4250) returned 1 [0113.798] CryptEncrypt (in: hKey=0x2f24800, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x43e0000*, pdwDataLen=0xa62ff24*=0xdbfc0, dwBufLen=0xf4250 | out: pbData=0x43e0000*, pdwDataLen=0xa62ff24*=0xdbfd0) returned 1 [0113.800] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0113.800] WriteFile (in: hFile=0x6b0, lpBuffer=0x43e0000*, nNumberOfBytesToWrite=0xdbfd0, lpNumberOfBytesWritten=0xa62ff28, lpOverlapped=0x0 | out: lpBuffer=0x43e0000*, lpNumberOfBytesWritten=0xa62ff28*=0xdbfd0, lpOverlapped=0x0) returned 1 [0113.803] WriteFile (in: hFile=0x6b0, lpBuffer=0xa62fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa62ff18, lpOverlapped=0x0 | out: lpBuffer=0xa62fef0*, lpNumberOfBytesWritten=0xa62ff18*=0x6, lpOverlapped=0x0) returned 1 [0113.803] CryptExportKey (in: hKey=0x2f24800, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa62ff38 | out: pbData=0x0*, pdwDataLen=0xa62ff38*=0x10c) returned 1 [0113.803] CryptExportKey (in: hKey=0x2f24800, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa62fd98, pdwDataLen=0xa62ff38 | out: pbData=0xa62fd98*, pdwDataLen=0xa62ff38*=0x10c) returned 1 [0113.803] WriteFile (in: hFile=0x6b0, lpBuffer=0xa62fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa62ff18, lpOverlapped=0x0 | out: lpBuffer=0xa62fd98*, lpNumberOfBytesWritten=0xa62ff18*=0x10c, lpOverlapped=0x0) returned 1 [0113.804] CloseHandle (hObject=0x6b0) returned 1 [0114.233] CryptDestroyKey (hKey=0x2f24800) returned 1 [0114.233] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi.RYK" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi.ryk"), dwFlags=0x8) returned 1 Thread: id = 172 os_tid = 0x4f8 [0113.831] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi", dwFileAttributes=0x80) returned 1 [0113.832] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6b4 [0113.832] GetFileSizeEx (in: hFile=0x6b4, lpFileSize=0xa72ff10 | out: lpFileSize=0xa72ff10*=1163264) returned 1 [0113.832] GetFileSizeEx (in: hFile=0x6b4, lpFileSize=0xa72ff50 | out: lpFileSize=0xa72ff50*=1163264) returned 1 [0113.832] SetFilePointerEx (in: hFile=0x6b4, liDistanceToMove=0x11bede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.832] ReadFile (in: hFile=0x6b4, lpBuffer=0xa72fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa72ff40, lpOverlapped=0x0 | out: lpBuffer=0xa72fed4*, lpNumberOfBytesRead=0xa72ff40*=0x19, lpOverlapped=0x0) returned 1 [0113.833] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.833] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa72ff48 | out: phKey=0xa72ff48*=0x2f24840) returned 1 [0113.834] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.834] ReadFile (in: hFile=0x6b4, lpBuffer=0x44f0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa72ff28, lpOverlapped=0x0 | out: lpBuffer=0x44f0000*, lpNumberOfBytesRead=0xa72ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0113.843] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa72ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa72ff2c*=0xf4240) returned 1 [0113.843] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x44f0000*, pdwDataLen=0xa72ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x44f0000*, pdwDataLen=0xa72ff24*=0xf4240) returned 1 [0113.844] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.844] WriteFile (in: hFile=0x6b4, lpBuffer=0x44f0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa72ff28, lpOverlapped=0x0 | out: lpBuffer=0x44f0000*, lpNumberOfBytesWritten=0xa72ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0113.847] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0113.847] ReadFile (in: hFile=0x6b4, lpBuffer=0x44f0000, nNumberOfBytesToRead=0x27dc0, lpNumberOfBytesRead=0xa72ff28, lpOverlapped=0x0 | out: lpBuffer=0x44f0000*, lpNumberOfBytesRead=0xa72ff28*=0x27dc0, lpOverlapped=0x0) returned 1 [0113.848] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa72ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa72ff2c*=0xf4250) returned 1 [0113.848] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x44f0000*, pdwDataLen=0xa72ff24*=0x27dc0, dwBufLen=0xf4250 | out: pbData=0x44f0000*, pdwDataLen=0xa72ff24*=0x27dd0) returned 1 [0113.849] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0113.849] WriteFile (in: hFile=0x6b4, lpBuffer=0x44f0000*, nNumberOfBytesToWrite=0x27dd0, lpNumberOfBytesWritten=0xa72ff28, lpOverlapped=0x0 | out: lpBuffer=0x44f0000*, lpNumberOfBytesWritten=0xa72ff28*=0x27dd0, lpOverlapped=0x0) returned 1 [0113.850] WriteFile (in: hFile=0x6b4, lpBuffer=0xa72fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa72ff18, lpOverlapped=0x0 | out: lpBuffer=0xa72fef0*, lpNumberOfBytesWritten=0xa72ff18*=0x6, lpOverlapped=0x0) returned 1 [0113.850] CryptExportKey (in: hKey=0x2f24840, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa72ff38 | out: pbData=0x0*, pdwDataLen=0xa72ff38*=0x10c) returned 1 [0113.850] CryptExportKey (in: hKey=0x2f24840, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa72fd98, pdwDataLen=0xa72ff38 | out: pbData=0xa72fd98*, pdwDataLen=0xa72ff38*=0x10c) returned 1 [0113.850] WriteFile (in: hFile=0x6b4, lpBuffer=0xa72fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa72ff18, lpOverlapped=0x0 | out: lpBuffer=0xa72fd98*, lpNumberOfBytesWritten=0xa72ff18*=0x10c, lpOverlapped=0x0) returned 1 [0113.850] CloseHandle (hObject=0x6b4) returned 1 [0113.872] CryptDestroyKey (hKey=0x2f24840) returned 1 [0113.872] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi.RYK" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi.ryk"), dwFlags=0x8) returned 1 Thread: id = 173 os_tid = 0x498 [0113.833] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz", dwFileAttributes=0x80) returned 1 [0113.835] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6b8 [0113.836] GetFileSizeEx (in: hFile=0x6b8, lpFileSize=0xa82ff10 | out: lpFileSize=0xa82ff10*=43131591) returned 1 [0113.836] GetFileSizeEx (in: hFile=0x6b8, lpFileSize=0xa82ff50 | out: lpFileSize=0xa82ff50*=43131591) returned 1 [0113.836] SetFilePointerEx (in: hFile=0x6b8, liDistanceToMove=0x29221a5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.836] ReadFile (in: hFile=0x6b8, lpBuffer=0xa82fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa82ff40, lpOverlapped=0x0 | out: lpBuffer=0xa82fed4*, lpNumberOfBytesRead=0xa82ff40*=0x19, lpOverlapped=0x0) returned 1 [0113.876] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.876] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa82ff48 | out: phKey=0xa82ff48*=0x2f24840) returned 1 [0113.876] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.876] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0113.884] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0113.884] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0113.885] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.885] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0113.888] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0113.888] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0113.906] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0113.906] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0113.907] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0113.907] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0113.910] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0113.910] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0114.550] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0114.550] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0114.551] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0114.551] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0114.554] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0114.554] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0115.328] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0115.328] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0115.330] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0115.330] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0116.053] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=4000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x3d0900 [0116.053] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0116.079] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0116.079] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0116.080] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=4000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x3d0900 [0116.080] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0116.083] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=5000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x4c4b40 [0116.083] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0116.108] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0116.108] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0116.109] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=5000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x4c4b40 [0116.109] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0116.474] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=6000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5b8d80 [0116.474] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0116.499] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0116.499] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0116.501] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=6000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5b8d80 [0116.501] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0116.504] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=7000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6acfc0 [0116.505] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0116.518] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0116.518] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0117.113] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=7000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6acfc0 [0117.113] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0117.117] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=8000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7a1200 [0117.117] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0117.756] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0117.756] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0117.757] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=8000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7a1200 [0117.757] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0117.760] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=9000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x895440 [0117.760] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0118.415] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0118.415] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0118.416] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=9000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x895440 [0118.416] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0118.420] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=10000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x989680 [0118.420] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0118.445] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0118.445] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0118.446] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=10000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x989680 [0118.446] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0118.450] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=11000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xa7d8c0 [0118.450] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0119.136] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0119.136] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0119.137] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=11000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xa7d8c0 [0119.137] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0119.141] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=12000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xb71b00 [0119.141] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0119.169] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0119.169] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0119.170] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=12000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xb71b00 [0119.170] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0119.175] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=13000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xc65d40 [0119.175] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0119.190] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0119.190] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0119.483] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=13000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xc65d40 [0119.483] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0119.487] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=14000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xd59f80 [0119.487] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0119.515] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0119.515] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0119.516] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=14000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xd59f80 [0119.517] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0119.521] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=15000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xe4e1c0 [0119.521] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0120.075] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0120.075] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0120.076] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=15000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xe4e1c0 [0120.076] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0120.080] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=16000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf42400 [0120.080] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0120.107] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0120.107] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0120.108] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=16000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf42400 [0120.108] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0120.113] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=17000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1036640 [0120.113] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0120.127] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0120.127] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0120.385] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=17000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1036640 [0120.881] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0120.892] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=18000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x112a880 [0120.892] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0120.916] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0120.916] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0120.917] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=18000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x112a880 [0120.917] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0121.791] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=19000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x121eac0 [0121.791] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0121.801] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0121.801] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0121.802] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=19000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x121eac0 [0121.802] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0121.814] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=20000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1312d00 [0121.814] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0121.824] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0121.824] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0121.825] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=20000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1312d00 [0121.825] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0122.496] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=21000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1406f40 [0122.496] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0122.497] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0122.497] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0122.498] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=21000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1406f40 [0122.498] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0122.500] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=22000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x14fb180 [0122.500] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0122.509] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0122.509] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0122.510] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=22000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x14fb180 [0122.510] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0122.513] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=23000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x15ef3c0 [0122.513] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0122.522] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0122.522] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0122.523] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=23000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x15ef3c0 [0122.523] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0122.526] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=24000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x16e3600 [0122.526] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0123.072] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0123.072] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0123.073] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=24000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x16e3600 [0123.073] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0123.076] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=25000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x17d7840 [0123.076] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0123.086] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0123.086] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0123.087] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=25000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x17d7840 [0123.087] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0123.090] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=26000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x18cba80 [0123.090] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0123.101] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0123.101] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0123.102] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=26000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x18cba80 [0123.102] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0123.105] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=27000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x19bfcc0 [0123.105] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0123.903] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0123.903] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0123.904] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=27000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x19bfcc0 [0123.905] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0123.908] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=28000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1ab3f00 [0123.908] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0123.957] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0123.957] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0123.958] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=28000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1ab3f00 [0123.958] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0123.962] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=29000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1ba8140 [0123.962] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0124.540] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0124.540] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0124.541] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=29000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1ba8140 [0124.541] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0124.545] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=30000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1c9c380 [0124.545] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0124.556] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0124.556] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0124.557] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=30000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1c9c380 [0124.557] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0124.561] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=31000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1d905c0 [0124.561] ReadFile (in: hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesRead=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0124.605] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa82ff2c*=0xf4240) returned 1 [0124.605] CryptEncrypt (in: hKey=0x2f24840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4600000*, pdwDataLen=0xa82ff24*=0xf4240) returned 1 [0124.606] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=31000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1d905c0 [0124.606] WriteFile (in: hFile=0x6b8, lpBuffer=0x4600000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xa82ff28, lpOverlapped=0x0 | out: lpBuffer=0x4600000*, lpNumberOfBytesWritten=0xa82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0124.610] SetFilePointer (in: hFile=0x6b8, lDistanceToMove=32000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e84800 [0124.610] ReadFile (hFile=0x6b8, lpBuffer=0x4600000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xa82ff28, lpOverlapped=0x0) Thread: id = 174 os_tid = 0x47c [0113.879] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi", dwFileAttributes=0x80) returned 1 [0113.890] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6b4 [0113.891] GetFileSizeEx (in: hFile=0x6b4, lpFileSize=0xa92ff10 | out: lpFileSize=0xa92ff10*=872448) returned 1 [0113.891] GetFileSizeEx (in: hFile=0x6b4, lpFileSize=0xa92ff50 | out: lpFileSize=0xa92ff50*=872448) returned 1 [0113.891] SetFilePointerEx (in: hFile=0x6b4, liDistanceToMove=0xd4ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.891] ReadFile (in: hFile=0x6b4, lpBuffer=0xa92fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa92ff40, lpOverlapped=0x0 | out: lpBuffer=0xa92fed4*, lpNumberOfBytesRead=0xa92ff40*=0x19, lpOverlapped=0x0) returned 1 [0113.912] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.912] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa92ff48 | out: phKey=0xa92ff48*=0x2f24880) returned 1 [0113.918] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.918] ReadFile (in: hFile=0x6b4, lpBuffer=0x4710000, nNumberOfBytesToRead=0xd5000, lpNumberOfBytesRead=0xa92ff28, lpOverlapped=0x0 | out: lpBuffer=0x4710000*, lpNumberOfBytesRead=0xa92ff28*=0xd5000, lpOverlapped=0x0) returned 1 [0113.927] CryptEncrypt (in: hKey=0x2f24880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa92ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa92ff2c*=0xf4250) returned 1 [0113.927] CryptEncrypt (in: hKey=0x2f24880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4710000*, pdwDataLen=0xa92ff24*=0xd5000, dwBufLen=0xf4250 | out: pbData=0x4710000*, pdwDataLen=0xa92ff24*=0xd5010) returned 1 [0113.928] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.928] WriteFile (in: hFile=0x6b4, lpBuffer=0x4710000*, nNumberOfBytesToWrite=0xd5010, lpNumberOfBytesWritten=0xa92ff28, lpOverlapped=0x0 | out: lpBuffer=0x4710000*, lpNumberOfBytesWritten=0xa92ff28*=0xd5010, lpOverlapped=0x0) returned 1 [0113.931] WriteFile (in: hFile=0x6b4, lpBuffer=0xa92fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa92ff18, lpOverlapped=0x0 | out: lpBuffer=0xa92fef0*, lpNumberOfBytesWritten=0xa92ff18*=0x6, lpOverlapped=0x0) returned 1 [0113.931] CryptExportKey (in: hKey=0x2f24880, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa92ff38 | out: pbData=0x0*, pdwDataLen=0xa92ff38*=0x10c) returned 1 [0113.931] CryptExportKey (in: hKey=0x2f24880, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa92fd98, pdwDataLen=0xa92ff38 | out: pbData=0xa92fd98*, pdwDataLen=0xa92ff38*=0x10c) returned 1 [0113.931] WriteFile (in: hFile=0x6b4, lpBuffer=0xa92fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa92ff18, lpOverlapped=0x0 | out: lpBuffer=0xa92fd98*, lpNumberOfBytesWritten=0xa92ff18*=0x10c, lpOverlapped=0x0) returned 1 [0113.931] CloseHandle (hObject=0x6b4) returned 1 [0113.945] CryptDestroyKey (hKey=0x2f24880) returned 1 [0113.945] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi.RYK" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.ryk"), dwFlags=0x8) returned 1 Thread: id = 175 os_tid = 0xd00 [0113.920] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi", dwFileAttributes=0x80) returned 1 [0113.921] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6bc [0113.947] GetFileSizeEx (in: hFile=0x6bc, lpFileSize=0xaa6ff10 | out: lpFileSize=0xaa6ff10*=495616) returned 1 [0113.947] GetFileSizeEx (in: hFile=0x6bc, lpFileSize=0xaa6ff50 | out: lpFileSize=0xaa6ff50*=495616) returned 1 [0113.947] SetFilePointerEx (in: hFile=0x6bc, liDistanceToMove=0x78ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.947] ReadFile (in: hFile=0x6bc, lpBuffer=0xaa6fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xaa6ff40, lpOverlapped=0x0 | out: lpBuffer=0xaa6fed4*, lpNumberOfBytesRead=0xaa6ff40*=0x19, lpOverlapped=0x0) returned 1 [0113.948] SetFilePointer (in: hFile=0x6bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.948] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xaa6ff48 | out: phKey=0xaa6ff48*=0x2f24880) returned 1 [0113.948] SetFilePointer (in: hFile=0x6bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.948] ReadFile (in: hFile=0x6bc, lpBuffer=0x4820000, nNumberOfBytesToRead=0x79000, lpNumberOfBytesRead=0xaa6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4820000*, lpNumberOfBytesRead=0xaa6ff28*=0x79000, lpOverlapped=0x0) returned 1 [0113.952] CryptEncrypt (in: hKey=0x2f24880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xaa6ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xaa6ff2c*=0xf4250) returned 1 [0113.952] CryptEncrypt (in: hKey=0x2f24880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4820000*, pdwDataLen=0xaa6ff24*=0x79000, dwBufLen=0xf4250 | out: pbData=0x4820000*, pdwDataLen=0xaa6ff24*=0x79010) returned 1 [0113.953] SetFilePointer (in: hFile=0x6bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0113.953] WriteFile (in: hFile=0x6bc, lpBuffer=0x4820000*, nNumberOfBytesToWrite=0x79010, lpNumberOfBytesWritten=0xaa6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4820000*, lpNumberOfBytesWritten=0xaa6ff28*=0x79010, lpOverlapped=0x0) returned 1 [0113.954] WriteFile (in: hFile=0x6bc, lpBuffer=0xaa6fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xaa6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaa6fef0*, lpNumberOfBytesWritten=0xaa6ff18*=0x6, lpOverlapped=0x0) returned 1 [0113.954] CryptExportKey (in: hKey=0x2f24880, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xaa6ff38 | out: pbData=0x0*, pdwDataLen=0xaa6ff38*=0x10c) returned 1 [0113.954] CryptExportKey (in: hKey=0x2f24880, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xaa6fd98, pdwDataLen=0xaa6ff38 | out: pbData=0xaa6fd98*, pdwDataLen=0xaa6ff38*=0x10c) returned 1 [0113.954] WriteFile (in: hFile=0x6bc, lpBuffer=0xaa6fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaa6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaa6fd98*, lpNumberOfBytesWritten=0xaa6ff18*=0x10c, lpOverlapped=0x0) returned 1 [0113.955] CloseHandle (hObject=0x6bc) returned 1 [0113.963] CryptDestroyKey (hKey=0x2f24880) returned 1 [0113.963] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi.RYK" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.ryk"), dwFlags=0x8) returned 1 Thread: id = 176 os_tid = 0xd84 [0113.950] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml", dwFileAttributes=0x80) returned 1 [0113.965] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6bc [0113.965] GetFileSizeEx (in: hFile=0x6bc, lpFileSize=0xabaff10 | out: lpFileSize=0xabaff10*=272046) returned 1 [0113.965] GetFileSizeEx (in: hFile=0x6bc, lpFileSize=0xabaff50 | out: lpFileSize=0xabaff50*=272046) returned 1 [0113.965] SetFilePointerEx (in: hFile=0x6bc, liDistanceToMove=0x4258c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.965] ReadFile (in: hFile=0x6bc, lpBuffer=0xabafed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xabaff40, lpOverlapped=0x0 | out: lpBuffer=0xabafed4*, lpNumberOfBytesRead=0xabaff40*=0x19, lpOverlapped=0x0) returned 1 [0114.456] SetFilePointer (in: hFile=0x6bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.456] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xabaff48 | out: phKey=0xabaff48*=0x2f247c0) returned 1 [0114.459] SetFilePointer (in: hFile=0x6bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0115.306] ReadFile (in: hFile=0x6bc, lpBuffer=0x4930000, nNumberOfBytesToRead=0x426ae, lpNumberOfBytesRead=0xabaff28, lpOverlapped=0x0 | out: lpBuffer=0x4930000*, lpNumberOfBytesRead=0xabaff28*=0x426ae, lpOverlapped=0x0) returned 1 [0115.310] CryptEncrypt (in: hKey=0x2f247c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xabaff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xabaff2c*=0xf4250) returned 1 [0115.310] CryptEncrypt (in: hKey=0x2f247c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4930000*, pdwDataLen=0xabaff24*=0x426ae, dwBufLen=0xf4250 | out: pbData=0x4930000*, pdwDataLen=0xabaff24*=0x426b0) returned 1 [0115.311] SetFilePointer (in: hFile=0x6bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0115.311] WriteFile (in: hFile=0x6bc, lpBuffer=0x4930000*, nNumberOfBytesToWrite=0x426b0, lpNumberOfBytesWritten=0xabaff28, lpOverlapped=0x0 | out: lpBuffer=0x4930000*, lpNumberOfBytesWritten=0xabaff28*=0x426b0, lpOverlapped=0x0) returned 1 [0115.312] WriteFile (in: hFile=0x6bc, lpBuffer=0xabafef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xabaff18, lpOverlapped=0x0 | out: lpBuffer=0xabafef0*, lpNumberOfBytesWritten=0xabaff18*=0x6, lpOverlapped=0x0) returned 1 [0115.312] CryptExportKey (in: hKey=0x2f247c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xabaff38 | out: pbData=0x0*, pdwDataLen=0xabaff38*=0x10c) returned 1 [0115.312] CryptExportKey (in: hKey=0x2f247c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xabafd98, pdwDataLen=0xabaff38 | out: pbData=0xabafd98*, pdwDataLen=0xabaff38*=0x10c) returned 1 [0115.312] WriteFile (in: hFile=0x6bc, lpBuffer=0xabafd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xabaff18, lpOverlapped=0x0 | out: lpBuffer=0xabafd98*, lpNumberOfBytesWritten=0xabaff18*=0x10c, lpOverlapped=0x0) returned 1 [0115.312] CloseHandle (hObject=0x6bc) returned 1 [0115.318] CryptDestroyKey (hKey=0x2f247c0) returned 1 [0115.319] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 177 os_tid = 0xa10 [0113.967] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi", dwFileAttributes=0x80) returned 1 [0113.967] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6b4 [0113.967] GetFileSizeEx (in: hFile=0x6b4, lpFileSize=0xaceff10 | out: lpFileSize=0xaceff10*=184832) returned 1 [0113.967] GetFileSizeEx (in: hFile=0x6b4, lpFileSize=0xaceff50 | out: lpFileSize=0xaceff50*=184832) returned 1 [0113.967] SetFilePointerEx (in: hFile=0x6b4, liDistanceToMove=0x2d0de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.967] ReadFile (in: hFile=0x6b4, lpBuffer=0xacefed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xaceff40, lpOverlapped=0x0 | out: lpBuffer=0xacefed4*, lpNumberOfBytesRead=0xaceff40*=0x19, lpOverlapped=0x0) returned 1 [0114.524] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.524] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xaceff48 | out: phKey=0xaceff48*=0x2f249c0) returned 1 [0114.524] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.524] ReadFile (in: hFile=0x6b4, lpBuffer=0x4a40000, nNumberOfBytesToRead=0x2d200, lpNumberOfBytesRead=0xaceff28, lpOverlapped=0x0 | out: lpBuffer=0x4a40000*, lpNumberOfBytesRead=0xaceff28*=0x2d200, lpOverlapped=0x0) returned 1 [0114.634] CryptEncrypt (in: hKey=0x2f249c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xaceff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xaceff2c*=0xf4250) returned 1 [0114.634] CryptEncrypt (in: hKey=0x2f249c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4a40000*, pdwDataLen=0xaceff24*=0x2d200, dwBufLen=0xf4250 | out: pbData=0x4a40000*, pdwDataLen=0xaceff24*=0x2d210) returned 1 [0114.634] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.634] WriteFile (in: hFile=0x6b4, lpBuffer=0x4a40000*, nNumberOfBytesToWrite=0x2d210, lpNumberOfBytesWritten=0xaceff28, lpOverlapped=0x0 | out: lpBuffer=0x4a40000*, lpNumberOfBytesWritten=0xaceff28*=0x2d210, lpOverlapped=0x0) returned 1 [0114.635] WriteFile (in: hFile=0x6b4, lpBuffer=0xacefef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xaceff18, lpOverlapped=0x0 | out: lpBuffer=0xacefef0*, lpNumberOfBytesWritten=0xaceff18*=0x6, lpOverlapped=0x0) returned 1 [0114.635] CryptExportKey (in: hKey=0x2f249c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xaceff38 | out: pbData=0x0*, pdwDataLen=0xaceff38*=0x10c) returned 1 [0114.635] CryptExportKey (in: hKey=0x2f249c0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xacefd98, pdwDataLen=0xaceff38 | out: pbData=0xacefd98*, pdwDataLen=0xaceff38*=0x10c) returned 1 [0114.635] WriteFile (in: hFile=0x6b4, lpBuffer=0xacefd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaceff18, lpOverlapped=0x0 | out: lpBuffer=0xacefd98*, lpNumberOfBytesWritten=0xaceff18*=0x10c, lpOverlapped=0x0) returned 1 [0114.635] CloseHandle (hObject=0x6b4) returned 1 [0114.999] CryptDestroyKey (hKey=0x2f249c0) returned 1 [0114.999] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), lpNewFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi.RYK" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.ryk"), dwFlags=0x8) returned 1 Thread: id = 178 os_tid = 0xac0 [0113.969] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi", dwFileAttributes=0x80) returned 1 [0113.969] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c0 [0113.969] GetFileSizeEx (in: hFile=0x6c0, lpFileSize=0xae2ff10 | out: lpFileSize=0xae2ff10*=94720) returned 1 [0113.969] GetFileSizeEx (in: hFile=0x6c0, lpFileSize=0xae2ff50 | out: lpFileSize=0xae2ff50*=94720) returned 1 [0113.969] SetFilePointerEx (in: hFile=0x6c0, liDistanceToMove=0x170de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.969] ReadFile (in: hFile=0x6c0, lpBuffer=0xae2fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xae2ff40, lpOverlapped=0x0 | out: lpBuffer=0xae2fed4*, lpNumberOfBytesRead=0xae2ff40*=0x19, lpOverlapped=0x0) returned 1 [0114.522] SetFilePointer (in: hFile=0x6c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.522] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xae2ff48 | out: phKey=0xae2ff48*=0x2f24800) returned 1 [0114.522] SetFilePointer (in: hFile=0x6c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.522] ReadFile (in: hFile=0x6c0, lpBuffer=0x4b50000, nNumberOfBytesToRead=0x17200, lpNumberOfBytesRead=0xae2ff28, lpOverlapped=0x0 | out: lpBuffer=0x4b50000*, lpNumberOfBytesRead=0xae2ff28*=0x17200, lpOverlapped=0x0) returned 1 [0114.611] CryptEncrypt (in: hKey=0x2f24800, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xae2ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xae2ff2c*=0xf4250) returned 1 [0114.611] CryptEncrypt (in: hKey=0x2f24800, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4b50000*, pdwDataLen=0xae2ff24*=0x17200, dwBufLen=0xf4250 | out: pbData=0x4b50000*, pdwDataLen=0xae2ff24*=0x17210) returned 1 [0114.611] SetFilePointer (in: hFile=0x6c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.611] WriteFile (in: hFile=0x6c0, lpBuffer=0x4b50000*, nNumberOfBytesToWrite=0x17210, lpNumberOfBytesWritten=0xae2ff28, lpOverlapped=0x0 | out: lpBuffer=0x4b50000*, lpNumberOfBytesWritten=0xae2ff28*=0x17210, lpOverlapped=0x0) returned 1 [0114.611] WriteFile (in: hFile=0x6c0, lpBuffer=0xae2fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xae2ff18, lpOverlapped=0x0 | out: lpBuffer=0xae2fef0*, lpNumberOfBytesWritten=0xae2ff18*=0x6, lpOverlapped=0x0) returned 1 [0114.611] CryptExportKey (in: hKey=0x2f24800, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xae2ff38 | out: pbData=0x0*, pdwDataLen=0xae2ff38*=0x10c) returned 1 [0114.619] CryptExportKey (in: hKey=0x2f24800, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xae2fd98, pdwDataLen=0xae2ff38 | out: pbData=0xae2fd98*, pdwDataLen=0xae2ff38*=0x10c) returned 1 [0114.619] WriteFile (in: hFile=0x6c0, lpBuffer=0xae2fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xae2ff18, lpOverlapped=0x0 | out: lpBuffer=0xae2fd98*, lpNumberOfBytesWritten=0xae2ff18*=0x10c, lpOverlapped=0x0) returned 1 [0114.619] CloseHandle (hObject=0x6c0) returned 1 [0114.622] CryptDestroyKey (hKey=0x2f24800) returned 1 [0114.627] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), lpNewFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi.RYK" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.ryk"), dwFlags=0x8) returned 1 Thread: id = 179 os_tid = 0xef4 [0113.970] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd", dwFileAttributes=0x80) returned 1 [0113.970] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c4 [0113.970] GetFileSizeEx (in: hFile=0x6c4, lpFileSize=0xaf6ff10 | out: lpFileSize=0xaf6ff10*=30120) returned 1 [0113.970] GetFileSizeEx (in: hFile=0x6c4, lpFileSize=0xaf6ff50 | out: lpFileSize=0xaf6ff50*=30120) returned 1 [0113.970] SetFilePointerEx (in: hFile=0x6c4, liDistanceToMove=0x7486, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.970] ReadFile (in: hFile=0x6c4, lpBuffer=0xaf6fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xaf6ff40, lpOverlapped=0x0 | out: lpBuffer=0xaf6fed4*, lpNumberOfBytesRead=0xaf6ff40*=0x19, lpOverlapped=0x0) returned 1 [0114.534] SetFilePointer (in: hFile=0x6c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.534] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xaf6ff48 | out: phKey=0xaf6ff48*=0x2f24c00) returned 1 [0114.534] SetFilePointer (in: hFile=0x6c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.534] ReadFile (in: hFile=0x6c4, lpBuffer=0x4c60000, nNumberOfBytesToRead=0x75a8, lpNumberOfBytesRead=0xaf6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4c60000*, lpNumberOfBytesRead=0xaf6ff28*=0x75a8, lpOverlapped=0x0) returned 1 [0114.670] CryptEncrypt (in: hKey=0x2f24c00, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xaf6ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xaf6ff2c*=0xf4250) returned 1 [0114.670] CryptEncrypt (in: hKey=0x2f24c00, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4c60000*, pdwDataLen=0xaf6ff24*=0x75a8, dwBufLen=0xf4250 | out: pbData=0x4c60000*, pdwDataLen=0xaf6ff24*=0x75b0) returned 1 [0114.670] SetFilePointer (in: hFile=0x6c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.670] WriteFile (in: hFile=0x6c4, lpBuffer=0x4c60000*, nNumberOfBytesToWrite=0x75b0, lpNumberOfBytesWritten=0xaf6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4c60000*, lpNumberOfBytesWritten=0xaf6ff28*=0x75b0, lpOverlapped=0x0) returned 1 [0114.671] WriteFile (in: hFile=0x6c4, lpBuffer=0xaf6fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xaf6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaf6fef0*, lpNumberOfBytesWritten=0xaf6ff18*=0x6, lpOverlapped=0x0) returned 1 [0114.671] CryptExportKey (in: hKey=0x2f24c00, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xaf6ff38 | out: pbData=0x0*, pdwDataLen=0xaf6ff38*=0x10c) returned 1 [0114.671] CryptExportKey (in: hKey=0x2f24c00, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xaf6fd98, pdwDataLen=0xaf6ff38 | out: pbData=0xaf6fd98*, pdwDataLen=0xaf6ff38*=0x10c) returned 1 [0114.671] WriteFile (in: hFile=0x6c4, lpBuffer=0xaf6fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaf6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaf6fd98*, lpNumberOfBytesWritten=0xaf6ff18*=0x10c, lpOverlapped=0x0) returned 1 [0114.671] CloseHandle (hObject=0x6c4) returned 1 [0115.043] CryptDestroyKey (hKey=0x2f24c00) returned 1 [0115.043] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), lpNewFileName="C:\\588bce7c90097ed212\\SetupUi.xsd.RYK" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.ryk"), dwFlags=0x8) returned 1 Thread: id = 180 os_tid = 0x4f4 [0113.972] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp", dwFileAttributes=0x80) returned 1 [0113.972] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c8 [0113.972] GetFileSizeEx (in: hFile=0x6c8, lpFileSize=0xb0aff10 | out: lpFileSize=0xb0aff10*=41080) returned 1 [0113.972] GetFileSizeEx (in: hFile=0x6c8, lpFileSize=0xb0aff50 | out: lpFileSize=0xb0aff50*=41080) returned 1 [0113.972] SetFilePointerEx (in: hFile=0x6c8, liDistanceToMove=0x9f56, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.972] ReadFile (in: hFile=0x6c8, lpBuffer=0xb0afed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb0aff40, lpOverlapped=0x0 | out: lpBuffer=0xb0afed4*, lpNumberOfBytesRead=0xb0aff40*=0x19, lpOverlapped=0x0) returned 1 [0114.523] SetFilePointer (in: hFile=0x6c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.523] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb0aff48 | out: phKey=0xb0aff48*=0x2f24980) returned 1 [0114.523] SetFilePointer (in: hFile=0x6c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.524] ReadFile (in: hFile=0x6c8, lpBuffer=0x4d70000, nNumberOfBytesToRead=0xa078, lpNumberOfBytesRead=0xb0aff28, lpOverlapped=0x0 | out: lpBuffer=0x4d70000*, lpNumberOfBytesRead=0xb0aff28*=0xa078, lpOverlapped=0x0) returned 1 [0114.631] CryptEncrypt (in: hKey=0x2f24980, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb0aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb0aff2c*=0xf4250) returned 1 [0114.631] CryptEncrypt (in: hKey=0x2f24980, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4d70000*, pdwDataLen=0xb0aff24*=0xa078, dwBufLen=0xf4250 | out: pbData=0x4d70000*, pdwDataLen=0xb0aff24*=0xa080) returned 1 [0114.631] SetFilePointer (in: hFile=0x6c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.631] WriteFile (in: hFile=0x6c8, lpBuffer=0x4d70000*, nNumberOfBytesToWrite=0xa080, lpNumberOfBytesWritten=0xb0aff28, lpOverlapped=0x0 | out: lpBuffer=0x4d70000*, lpNumberOfBytesWritten=0xb0aff28*=0xa080, lpOverlapped=0x0) returned 1 [0114.631] WriteFile (in: hFile=0x6c8, lpBuffer=0xb0afef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb0aff18, lpOverlapped=0x0 | out: lpBuffer=0xb0afef0*, lpNumberOfBytesWritten=0xb0aff18*=0x6, lpOverlapped=0x0) returned 1 [0114.631] CryptExportKey (in: hKey=0x2f24980, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb0aff38 | out: pbData=0x0*, pdwDataLen=0xb0aff38*=0x10c) returned 1 [0114.631] CryptExportKey (in: hKey=0x2f24980, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb0afd98, pdwDataLen=0xb0aff38 | out: pbData=0xb0afd98*, pdwDataLen=0xb0aff38*=0x10c) returned 1 [0114.631] WriteFile (in: hFile=0x6c8, lpBuffer=0xb0afd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb0aff18, lpOverlapped=0x0 | out: lpBuffer=0xb0afd98*, lpNumberOfBytesWritten=0xb0aff18*=0x10c, lpOverlapped=0x0) returned 1 [0114.631] CloseHandle (hObject=0x6c8) returned 1 [0114.998] CryptDestroyKey (hKey=0x2f24980) returned 1 [0114.999] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), lpNewFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp.RYK" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.ryk"), dwFlags=0x8) returned 1 Thread: id = 181 os_tid = 0xd38 [0113.973] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml", dwFileAttributes=0x80) returned 1 [0113.973] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6cc [0113.973] GetFileSizeEx (in: hFile=0x6cc, lpFileSize=0xb46ff10 | out: lpFileSize=0xb46ff10*=14084) returned 1 [0113.973] GetFileSizeEx (in: hFile=0x6cc, lpFileSize=0xb46ff50 | out: lpFileSize=0xb46ff50*=14084) returned 1 [0113.974] SetFilePointerEx (in: hFile=0x6cc, liDistanceToMove=0x35e2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.974] ReadFile (in: hFile=0x6cc, lpBuffer=0xb46fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb46ff40, lpOverlapped=0x0 | out: lpBuffer=0xb46fed4*, lpNumberOfBytesRead=0xb46ff40*=0x19, lpOverlapped=0x0) returned 1 [0114.523] SetFilePointer (in: hFile=0x6cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.523] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb46ff48 | out: phKey=0xb46ff48*=0x2f24940) returned 1 [0114.523] SetFilePointer (in: hFile=0x6cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.523] ReadFile (in: hFile=0x6cc, lpBuffer=0x4e80000, nNumberOfBytesToRead=0x3704, lpNumberOfBytesRead=0xb46ff28, lpOverlapped=0x0 | out: lpBuffer=0x4e80000*, lpNumberOfBytesRead=0xb46ff28*=0x3704, lpOverlapped=0x0) returned 1 [0114.629] CryptEncrypt (in: hKey=0x2f24940, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb46ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb46ff2c*=0xf4250) returned 1 [0114.629] CryptEncrypt (in: hKey=0x2f24940, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4e80000*, pdwDataLen=0xb46ff24*=0x3704, dwBufLen=0xf4250 | out: pbData=0x4e80000*, pdwDataLen=0xb46ff24*=0x3710) returned 1 [0114.629] SetFilePointer (in: hFile=0x6cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.629] WriteFile (in: hFile=0x6cc, lpBuffer=0x4e80000*, nNumberOfBytesToWrite=0x3710, lpNumberOfBytesWritten=0xb46ff28, lpOverlapped=0x0 | out: lpBuffer=0x4e80000*, lpNumberOfBytesWritten=0xb46ff28*=0x3710, lpOverlapped=0x0) returned 1 [0114.629] WriteFile (in: hFile=0x6cc, lpBuffer=0xb46fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb46ff18, lpOverlapped=0x0 | out: lpBuffer=0xb46fef0*, lpNumberOfBytesWritten=0xb46ff18*=0x6, lpOverlapped=0x0) returned 1 [0114.629] CryptExportKey (in: hKey=0x2f24940, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb46ff38 | out: pbData=0x0*, pdwDataLen=0xb46ff38*=0x10c) returned 1 [0114.629] CryptExportKey (in: hKey=0x2f24940, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb46fd98, pdwDataLen=0xb46ff38 | out: pbData=0xb46fd98*, pdwDataLen=0xb46ff38*=0x10c) returned 1 [0114.629] WriteFile (in: hFile=0x6cc, lpBuffer=0xb46fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb46ff18, lpOverlapped=0x0 | out: lpBuffer=0xb46fd98*, lpNumberOfBytesWritten=0xb46ff18*=0x10c, lpOverlapped=0x0) returned 1 [0114.629] CloseHandle (hObject=0x6cc) returned 1 [0114.998] CryptDestroyKey (hKey=0x2f24940) returned 1 [0114.998] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Strings.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\strings.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 182 os_tid = 0x1020 [0113.975] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml", dwFileAttributes=0x80) returned 1 [0113.975] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0113.975] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0xb5aff10 | out: lpFileSize=0xb5aff10*=38898) returned 1 [0113.975] GetFileSizeEx (in: hFile=0x6d0, lpFileSize=0xb5aff50 | out: lpFileSize=0xb5aff50*=38898) returned 1 [0113.975] SetFilePointerEx (in: hFile=0x6d0, liDistanceToMove=0x96d0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.975] ReadFile (in: hFile=0x6d0, lpBuffer=0xb5afed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb5aff40, lpOverlapped=0x0 | out: lpBuffer=0xb5afed4*, lpNumberOfBytesRead=0xb5aff40*=0x19, lpOverlapped=0x0) returned 1 [0114.533] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.533] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb5aff48 | out: phKey=0xb5aff48*=0x2f24bc0) returned 1 [0114.533] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.533] ReadFile (in: hFile=0x6d0, lpBuffer=0x4f90000, nNumberOfBytesToRead=0x97f2, lpNumberOfBytesRead=0xb5aff28, lpOverlapped=0x0 | out: lpBuffer=0x4f90000*, lpNumberOfBytesRead=0xb5aff28*=0x97f2, lpOverlapped=0x0) returned 1 [0114.668] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb5aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb5aff2c*=0xf4250) returned 1 [0114.668] CryptEncrypt (in: hKey=0x2f24bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4f90000*, pdwDataLen=0xb5aff24*=0x97f2, dwBufLen=0xf4250 | out: pbData=0x4f90000*, pdwDataLen=0xb5aff24*=0x9800) returned 1 [0114.668] SetFilePointer (in: hFile=0x6d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.668] WriteFile (in: hFile=0x6d0, lpBuffer=0x4f90000*, nNumberOfBytesToWrite=0x9800, lpNumberOfBytesWritten=0xb5aff28, lpOverlapped=0x0 | out: lpBuffer=0x4f90000*, lpNumberOfBytesWritten=0xb5aff28*=0x9800, lpOverlapped=0x0) returned 1 [0114.668] WriteFile (in: hFile=0x6d0, lpBuffer=0xb5afef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb5aff18, lpOverlapped=0x0 | out: lpBuffer=0xb5afef0*, lpNumberOfBytesWritten=0xb5aff18*=0x6, lpOverlapped=0x0) returned 1 [0114.668] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb5aff38 | out: pbData=0x0*, pdwDataLen=0xb5aff38*=0x10c) returned 1 [0114.668] CryptExportKey (in: hKey=0x2f24bc0, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb5afd98, pdwDataLen=0xb5aff38 | out: pbData=0xb5afd98*, pdwDataLen=0xb5aff38*=0x10c) returned 1 [0114.669] WriteFile (in: hFile=0x6d0, lpBuffer=0xb5afd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb5aff18, lpOverlapped=0x0 | out: lpBuffer=0xb5afd98*, lpNumberOfBytesWritten=0xb5aff18*=0x10c, lpOverlapped=0x0) returned 1 [0114.669] CloseHandle (hObject=0x6d0) returned 1 [0115.000] CryptDestroyKey (hKey=0x2f24bc0) returned 1 [0115.000] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\UiInfo.xml.RYK" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml.ryk"), dwFlags=0x8) returned 1 Thread: id = 183 os_tid = 0xb4 [0113.976] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp", dwFileAttributes=0x80) returned 1 [0113.977] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d4 [0113.977] GetFileSizeEx (in: hFile=0x6d4, lpFileSize=0xb6eff10 | out: lpFileSize=0xb6eff10*=104072) returned 1 [0113.977] GetFileSizeEx (in: hFile=0x6d4, lpFileSize=0xb6eff50 | out: lpFileSize=0xb6eff50*=104072) returned 1 [0113.977] SetFilePointerEx (in: hFile=0x6d4, liDistanceToMove=0x19566, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.977] ReadFile (in: hFile=0x6d4, lpBuffer=0xb6efed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb6eff40, lpOverlapped=0x0 | out: lpBuffer=0xb6efed4*, lpNumberOfBytesRead=0xb6eff40*=0x19, lpOverlapped=0x0) returned 1 [0114.531] SetFilePointer (in: hFile=0x6d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.531] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb6eff48 | out: phKey=0xb6eff48*=0x2f24b80) returned 1 [0114.532] SetFilePointer (in: hFile=0x6d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.532] ReadFile (in: hFile=0x6d4, lpBuffer=0x50a0000, nNumberOfBytesToRead=0x19688, lpNumberOfBytesRead=0xb6eff28, lpOverlapped=0x0 | out: lpBuffer=0x50a0000*, lpNumberOfBytesRead=0xb6eff28*=0x19688, lpOverlapped=0x0) returned 1 [0114.664] CryptEncrypt (in: hKey=0x2f24b80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb6eff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb6eff2c*=0xf4250) returned 1 [0114.664] CryptEncrypt (in: hKey=0x2f24b80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x50a0000*, pdwDataLen=0xb6eff24*=0x19688, dwBufLen=0xf4250 | out: pbData=0x50a0000*, pdwDataLen=0xb6eff24*=0x19690) returned 1 [0114.664] SetFilePointer (in: hFile=0x6d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.664] WriteFile (in: hFile=0x6d4, lpBuffer=0x50a0000*, nNumberOfBytesToWrite=0x19690, lpNumberOfBytesWritten=0xb6eff28, lpOverlapped=0x0 | out: lpBuffer=0x50a0000*, lpNumberOfBytesWritten=0xb6eff28*=0x19690, lpOverlapped=0x0) returned 1 [0114.665] WriteFile (in: hFile=0x6d4, lpBuffer=0xb6efef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb6eff18, lpOverlapped=0x0 | out: lpBuffer=0xb6efef0*, lpNumberOfBytesWritten=0xb6eff18*=0x6, lpOverlapped=0x0) returned 1 [0114.665] CryptExportKey (in: hKey=0x2f24b80, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb6eff38 | out: pbData=0x0*, pdwDataLen=0xb6eff38*=0x10c) returned 1 [0114.665] CryptExportKey (in: hKey=0x2f24b80, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb6efd98, pdwDataLen=0xb6eff38 | out: pbData=0xb6efd98*, pdwDataLen=0xb6eff38*=0x10c) returned 1 [0114.665] WriteFile (in: hFile=0x6d4, lpBuffer=0xb6efd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb6eff18, lpOverlapped=0x0 | out: lpBuffer=0xb6efd98*, lpNumberOfBytesWritten=0xb6eff18*=0x10c, lpOverlapped=0x0) returned 1 [0114.665] CloseHandle (hObject=0x6d4) returned 1 [0114.999] CryptDestroyKey (hKey=0x2f24b80) returned 1 [0114.999] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), lpNewFileName="C:\\588bce7c90097ed212\\watermark.bmp.RYK" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp.ryk"), dwFlags=0x8) returned 1 Thread: id = 184 os_tid = 0x112c [0113.978] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu", dwFileAttributes=0x80) returned 1 [0113.979] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d8 [0113.979] GetFileSizeEx (in: hFile=0x6d8, lpFileSize=0xb82ff10 | out: lpFileSize=0xb82ff10*=5198099) returned 1 [0113.979] GetFileSizeEx (in: hFile=0x6d8, lpFileSize=0xb82ff50 | out: lpFileSize=0xb82ff50*=5198099) returned 1 [0113.979] SetFilePointerEx (in: hFile=0x6d8, liDistanceToMove=0x4f4ff1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.979] ReadFile (in: hFile=0x6d8, lpBuffer=0xb82fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb82ff40, lpOverlapped=0x0 | out: lpBuffer=0xb82fed4*, lpNumberOfBytesRead=0xb82ff40*=0x19, lpOverlapped=0x0) returned 1 [0114.529] SetFilePointer (in: hFile=0x6d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.529] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb82ff48 | out: phKey=0xb82ff48*=0x2f24a80) returned 1 [0114.529] SetFilePointer (in: hFile=0x6d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.529] ReadFile (in: hFile=0x6d8, lpBuffer=0x51b0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xb82ff28, lpOverlapped=0x0 | out: lpBuffer=0x51b0000*, lpNumberOfBytesRead=0xb82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0114.658] CryptEncrypt (in: hKey=0x2f24a80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb82ff2c*=0xf4240) returned 1 [0114.658] CryptEncrypt (in: hKey=0x2f24a80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x51b0000*, pdwDataLen=0xb82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x51b0000*, pdwDataLen=0xb82ff24*=0xf4240) returned 1 [0114.659] SetFilePointer (in: hFile=0x6d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.659] WriteFile (in: hFile=0x6d8, lpBuffer=0x51b0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xb82ff28, lpOverlapped=0x0 | out: lpBuffer=0x51b0000*, lpNumberOfBytesWritten=0xb82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0114.662] SetFilePointer (in: hFile=0x6d8, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0114.662] ReadFile (in: hFile=0x6d8, lpBuffer=0x51b0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xb82ff28, lpOverlapped=0x0 | out: lpBuffer=0x51b0000*, lpNumberOfBytesRead=0xb82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0114.936] CryptEncrypt (in: hKey=0x2f24a80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb82ff2c*=0xf4240) returned 1 [0114.936] CryptEncrypt (in: hKey=0x2f24a80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x51b0000*, pdwDataLen=0xb82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x51b0000*, pdwDataLen=0xb82ff24*=0xf4240) returned 1 [0114.937] SetFilePointer (in: hFile=0x6d8, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0114.937] WriteFile (in: hFile=0x6d8, lpBuffer=0x51b0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xb82ff28, lpOverlapped=0x0 | out: lpBuffer=0x51b0000*, lpNumberOfBytesWritten=0xb82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0115.519] SetFilePointer (in: hFile=0x6d8, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0115.519] ReadFile (in: hFile=0x6d8, lpBuffer=0x51b0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xb82ff28, lpOverlapped=0x0 | out: lpBuffer=0x51b0000*, lpNumberOfBytesRead=0xb82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0115.543] CryptEncrypt (in: hKey=0x2f24a80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb82ff2c*=0xf4240) returned 1 [0115.543] CryptEncrypt (in: hKey=0x2f24a80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x51b0000*, pdwDataLen=0xb82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x51b0000*, pdwDataLen=0xb82ff24*=0xf4240) returned 1 [0115.544] SetFilePointer (in: hFile=0x6d8, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0115.544] WriteFile (in: hFile=0x6d8, lpBuffer=0x51b0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xb82ff28, lpOverlapped=0x0 | out: lpBuffer=0x51b0000*, lpNumberOfBytesWritten=0xb82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0115.547] SetFilePointer (in: hFile=0x6d8, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0115.547] ReadFile (in: hFile=0x6d8, lpBuffer=0x51b0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xb82ff28, lpOverlapped=0x0 | out: lpBuffer=0x51b0000*, lpNumberOfBytesRead=0xb82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0116.574] CryptEncrypt (in: hKey=0x2f24a80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb82ff2c*=0xf4240) returned 1 [0116.574] CryptEncrypt (in: hKey=0x2f24a80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x51b0000*, pdwDataLen=0xb82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x51b0000*, pdwDataLen=0xb82ff24*=0xf4240) returned 1 [0116.575] SetFilePointer (in: hFile=0x6d8, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0116.575] WriteFile (in: hFile=0x6d8, lpBuffer=0x51b0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xb82ff28, lpOverlapped=0x0 | out: lpBuffer=0x51b0000*, lpNumberOfBytesWritten=0xb82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0116.578] SetFilePointer (in: hFile=0x6d8, lDistanceToMove=4000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x3d0900 [0116.578] ReadFile (in: hFile=0x6d8, lpBuffer=0x51b0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xb82ff28, lpOverlapped=0x0 | out: lpBuffer=0x51b0000*, lpNumberOfBytesRead=0xb82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0116.591] CryptEncrypt (in: hKey=0x2f24a80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb82ff2c*=0xf4240) returned 1 [0116.591] CryptEncrypt (in: hKey=0x2f24a80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x51b0000*, pdwDataLen=0xb82ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x51b0000*, pdwDataLen=0xb82ff24*=0xf4240) returned 1 [0116.592] SetFilePointer (in: hFile=0x6d8, lDistanceToMove=4000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x3d0900 [0116.592] WriteFile (in: hFile=0x6d8, lpBuffer=0x51b0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xb82ff28, lpOverlapped=0x0 | out: lpBuffer=0x51b0000*, lpNumberOfBytesWritten=0xb82ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0116.595] SetFilePointer (in: hFile=0x6d8, lDistanceToMove=5000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x4c4b40 [0116.595] ReadFile (in: hFile=0x6d8, lpBuffer=0x51b0000, nNumberOfBytesToRead=0x305d3, lpNumberOfBytesRead=0xb82ff28, lpOverlapped=0x0 | out: lpBuffer=0x51b0000*, lpNumberOfBytesRead=0xb82ff28*=0x305d3, lpOverlapped=0x0) returned 1 [0116.596] CryptEncrypt (in: hKey=0x2f24a80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb82ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb82ff2c*=0xf4250) returned 1 [0116.596] CryptEncrypt (in: hKey=0x2f24a80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x51b0000*, pdwDataLen=0xb82ff24*=0x305d3, dwBufLen=0xf4250 | out: pbData=0x51b0000*, pdwDataLen=0xb82ff24*=0x305e0) returned 1 [0116.596] SetFilePointer (in: hFile=0x6d8, lDistanceToMove=5000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x4c4b40 [0116.596] WriteFile (in: hFile=0x6d8, lpBuffer=0x51b0000*, nNumberOfBytesToWrite=0x305e0, lpNumberOfBytesWritten=0xb82ff28, lpOverlapped=0x0 | out: lpBuffer=0x51b0000*, lpNumberOfBytesWritten=0xb82ff28*=0x305e0, lpOverlapped=0x0) returned 1 [0116.597] WriteFile (in: hFile=0x6d8, lpBuffer=0xb82fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb82ff18, lpOverlapped=0x0 | out: lpBuffer=0xb82fef0*, lpNumberOfBytesWritten=0xb82ff18*=0x6, lpOverlapped=0x0) returned 1 [0116.597] CryptExportKey (in: hKey=0x2f24a80, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb82ff38 | out: pbData=0x0*, pdwDataLen=0xb82ff38*=0x10c) returned 1 [0116.597] CryptExportKey (in: hKey=0x2f24a80, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb82fd98, pdwDataLen=0xb82ff38 | out: pbData=0xb82fd98*, pdwDataLen=0xb82ff38*=0x10c) returned 1 [0116.597] WriteFile (in: hFile=0x6d8, lpBuffer=0xb82fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb82ff18, lpOverlapped=0x0 | out: lpBuffer=0xb82fd98*, lpNumberOfBytesWritten=0xb82ff18*=0x10c, lpOverlapped=0x0) returned 1 [0116.597] CloseHandle (hObject=0x6d8) returned 1 [0119.374] CryptDestroyKey (hKey=0x2f24a80) returned 1 [0119.374] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu.RYK" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu.ryk"), dwFlags=0x8) returned 1 Thread: id = 185 os_tid = 0xd88 [0113.980] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu", dwFileAttributes=0x80) returned 1 [0113.980] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6dc [0113.980] GetFileSizeEx (in: hFile=0x6dc, lpFileSize=0xb96ff10 | out: lpFileSize=0xb96ff10*=2192672) returned 1 [0113.980] GetFileSizeEx (in: hFile=0x6dc, lpFileSize=0xb96ff50 | out: lpFileSize=0xb96ff50*=2192672) returned 1 [0113.980] SetFilePointerEx (in: hFile=0x6dc, liDistanceToMove=0x2173fe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.980] ReadFile (in: hFile=0x6dc, lpBuffer=0xb96fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb96ff40, lpOverlapped=0x0 | out: lpBuffer=0xb96fed4*, lpNumberOfBytesRead=0xb96ff40*=0x19, lpOverlapped=0x0) returned 1 [0114.526] SetFilePointer (in: hFile=0x6dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.527] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb96ff48 | out: phKey=0xb96ff48*=0x2f24a40) returned 1 [0114.527] SetFilePointer (in: hFile=0x6dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.527] ReadFile (in: hFile=0x6dc, lpBuffer=0x52c0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xb96ff28, lpOverlapped=0x0 | out: lpBuffer=0x52c0000*, lpNumberOfBytesRead=0xb96ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0114.646] CryptEncrypt (in: hKey=0x2f24a40, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb96ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb96ff2c*=0xf4240) returned 1 [0114.646] CryptEncrypt (in: hKey=0x2f24a40, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x52c0000*, pdwDataLen=0xb96ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x52c0000*, pdwDataLen=0xb96ff24*=0xf4240) returned 1 [0114.647] SetFilePointer (in: hFile=0x6dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.647] WriteFile (in: hFile=0x6dc, lpBuffer=0x52c0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xb96ff28, lpOverlapped=0x0 | out: lpBuffer=0x52c0000*, lpNumberOfBytesWritten=0xb96ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0114.649] SetFilePointer (in: hFile=0x6dc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0114.649] ReadFile (in: hFile=0x6dc, lpBuffer=0x52c0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xb96ff28, lpOverlapped=0x0 | out: lpBuffer=0x52c0000*, lpNumberOfBytesRead=0xb96ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0114.916] CryptEncrypt (in: hKey=0x2f24a40, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb96ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb96ff2c*=0xf4240) returned 1 [0114.916] CryptEncrypt (in: hKey=0x2f24a40, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x52c0000*, pdwDataLen=0xb96ff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x52c0000*, pdwDataLen=0xb96ff24*=0xf4240) returned 1 [0114.917] SetFilePointer (in: hFile=0x6dc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0114.917] WriteFile (in: hFile=0x6dc, lpBuffer=0x52c0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xb96ff28, lpOverlapped=0x0 | out: lpBuffer=0x52c0000*, lpNumberOfBytesWritten=0xb96ff28*=0xf4240, lpOverlapped=0x0) returned 1 [0114.920] SetFilePointer (in: hFile=0x6dc, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0114.920] ReadFile (in: hFile=0x6dc, lpBuffer=0x52c0000, nNumberOfBytesToRead=0x2f0a0, lpNumberOfBytesRead=0xb96ff28, lpOverlapped=0x0 | out: lpBuffer=0x52c0000*, lpNumberOfBytesRead=0xb96ff28*=0x2f0a0, lpOverlapped=0x0) returned 1 [0115.481] CryptEncrypt (in: hKey=0x2f24a40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb96ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb96ff2c*=0xf4250) returned 1 [0115.481] CryptEncrypt (in: hKey=0x2f24a40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x52c0000*, pdwDataLen=0xb96ff24*=0x2f0a0, dwBufLen=0xf4250 | out: pbData=0x52c0000*, pdwDataLen=0xb96ff24*=0x2f0b0) returned 1 [0115.481] SetFilePointer (in: hFile=0x6dc, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0115.481] WriteFile (in: hFile=0x6dc, lpBuffer=0x52c0000*, nNumberOfBytesToWrite=0x2f0b0, lpNumberOfBytesWritten=0xb96ff28, lpOverlapped=0x0 | out: lpBuffer=0x52c0000*, lpNumberOfBytesWritten=0xb96ff28*=0x2f0b0, lpOverlapped=0x0) returned 1 [0115.483] WriteFile (in: hFile=0x6dc, lpBuffer=0xb96fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb96ff18, lpOverlapped=0x0 | out: lpBuffer=0xb96fef0*, lpNumberOfBytesWritten=0xb96ff18*=0x6, lpOverlapped=0x0) returned 1 [0115.483] CryptExportKey (in: hKey=0x2f24a40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb96ff38 | out: pbData=0x0*, pdwDataLen=0xb96ff38*=0x10c) returned 1 [0115.483] CryptExportKey (in: hKey=0x2f24a40, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb96fd98, pdwDataLen=0xb96ff38 | out: pbData=0xb96fd98*, pdwDataLen=0xb96ff38*=0x10c) returned 1 [0115.483] WriteFile (in: hFile=0x6dc, lpBuffer=0xb96fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb96ff18, lpOverlapped=0x0 | out: lpBuffer=0xb96fd98*, lpNumberOfBytesWritten=0xb96ff18*=0x10c, lpOverlapped=0x0) returned 1 [0115.483] CloseHandle (hObject=0x6dc) returned 1 [0116.211] CryptDestroyKey (hKey=0x2f24a40) returned 1 [0116.211] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu.RYK" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu.ryk"), dwFlags=0x8) returned 1 Thread: id = 186 os_tid = 0xd94 [0113.983] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu", dwFileAttributes=0x80) returned 1 [0113.983] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e0 [0113.983] GetFileSizeEx (in: hFile=0x6e0, lpFileSize=0xbaaff10 | out: lpFileSize=0xbaaff10*=5091790) returned 1 [0113.983] GetFileSizeEx (in: hFile=0x6e0, lpFileSize=0xbaaff50 | out: lpFileSize=0xbaaff50*=5091790) returned 1 [0113.983] SetFilePointerEx (in: hFile=0x6e0, liDistanceToMove=0x4db0ac, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.984] ReadFile (in: hFile=0x6e0, lpBuffer=0xbaafed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xbaaff40, lpOverlapped=0x0 | out: lpBuffer=0xbaafed4*, lpNumberOfBytesRead=0xbaaff40*=0x19, lpOverlapped=0x0) returned 1 [0114.525] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.525] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xbaaff48 | out: phKey=0xbaaff48*=0x2f24a00) returned 1 [0114.525] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.525] ReadFile (in: hFile=0x6e0, lpBuffer=0x53d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xbaaff28, lpOverlapped=0x0 | out: lpBuffer=0x53d0000*, lpNumberOfBytesRead=0xbaaff28*=0xf4240, lpOverlapped=0x0) returned 1 [0114.686] CryptEncrypt (in: hKey=0x2f24a00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xbaaff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xbaaff2c*=0xf4240) returned 1 [0114.686] CryptEncrypt (in: hKey=0x2f24a00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x53d0000*, pdwDataLen=0xbaaff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x53d0000*, pdwDataLen=0xbaaff24*=0xf4240) returned 1 [0114.687] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.687] WriteFile (in: hFile=0x6e0, lpBuffer=0x53d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xbaaff28, lpOverlapped=0x0 | out: lpBuffer=0x53d0000*, lpNumberOfBytesWritten=0xbaaff28*=0xf4240, lpOverlapped=0x0) returned 1 [0114.885] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0114.885] ReadFile (in: hFile=0x6e0, lpBuffer=0x53d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xbaaff28, lpOverlapped=0x0 | out: lpBuffer=0x53d0000*, lpNumberOfBytesRead=0xbaaff28*=0xf4240, lpOverlapped=0x0) returned 1 [0114.962] CryptEncrypt (in: hKey=0x2f24a00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xbaaff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xbaaff2c*=0xf4240) returned 1 [0114.962] CryptEncrypt (in: hKey=0x2f24a00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x53d0000*, pdwDataLen=0xbaaff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x53d0000*, pdwDataLen=0xbaaff24*=0xf4240) returned 1 [0114.963] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0114.963] WriteFile (in: hFile=0x6e0, lpBuffer=0x53d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xbaaff28, lpOverlapped=0x0 | out: lpBuffer=0x53d0000*, lpNumberOfBytesWritten=0xbaaff28*=0xf4240, lpOverlapped=0x0) returned 1 [0114.966] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0114.966] ReadFile (in: hFile=0x6e0, lpBuffer=0x53d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xbaaff28, lpOverlapped=0x0 | out: lpBuffer=0x53d0000*, lpNumberOfBytesRead=0xbaaff28*=0xf4240, lpOverlapped=0x0) returned 1 [0115.637] CryptEncrypt (in: hKey=0x2f24a00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xbaaff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xbaaff2c*=0xf4240) returned 1 [0115.637] CryptEncrypt (in: hKey=0x2f24a00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x53d0000*, pdwDataLen=0xbaaff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x53d0000*, pdwDataLen=0xbaaff24*=0xf4240) returned 1 [0115.638] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0115.638] WriteFile (in: hFile=0x6e0, lpBuffer=0x53d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xbaaff28, lpOverlapped=0x0 | out: lpBuffer=0x53d0000*, lpNumberOfBytesWritten=0xbaaff28*=0xf4240, lpOverlapped=0x0) returned 1 [0115.641] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0115.641] ReadFile (in: hFile=0x6e0, lpBuffer=0x53d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xbaaff28, lpOverlapped=0x0 | out: lpBuffer=0x53d0000*, lpNumberOfBytesRead=0xbaaff28*=0xf4240, lpOverlapped=0x0) returned 1 [0116.251] CryptEncrypt (in: hKey=0x2f24a00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xbaaff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xbaaff2c*=0xf4240) returned 1 [0116.251] CryptEncrypt (in: hKey=0x2f24a00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x53d0000*, pdwDataLen=0xbaaff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x53d0000*, pdwDataLen=0xbaaff24*=0xf4240) returned 1 [0116.613] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0 [0116.613] WriteFile (in: hFile=0x6e0, lpBuffer=0x53d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xbaaff28, lpOverlapped=0x0 | out: lpBuffer=0x53d0000*, lpNumberOfBytesWritten=0xbaaff28*=0xf4240, lpOverlapped=0x0) returned 1 [0116.616] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x3d0900 [0116.616] ReadFile (in: hFile=0x6e0, lpBuffer=0x53d0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xbaaff28, lpOverlapped=0x0 | out: lpBuffer=0x53d0000*, lpNumberOfBytesRead=0xbaaff28*=0xf4240, lpOverlapped=0x0) returned 1 [0116.636] CryptEncrypt (in: hKey=0x2f24a00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xbaaff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xbaaff2c*=0xf4240) returned 1 [0116.636] CryptEncrypt (in: hKey=0x2f24a00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x53d0000*, pdwDataLen=0xbaaff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x53d0000*, pdwDataLen=0xbaaff24*=0xf4240) returned 1 [0116.637] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x3d0900 [0116.637] WriteFile (in: hFile=0x6e0, lpBuffer=0x53d0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xbaaff28, lpOverlapped=0x0 | out: lpBuffer=0x53d0000*, lpNumberOfBytesWritten=0xbaaff28*=0xf4240, lpOverlapped=0x0) returned 1 [0116.640] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=5000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x4c4b40 [0116.640] ReadFile (in: hFile=0x6e0, lpBuffer=0x53d0000, nNumberOfBytesToRead=0x1668e, lpNumberOfBytesRead=0xbaaff28, lpOverlapped=0x0 | out: lpBuffer=0x53d0000*, lpNumberOfBytesRead=0xbaaff28*=0x1668e, lpOverlapped=0x0) returned 1 [0116.641] CryptEncrypt (in: hKey=0x2f24a00, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xbaaff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xbaaff2c*=0xf4250) returned 1 [0116.641] CryptEncrypt (in: hKey=0x2f24a00, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x53d0000*, pdwDataLen=0xbaaff24*=0x1668e, dwBufLen=0xf4250 | out: pbData=0x53d0000*, pdwDataLen=0xbaaff24*=0x16690) returned 1 [0116.641] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=5000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x4c4b40 [0116.641] WriteFile (in: hFile=0x6e0, lpBuffer=0x53d0000*, nNumberOfBytesToWrite=0x16690, lpNumberOfBytesWritten=0xbaaff28, lpOverlapped=0x0 | out: lpBuffer=0x53d0000*, lpNumberOfBytesWritten=0xbaaff28*=0x16690, lpOverlapped=0x0) returned 1 [0116.641] WriteFile (in: hFile=0x6e0, lpBuffer=0xbaafef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xbaaff18, lpOverlapped=0x0 | out: lpBuffer=0xbaafef0*, lpNumberOfBytesWritten=0xbaaff18*=0x6, lpOverlapped=0x0) returned 1 [0116.641] CryptExportKey (in: hKey=0x2f24a00, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xbaaff38 | out: pbData=0x0*, pdwDataLen=0xbaaff38*=0x10c) returned 1 [0116.641] CryptExportKey (in: hKey=0x2f24a00, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xbaafd98, pdwDataLen=0xbaaff38 | out: pbData=0xbaafd98*, pdwDataLen=0xbaaff38*=0x10c) returned 1 [0116.641] WriteFile (in: hFile=0x6e0, lpBuffer=0xbaafd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbaaff18, lpOverlapped=0x0 | out: lpBuffer=0xbaafd98*, lpNumberOfBytesWritten=0xbaaff18*=0x10c, lpOverlapped=0x0) returned 1 [0116.642] CloseHandle (hObject=0x6e0) returned 1 [0118.675] CryptDestroyKey (hKey=0x2f24a00) returned 1 [0118.675] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.RYK" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu.ryk"), dwFlags=0x8) returned 1 Thread: id = 187 os_tid = 0x13b8 [0113.985] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu", dwFileAttributes=0x80) returned 1 [0113.985] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4 [0113.985] GetFileSizeEx (in: hFile=0x6e4, lpFileSize=0xbbeff10 | out: lpFileSize=0xbbeff10*=2141433) returned 1 [0113.985] GetFileSizeEx (in: hFile=0x6e4, lpFileSize=0xbbeff50 | out: lpFileSize=0xbbeff50*=2141433) returned 1 [0113.985] SetFilePointerEx (in: hFile=0x6e4, liDistanceToMove=0x20abd7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0113.985] ReadFile (in: hFile=0x6e4, lpBuffer=0xbbefed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xbbeff40, lpOverlapped=0x0 | out: lpBuffer=0xbbefed4*, lpNumberOfBytesRead=0xbbeff40*=0x19, lpOverlapped=0x0) returned 1 [0114.607] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.607] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xbbeff48 | out: phKey=0xbbeff48*=0x2f24c80) returned 1 [0114.607] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.607] ReadFile (in: hFile=0x6e4, lpBuffer=0x54e0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xbbeff28, lpOverlapped=0x0 | out: lpBuffer=0x54e0000*, lpNumberOfBytesRead=0xbbeff28*=0xf4240, lpOverlapped=0x0) returned 1 [0114.895] CryptEncrypt (in: hKey=0x2f24c80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xbbeff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xbbeff2c*=0xf4240) returned 1 [0114.895] CryptEncrypt (in: hKey=0x2f24c80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x54e0000*, pdwDataLen=0xbbeff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x54e0000*, pdwDataLen=0xbbeff24*=0xf4240) returned 1 [0114.897] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0114.897] WriteFile (in: hFile=0x6e4, lpBuffer=0x54e0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xbbeff28, lpOverlapped=0x0 | out: lpBuffer=0x54e0000*, lpNumberOfBytesWritten=0xbbeff28*=0xf4240, lpOverlapped=0x0) returned 1 [0114.899] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0114.899] ReadFile (in: hFile=0x6e4, lpBuffer=0x54e0000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xbbeff28, lpOverlapped=0x0 | out: lpBuffer=0x54e0000*, lpNumberOfBytesRead=0xbbeff28*=0xf4240, lpOverlapped=0x0) returned 1 [0114.993] CryptEncrypt (in: hKey=0x2f24c80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xbbeff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xbbeff2c*=0xf4240) returned 1 [0114.993] CryptEncrypt (in: hKey=0x2f24c80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x54e0000*, pdwDataLen=0xbbeff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x54e0000*, pdwDataLen=0xbbeff24*=0xf4240) returned 1 [0114.994] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0114.994] WriteFile (in: hFile=0x6e4, lpBuffer=0x54e0000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xbbeff28, lpOverlapped=0x0 | out: lpBuffer=0x54e0000*, lpNumberOfBytesWritten=0xbbeff28*=0xf4240, lpOverlapped=0x0) returned 1 [0114.997] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0114.997] ReadFile (in: hFile=0x6e4, lpBuffer=0x54e0000, nNumberOfBytesToRead=0x22879, lpNumberOfBytesRead=0xbbeff28, lpOverlapped=0x0 | out: lpBuffer=0x54e0000*, lpNumberOfBytesRead=0xbbeff28*=0x22879, lpOverlapped=0x0) returned 1 [0115.574] CryptEncrypt (in: hKey=0x2f24c80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xbbeff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xbbeff2c*=0xf4250) returned 1 [0115.574] CryptEncrypt (in: hKey=0x2f24c80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x54e0000*, pdwDataLen=0xbbeff24*=0x22879, dwBufLen=0xf4250 | out: pbData=0x54e0000*, pdwDataLen=0xbbeff24*=0x22880) returned 1 [0115.574] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480 [0115.574] WriteFile (in: hFile=0x6e4, lpBuffer=0x54e0000*, nNumberOfBytesToWrite=0x22880, lpNumberOfBytesWritten=0xbbeff28, lpOverlapped=0x0 | out: lpBuffer=0x54e0000*, lpNumberOfBytesWritten=0xbbeff28*=0x22880, lpOverlapped=0x0) returned 1 [0115.575] WriteFile (in: hFile=0x6e4, lpBuffer=0xbbefef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xbbeff18, lpOverlapped=0x0 | out: lpBuffer=0xbbefef0*, lpNumberOfBytesWritten=0xbbeff18*=0x6, lpOverlapped=0x0) returned 1 [0115.576] CryptExportKey (in: hKey=0x2f24c80, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xbbeff38 | out: pbData=0x0*, pdwDataLen=0xbbeff38*=0x10c) returned 1 [0115.576] CryptExportKey (in: hKey=0x2f24c80, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xbbefd98, pdwDataLen=0xbbeff38 | out: pbData=0xbbefd98*, pdwDataLen=0xbbeff38*=0x10c) returned 1 [0115.576] WriteFile (in: hFile=0x6e4, lpBuffer=0xbbefd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbbeff18, lpOverlapped=0x0 | out: lpBuffer=0xbbefd98*, lpNumberOfBytesWritten=0xbbeff18*=0x10c, lpOverlapped=0x0) returned 1 [0115.576] CloseHandle (hObject=0x6e4) returned 1 [0116.243] CryptDestroyKey (hKey=0x2f24c80) returned 1 [0116.244] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu.RYK" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu.ryk"), dwFlags=0x8) returned 1 Thread: id = 188 os_tid = 0x12a4 [0113.986] SetFileAttributesW (lpFileName="C:\\Boot\\BCD", dwFileAttributes=0x80) returned 1 [0114.249] CreateFileW (lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0114.249] CloseHandle (hObject=0xffffffff) returned 1 [0114.249] MoveFileExW (lpExistingFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), lpNewFileName="C:\\Boot\\BCD.RYK" (normalized: "c:\\boot\\bcd.ryk"), dwFlags=0x8) returned 0 Thread: id = 189 os_tid = 0x11a8 [0113.988] SetFileAttributesW (lpFileName="C:\\Boot\\BCD.LOG", dwFileAttributes=0x80) returned 1 [0114.250] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0114.250] CloseHandle (hObject=0xffffffff) returned 1 [0114.250] MoveFileExW (lpExistingFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), lpNewFileName="C:\\Boot\\BCD.LOG.RYK" (normalized: "c:\\boot\\bcd.log.ryk"), dwFlags=0x8) returned 0 Thread: id = 190 os_tid = 0x13f4 [0113.988] SetFileAttributesW (lpFileName="C:\\Boot\\BCD.LOG1", dwFileAttributes=0x80) returned 1 [0114.251] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6ec [0114.251] GetFileSizeEx (in: hFile=0x6ec, lpFileSize=0xbfaff10 | out: lpFileSize=0xbfaff10*=0) returned 1 [0114.251] GetFileSizeEx (in: hFile=0x6ec, lpFileSize=0xbfaff50 | out: lpFileSize=0xbfaff50*=0) returned 1 [0114.251] CloseHandle (hObject=0x6ec) returned 1 [0114.251] MoveFileExW (lpExistingFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), lpNewFileName="C:\\Boot\\BCD.LOG1.RYK" (normalized: "c:\\boot\\bcd.log1.ryk"), dwFlags=0x8) returned 1 Thread: id = 191 os_tid = 0x129c [0113.988] SetFileAttributesW (lpFileName="C:\\Boot\\BCD.LOG2", dwFileAttributes=0x80) returned 1 [0115.045] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0115.045] GetFileSizeEx (in: hFile=0x6e8, lpFileSize=0xc0eff10 | out: lpFileSize=0xc0eff10*=0) returned 1 [0115.045] GetFileSizeEx (in: hFile=0x6e8, lpFileSize=0xc0eff50 | out: lpFileSize=0xc0eff50*=0) returned 1 [0115.045] CloseHandle (hObject=0x6e8) returned 1 [0115.046] MoveFileExW (lpExistingFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), lpNewFileName="C:\\Boot\\BCD.LOG2.RYK" (normalized: "c:\\boot\\bcd.log2.ryk"), dwFlags=0x8) returned 1 Thread: id = 197 os_tid = 0x1160 [0116.675] SetFileAttributesW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b", dwFileAttributes=0x80) returned 0 [0116.676] CreateFileW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0116.679] CloseHandle (hObject=0xffffffff) returned 1 [0116.679] MoveFileExW (lpExistingFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), lpNewFileName="C:\\Boot\\updaterevokesipolicy.p7b.RYK" (normalized: "c:\\boot\\updaterevokesipolicy.p7b.ryk"), dwFlags=0x8) returned 0 Thread: id = 203 os_tid = 0xfd4 Thread: id = 204 os_tid = 0xe84 [0119.380] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\MF\\Active.GRL", dwFileAttributes=0x80) returned 0 [0119.380] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\mf\\active.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.380] CloseHandle (hObject=0xffffffff) returned 1 [0119.380] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\mf\\active.grl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\MF\\Active.GRL.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\mf\\active.grl.ryk"), dwFlags=0x8) returned 0 Thread: id = 205 os_tid = 0xc0c [0119.381] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\MF\\Pending.GRL", dwFileAttributes=0x80) returned 0 [0119.381] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\mf\\pending.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.381] CloseHandle (hObject=0xffffffff) returned 1 [0119.381] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\mf\\pending.grl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\MF\\Pending.GRL.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\mf\\pending.grl.ryk"), dwFlags=0x8) returned 0 Thread: id = 208 os_tid = 0xddc [0119.758] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUx.001.etl", dwFileAttributes=0x80) returned 0 [0119.758] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUx.001.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationux.001.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.758] CloseHandle (hObject=0xffffffff) returned 1 [0119.758] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUx.001.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationux.001.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUx.001.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationux.001.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 209 os_tid = 0xdcc [0119.762] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUx.002.etl", dwFileAttributes=0x80) returned 0 [0119.762] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUx.002.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationux.002.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.762] CloseHandle (hObject=0xffffffff) returned 1 [0120.260] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUx.002.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationux.002.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUx.002.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationux.002.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 210 os_tid = 0xdd4 [0119.801] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.001.etl", dwFileAttributes=0x80) returned 0 [0119.801] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.001.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.001.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.801] CloseHandle (hObject=0xffffffff) returned 1 [0119.802] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.001.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.001.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.001.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.001.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 211 os_tid = 0x914 [0119.804] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.002.etl", dwFileAttributes=0x80) returned 0 [0119.804] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.002.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.002.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.804] CloseHandle (hObject=0xffffffff) returned 1 [0119.804] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.002.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.002.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.002.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.002.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 212 os_tid = 0xc1c [0119.805] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.003.etl", dwFileAttributes=0x80) returned 0 [0119.805] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.003.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.003.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.805] CloseHandle (hObject=0xffffffff) returned 1 [0119.805] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.003.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.003.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.003.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.003.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 213 os_tid = 0xdd8 [0119.806] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.004.etl", dwFileAttributes=0x80) returned 0 [0119.806] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.004.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.004.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.806] CloseHandle (hObject=0xffffffff) returned 1 [0119.806] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.004.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.004.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.004.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.004.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 214 os_tid = 0xe3c [0119.807] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.005.etl", dwFileAttributes=0x80) returned 0 [0119.807] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.005.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.005.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.807] CloseHandle (hObject=0xffffffff) returned 1 [0119.807] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.005.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.005.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.005.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.005.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 215 os_tid = 0xd44 [0119.808] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.006.etl", dwFileAttributes=0x80) returned 0 [0119.808] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.006.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.006.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.808] CloseHandle (hObject=0xffffffff) returned 1 [0119.808] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.006.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.006.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.006.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.006.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 216 os_tid = 0x12a0 [0119.809] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.007.etl", dwFileAttributes=0x80) returned 0 [0119.809] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.007.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.007.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.809] CloseHandle (hObject=0xffffffff) returned 1 [0119.809] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.007.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.007.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.007.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.007.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 217 os_tid = 0x12c4 [0119.810] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.008.etl", dwFileAttributes=0x80) returned 0 [0119.810] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.008.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.008.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.810] CloseHandle (hObject=0xffffffff) returned 1 [0119.810] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.008.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.008.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.008.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.008.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 218 os_tid = 0x3d0 [0119.811] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.009.etl", dwFileAttributes=0x80) returned 0 [0119.811] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.009.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.009.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.811] CloseHandle (hObject=0xffffffff) returned 1 [0119.812] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.009.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.009.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.009.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.009.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 219 os_tid = 0x870 [0119.812] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.010.etl", dwFileAttributes=0x80) returned 0 [0119.812] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.010.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.010.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.812] CloseHandle (hObject=0xffffffff) returned 1 [0119.813] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.010.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.010.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.010.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.010.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 220 os_tid = 0xfb4 [0119.813] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.011.etl", dwFileAttributes=0x80) returned 0 [0119.814] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.011.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.011.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.814] CloseHandle (hObject=0xffffffff) returned 1 [0119.814] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.011.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.011.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.011.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.011.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 221 os_tid = 0xf80 [0119.814] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.012.etl", dwFileAttributes=0x80) returned 0 [0119.814] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.012.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.012.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.815] CloseHandle (hObject=0xffffffff) returned 1 [0119.815] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.012.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.012.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.012.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.012.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 222 os_tid = 0x1004 [0119.816] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.013.etl", dwFileAttributes=0x80) returned 0 [0119.816] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.013.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.013.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.816] CloseHandle (hObject=0xffffffff) returned 1 [0119.816] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.013.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.013.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.013.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.013.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 223 os_tid = 0x13c8 [0119.817] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.014.etl", dwFileAttributes=0x80) returned 0 [0119.817] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.014.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.014.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.817] CloseHandle (hObject=0xffffffff) returned 1 [0119.817] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.014.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.014.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.014.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.014.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 224 os_tid = 0xf0c [0119.818] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.015.etl", dwFileAttributes=0x80) returned 0 [0119.818] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.015.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.015.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.818] CloseHandle (hObject=0xffffffff) returned 1 [0119.818] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.015.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.015.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.015.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.015.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 225 os_tid = 0xf90 [0119.819] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.016.etl", dwFileAttributes=0x80) returned 0 [0119.819] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.016.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.016.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.819] CloseHandle (hObject=0xffffffff) returned 1 [0119.819] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.016.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.016.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.016.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.016.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 226 os_tid = 0xd9c [0119.820] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.017.etl", dwFileAttributes=0x80) returned 0 [0119.820] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.017.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.017.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.820] CloseHandle (hObject=0xffffffff) returned 1 [0119.820] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.017.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.017.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\NotificationUxBroker.017.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\notificationuxbroker.017.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 228 os_tid = 0x450 [0120.261] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.001.etl", dwFileAttributes=0x80) returned 0 [0120.261] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.001.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.001.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.261] CloseHandle (hObject=0xffffffff) returned 1 [0120.261] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.001.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.001.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.001.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.001.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 229 os_tid = 0xedc [0120.262] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl", dwFileAttributes=0x80) returned 0 [0120.262] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.002.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.262] CloseHandle (hObject=0xffffffff) returned 1 [0120.262] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.002.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.002.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 230 os_tid = 0xed0 [0120.263] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl", dwFileAttributes=0x80) returned 0 [0120.263] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.003.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.263] CloseHandle (hObject=0xffffffff) returned 1 [0120.263] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.003.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.003.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 231 os_tid = 0x132c [0120.264] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl", dwFileAttributes=0x80) returned 0 [0120.264] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.004.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.264] CloseHandle (hObject=0xffffffff) returned 1 [0120.264] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.004.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.004.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 232 os_tid = 0x1294 [0120.264] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl", dwFileAttributes=0x80) returned 0 [0120.264] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.005.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.265] CloseHandle (hObject=0xffffffff) returned 1 [0120.265] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.005.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.005.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 233 os_tid = 0x1324 [0120.265] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl", dwFileAttributes=0x80) returned 0 [0120.265] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.006.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.265] CloseHandle (hObject=0xffffffff) returned 1 [0120.265] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.006.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.006.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 234 os_tid = 0x134c [0120.266] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl", dwFileAttributes=0x80) returned 0 [0120.266] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.007.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.266] CloseHandle (hObject=0xffffffff) returned 1 [0120.266] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.007.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.007.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 235 os_tid = 0x13a0 [0120.267] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl", dwFileAttributes=0x80) returned 0 [0120.267] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.008.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.267] CloseHandle (hObject=0xffffffff) returned 1 [0120.267] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.008.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.008.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 236 os_tid = 0xf70 [0120.268] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl", dwFileAttributes=0x80) returned 0 [0120.268] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.009.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.268] CloseHandle (hObject=0xffffffff) returned 1 [0120.268] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.009.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.009.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 237 os_tid = 0x1354 [0120.269] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl", dwFileAttributes=0x80) returned 0 [0120.269] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.010.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.269] CloseHandle (hObject=0xffffffff) returned 1 [0120.269] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.010.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.010.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 238 os_tid = 0x1240 [0120.270] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl", dwFileAttributes=0x80) returned 0 [0120.270] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.011.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.270] CloseHandle (hObject=0xffffffff) returned 1 [0120.270] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.011.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.011.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 239 os_tid = 0x368 [0120.271] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl", dwFileAttributes=0x80) returned 0 [0120.271] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.012.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.271] CloseHandle (hObject=0xffffffff) returned 1 [0120.271] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.012.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.012.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 240 os_tid = 0xec8 [0120.272] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl", dwFileAttributes=0x80) returned 0 [0120.272] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.013.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.272] CloseHandle (hObject=0xffffffff) returned 1 [0120.272] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.013.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.013.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 241 os_tid = 0xf9c [0120.272] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl", dwFileAttributes=0x80) returned 0 [0120.272] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.014.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.272] CloseHandle (hObject=0xffffffff) returned 1 [0120.273] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.014.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.014.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 242 os_tid = 0xcf0 [0120.273] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl", dwFileAttributes=0x80) returned 0 [0120.273] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.015.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.273] CloseHandle (hObject=0xffffffff) returned 1 [0120.273] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.015.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.015.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 243 os_tid = 0xecc [0120.274] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl", dwFileAttributes=0x80) returned 0 [0120.274] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.016.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.274] CloseHandle (hObject=0xffffffff) returned 1 [0120.274] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.016.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.016.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 244 os_tid = 0xe60 [0120.275] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl", dwFileAttributes=0x80) returned 0 [0120.275] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.017.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.275] CloseHandle (hObject=0xffffffff) returned 1 [0120.275] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.017.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.017.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 245 os_tid = 0x12bc [0120.276] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.018.etl", dwFileAttributes=0x80) returned 0 [0120.276] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.018.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.018.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.276] CloseHandle (hObject=0xffffffff) returned 1 [0120.276] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.018.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.018.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.018.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.018.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 246 os_tid = 0x120c [0120.277] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.019.etl", dwFileAttributes=0x80) returned 0 [0120.277] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.019.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.019.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.277] CloseHandle (hObject=0xffffffff) returned 1 [0120.277] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.019.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.019.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.019.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.019.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 247 os_tid = 0xfcc [0120.279] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.020.etl", dwFileAttributes=0x80) returned 0 [0120.279] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.020.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.020.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.279] CloseHandle (hObject=0xffffffff) returned 1 [0120.279] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.020.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.020.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.020.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.020.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 248 os_tid = 0xe50 [0120.280] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.021.etl", dwFileAttributes=0x80) returned 0 [0120.280] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.021.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.021.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.280] CloseHandle (hObject=0xffffffff) returned 1 [0120.281] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.021.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.021.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.021.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.021.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 249 os_tid = 0x158 [0120.281] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.022.etl", dwFileAttributes=0x80) returned 0 [0120.281] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.022.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.022.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.282] CloseHandle (hObject=0xffffffff) returned 1 [0120.282] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.022.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.022.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.022.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.022.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 250 os_tid = 0x1320 [0120.283] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.023.etl", dwFileAttributes=0x80) returned 0 [0120.283] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.023.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.023.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.283] CloseHandle (hObject=0xffffffff) returned 1 [0120.283] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.023.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.023.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.023.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.023.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 251 os_tid = 0x3f0 [0120.284] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.024.etl", dwFileAttributes=0x80) returned 0 [0120.284] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.024.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.024.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.284] CloseHandle (hObject=0xffffffff) returned 1 [0120.284] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.024.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.024.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.024.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.024.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 252 os_tid = 0x1334 [0120.285] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.025.etl", dwFileAttributes=0x80) returned 0 [0120.285] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.025.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.025.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.285] CloseHandle (hObject=0xffffffff) returned 1 [0120.285] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.025.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.025.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.025.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.025.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 253 os_tid = 0xab0 [0120.286] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.026.etl", dwFileAttributes=0x80) returned 0 [0120.286] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.026.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.026.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.286] CloseHandle (hObject=0xffffffff) returned 1 [0120.286] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.026.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.026.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.026.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.026.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 254 os_tid = 0xec4 [0120.287] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.027.etl", dwFileAttributes=0x80) returned 0 [0120.287] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.027.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.027.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.287] CloseHandle (hObject=0xffffffff) returned 1 [0120.288] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.027.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.027.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.027.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.027.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 257 os_tid = 0xe58 [0120.789] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.028.etl", dwFileAttributes=0x80) returned 0 [0120.789] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.028.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.028.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.789] CloseHandle (hObject=0xffffffff) returned 1 [0120.789] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.028.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.028.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.028.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.028.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 258 os_tid = 0xf6c [0120.790] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.029.etl", dwFileAttributes=0x80) returned 0 [0120.790] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.029.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.029.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.791] CloseHandle (hObject=0xffffffff) returned 1 [0120.791] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.029.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.029.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.029.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.029.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 259 os_tid = 0x1404 [0120.791] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.030.etl", dwFileAttributes=0x80) returned 0 [0120.792] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.030.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.030.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.792] CloseHandle (hObject=0xffffffff) returned 1 [0120.792] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.030.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.030.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.030.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.030.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 260 os_tid = 0x1408 [0120.792] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.031.etl", dwFileAttributes=0x80) returned 0 [0120.793] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.031.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.031.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.793] CloseHandle (hObject=0xffffffff) returned 1 [0120.793] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.031.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.031.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.031.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.031.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 261 os_tid = 0x140c [0120.793] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.032.etl", dwFileAttributes=0x80) returned 0 [0120.794] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.032.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.032.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.794] CloseHandle (hObject=0xffffffff) returned 1 [0120.794] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.032.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.032.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.032.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.032.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 262 os_tid = 0x1410 [0120.794] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.033.etl", dwFileAttributes=0x80) returned 0 [0120.794] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.033.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.033.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.795] CloseHandle (hObject=0xffffffff) returned 1 [0120.795] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.033.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.033.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.033.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.033.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 263 os_tid = 0x1414 [0120.795] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.034.etl", dwFileAttributes=0x80) returned 0 [0120.795] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.034.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.034.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.796] CloseHandle (hObject=0xffffffff) returned 1 [0120.796] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.034.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.034.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.034.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.034.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 264 os_tid = 0x1418 [0120.796] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.035.etl", dwFileAttributes=0x80) returned 0 [0120.796] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.035.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.035.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.797] CloseHandle (hObject=0xffffffff) returned 1 [0120.797] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.035.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.035.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.035.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.035.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 265 os_tid = 0x141c [0120.797] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.036.etl", dwFileAttributes=0x80) returned 0 [0120.797] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.036.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.036.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.797] CloseHandle (hObject=0xffffffff) returned 1 [0120.798] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.036.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.036.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.036.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.036.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 266 os_tid = 0x1420 [0120.798] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.037.etl", dwFileAttributes=0x80) returned 0 [0120.799] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.037.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.037.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.799] CloseHandle (hObject=0xffffffff) returned 1 [0120.799] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.037.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.037.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateSessionOrchestration.037.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updatesessionorchestration.037.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 267 os_tid = 0x1424 [0120.799] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateUx.001.etl", dwFileAttributes=0x80) returned 0 [0120.800] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateUx.001.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updateux.001.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.800] CloseHandle (hObject=0xffffffff) returned 1 [0120.800] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateUx.001.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updateux.001.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateUx.001.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updateux.001.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 268 os_tid = 0x1428 [0120.801] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateUx.002.etl", dwFileAttributes=0x80) returned 0 [0120.801] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateUx.002.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updateux.002.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.801] CloseHandle (hObject=0xffffffff) returned 1 [0120.801] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateUx.002.etl" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updateux.002.etl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\USOShared\\Logs\\UpdateUx.002.etl.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\usoshared\\logs\\updateux.002.etl.ryk"), dwFlags=0x8) returned 0 Thread: id = 269 os_tid = 0x142c [0121.961] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\AppV\\Setup\\OfficeIntegrator.ps1", dwFileAttributes=0x80) returned 0 [0121.961] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\AppV\\Setup\\OfficeIntegrator.ps1" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\appv\\setup\\officeintegrator.ps1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.961] CloseHandle (hObject=0xffffffff) returned 1 [0121.961] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\AppV\\Setup\\OfficeIntegrator.ps1" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\appv\\setup\\officeintegrator.ps1"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\AppV\\Setup\\OfficeIntegrator.ps1.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\appv\\setup\\officeintegrator.ps1.ryk"), dwFlags=0x8) returned 0 Thread: id = 271 os_tid = 0x1438 [0122.634] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml", dwFileAttributes=0x80) returned 0 [0122.634] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\deploymentconfig.0.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.634] CloseHandle (hObject=0xffffffff) returned 1 [0122.634] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\deploymentconfig.0.xml"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\deploymentconfig.0.xml.ryk"), dwFlags=0x8) returned 0 Thread: id = 272 os_tid = 0x143c [0122.634] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml", dwFileAttributes=0x80) returned 0 [0122.634] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\deploymentconfig.1.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.634] CloseHandle (hObject=0xffffffff) returned 1 [0122.635] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\deploymentconfig.1.xml"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\deploymentconfig.1.xml.ryk"), dwFlags=0x8) returned 0 Thread: id = 273 os_tid = 0x1440 [0122.635] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml", dwFileAttributes=0x80) returned 0 [0122.635] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\deploymentconfig.2.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.635] CloseHandle (hObject=0xffffffff) returned 1 [0122.635] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\deploymentconfig.2.xml"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\clicktorun\\deploymentconfig.2.xml.ryk"), dwFlags=0x8) returned 0 Thread: id = 274 os_tid = 0x1444 [0122.636] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RSA\\MachineKeys\\08e575673cce10c72090304839888e02_33d770d0-06bc-47c5-8714-222cdac43a71", dwFileAttributes=0x80) returned 0 [0122.636] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RSA\\MachineKeys\\08e575673cce10c72090304839888e02_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\rsa\\machinekeys\\08e575673cce10c72090304839888e02_33d770d0-06bc-47c5-8714-222cdac43a71"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.636] CloseHandle (hObject=0xffffffff) returned 1 [0122.636] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RSA\\MachineKeys\\08e575673cce10c72090304839888e02_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\rsa\\machinekeys\\08e575673cce10c72090304839888e02_33d770d0-06bc-47c5-8714-222cdac43a71"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RSA\\MachineKeys\\08e575673cce10c72090304839888e02_33d770d0-06bc-47c5-8714-222cdac43a71.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\rsa\\machinekeys\\08e575673cce10c72090304839888e02_33d770d0-06bc-47c5-8714-222cdac43a71.ryk"), dwFlags=0x8) returned 0 Thread: id = 275 os_tid = 0x1448 [0122.637] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RSA\\MachineKeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267", dwFileAttributes=0x80) returned 0 [0122.637] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RSA\\MachineKeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\rsa\\machinekeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.637] CloseHandle (hObject=0xffffffff) returned 1 [0122.637] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RSA\\MachineKeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\rsa\\machinekeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RSA\\MachineKeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\rsa\\machinekeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267.ryk"), dwFlags=0x8) returned 0 Thread: id = 276 os_tid = 0x144c [0122.637] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", dwFileAttributes=0x80) returned 0 [0122.637] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\rsa\\s-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.637] CloseHandle (hObject=0xffffffff) returned 1 [0122.638] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\rsa\\s-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\rsa\\s-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71.ryk"), dwFlags=0x8) returned 0 Thread: id = 277 os_tid = 0x1450 [0123.019] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\SystemKeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267", dwFileAttributes=0x80) returned 0 [0123.019] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\SystemKeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\systemkeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.019] CloseHandle (hObject=0xffffffff) returned 1 [0123.019] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\SystemKeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\systemkeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\SystemKeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\systemkeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267.ryk"), dwFlags=0x8) returned 0 Thread: id = 278 os_tid = 0x1454 [0123.020] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\SystemKeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", dwFileAttributes=0x80) returned 0 [0123.020] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\SystemKeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\systemkeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.020] CloseHandle (hObject=0xffffffff) returned 1 [0123.020] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\SystemKeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\systemkeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Crypto\\SystemKeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\crypto\\systemkeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71.ryk"), dwFlags=0x8) returned 0 Thread: id = 279 os_tid = 0x1458 [0123.021] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\Events_CostDeferred.rbs", dwFileAttributes=0x80) returned 0 [0123.021] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\Events_CostDeferred.rbs" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\events_costdeferred.rbs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.021] CloseHandle (hObject=0xffffffff) returned 1 [0123.021] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\Events_CostDeferred.rbs" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\events_costdeferred.rbs"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\Events_CostDeferred.rbs.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\events_costdeferred.rbs.ryk"), dwFlags=0x8) returned 0 Thread: id = 280 os_tid = 0x145c [0123.022] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\Events_Normal.rbs", dwFileAttributes=0x80) returned 0 [0123.022] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\Events_Normal.rbs" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\events_normal.rbs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.022] CloseHandle (hObject=0xffffffff) returned 1 [0123.022] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\Events_Normal.rbs" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\events_normal.rbs"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\Events_Normal.rbs.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\events_normal.rbs.ryk"), dwFlags=0x8) returned 0 Thread: id = 281 os_tid = 0x1460 [0123.022] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\Events_NormalCritical.rbs", dwFileAttributes=0x80) returned 0 [0123.022] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\Events_NormalCritical.rbs" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\events_normalcritical.rbs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.022] CloseHandle (hObject=0xffffffff) returned 1 [0123.023] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\Events_NormalCritical.rbs" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\events_normalcritical.rbs"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\Events_NormalCritical.rbs.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\events_normalcritical.rbs.ryk"), dwFlags=0x8) returned 0 Thread: id = 283 os_tid = 0x1468 [0123.753] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\Events_Realtime.rbs", dwFileAttributes=0x80) returned 0 [0123.754] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\Events_Realtime.rbs" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\events_realtime.rbs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.754] CloseHandle (hObject=0xffffffff) returned 1 [0123.754] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\Events_Realtime.rbs" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\events_realtime.rbs"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\Events_Realtime.rbs.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\events_realtime.rbs.ryk"), dwFlags=0x8) returned 0 Thread: id = 284 os_tid = 0x146c [0123.754] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\osver.txt", dwFileAttributes=0x80) returned 0 [0123.755] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\osver.txt" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\osver.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.755] CloseHandle (hObject=0xffffffff) returned 1 [0123.755] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\osver.txt" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\osver.txt"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\osver.txt.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\osver.txt.ryk"), dwFlags=0x8) returned 0 Thread: id = 285 os_tid = 0x1470 [0123.756] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\parse.dat", dwFileAttributes=0x80) returned 0 [0123.757] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\parse.dat" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\parse.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.757] CloseHandle (hObject=0xffffffff) returned 1 [0123.757] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\parse.dat" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\parse.dat"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\parse.dat.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\parse.dat.ryk"), dwFlags=0x8) returned 0 Thread: id = 286 os_tid = 0x1474 [0123.758] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml", dwFileAttributes=0x80) returned 0 [0123.758] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.758] CloseHandle (hObject=0xffffffff) returned 1 [0123.758] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml.ryk"), dwFlags=0x8) returned 0 Thread: id = 287 os_tid = 0x1478 [0123.759] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml", dwFileAttributes=0x80) returned 0 [0123.759] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.759] CloseHandle (hObject=0xffffffff) returned 1 [0123.759] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml.ryk"), dwFlags=0x8) returned 0 Thread: id = 288 os_tid = 0x147c [0123.760] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml", dwFileAttributes=0x80) returned 0 [0123.760] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.760] CloseHandle (hObject=0xffffffff) returned 1 [0123.760] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml.ryk"), dwFlags=0x8) returned 0 Thread: id = 289 os_tid = 0x1480 [0123.760] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml", dwFileAttributes=0x80) returned 0 [0123.760] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.760] CloseHandle (hObject=0xffffffff) returned 1 [0123.761] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml.ryk"), dwFlags=0x8) returned 0 Thread: id = 290 os_tid = 0x1484 [0123.763] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml", dwFileAttributes=0x80) returned 0 [0123.763] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.763] CloseHandle (hObject=0xffffffff) returned 1 [0123.763] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml.ryk"), dwFlags=0x8) returned 0 Thread: id = 291 os_tid = 0x1488 [0123.764] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml", dwFileAttributes=0x80) returned 0 [0123.764] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.764] CloseHandle (hObject=0xffffffff) returned 1 [0123.764] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml.ryk"), dwFlags=0x8) returned 0 Thread: id = 292 os_tid = 0x148c [0123.765] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml", dwFileAttributes=0x80) returned 0 [0123.765] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.765] CloseHandle (hObject=0xffffffff) returned 1 [0123.765] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml.ryk"), dwFlags=0x8) returned 0 Thread: id = 293 os_tid = 0x1490 [0123.765] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml", dwFileAttributes=0x80) returned 0 [0123.766] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.766] CloseHandle (hObject=0xffffffff) returned 1 [0123.766] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml.ryk"), dwFlags=0x8) returned 0 Thread: id = 294 os_tid = 0x1494 [0123.766] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml", dwFileAttributes=0x80) returned 0 [0123.766] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.766] CloseHandle (hObject=0xffffffff) returned 1 [0123.766] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml.ryk"), dwFlags=0x8) returned 0 Thread: id = 295 os_tid = 0x1498 [0123.767] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml", dwFileAttributes=0x80) returned 0 [0123.767] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.767] CloseHandle (hObject=0xffffffff) returned 1 [0123.767] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml.ryk"), dwFlags=0x8) returned 0 Thread: id = 296 os_tid = 0x149c [0123.768] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml", dwFileAttributes=0x80) returned 0 [0123.768] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.768] CloseHandle (hObject=0xffffffff) returned 1 [0123.768] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml.ryk"), dwFlags=0x8) returned 0 Thread: id = 297 os_tid = 0x14a0 [0123.769] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml", dwFileAttributes=0x80) returned 0 [0123.769] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.769] CloseHandle (hObject=0xffffffff) returned 1 [0123.769] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml.ryk"), dwFlags=0x8) returned 0 Thread: id = 298 os_tid = 0x14a4 [0123.770] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml", dwFileAttributes=0x80) returned 0 [0123.770] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.770] CloseHandle (hObject=0xffffffff) returned 1 [0123.770] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml.ryk"), dwFlags=0x8) returned 0 Thread: id = 299 os_tid = 0x14a8 [0123.771] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml", dwFileAttributes=0x80) returned 0 [0123.771] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.771] CloseHandle (hObject=0xffffffff) returned 1 [0123.771] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml.ryk"), dwFlags=0x8) returned 0 Thread: id = 300 os_tid = 0x14ac [0123.772] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml", dwFileAttributes=0x80) returned 0 [0123.772] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.772] CloseHandle (hObject=0xffffffff) returned 1 [0123.772] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml.ryk"), dwFlags=0x8) returned 0 Thread: id = 301 os_tid = 0x14b0 [0123.773] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml", dwFileAttributes=0x80) returned 0 [0123.773] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.773] CloseHandle (hObject=0xffffffff) returned 1 [0123.773] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml.ryk"), dwFlags=0x8) returned 0 Thread: id = 302 os_tid = 0x14b4 [0123.774] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml", dwFileAttributes=0x80) returned 0 [0123.774] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.774] CloseHandle (hObject=0xffffffff) returned 1 [0123.774] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml.ryk"), dwFlags=0x8) returned 0 Thread: id = 303 os_tid = 0x14b8 [0123.774] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml", dwFileAttributes=0x80) returned 0 [0123.774] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.774] CloseHandle (hObject=0xffffffff) returned 1 [0123.775] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\softlanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml.ryk"), dwFlags=0x8) returned 0 Thread: id = 304 os_tid = 0x14bc [0123.775] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\VortexSchemaRequests.dat", dwFileAttributes=0x80) returned 0 [0123.775] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\VortexSchemaRequests.dat" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\vortexschemarequests.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.775] CloseHandle (hObject=0xffffffff) returned 1 [0123.775] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\VortexSchemaRequests.dat" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\vortexschemarequests.dat"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Diagnosis\\VortexSchemaRequests.dat.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\diagnosis\\vortexschemarequests.dat.ryk"), dwFlags=0x8) returned 0 Thread: id = 307 os_tid = 0x14c8 [0124.335] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\MF\\Active.GRL", dwFileAttributes=0x80) returned 1 [0124.341] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\mf\\active.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0124.341] GetFileSizeEx (in: hFile=0x5f0, lpFileSize=0xa5eff10 | out: lpFileSize=0xa5eff10*=14972) returned 1 [0124.341] GetFileSizeEx (in: hFile=0x5f0, lpFileSize=0xa5eff50 | out: lpFileSize=0xa5eff50*=14972) returned 1 [0124.341] SetFilePointerEx (in: hFile=0x5f0, liDistanceToMove=0x395a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0124.341] ReadFile (in: hFile=0x5f0, lpBuffer=0xa5efed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa5eff40, lpOverlapped=0x0 | out: lpBuffer=0xa5efed4*, lpNumberOfBytesRead=0xa5eff40*=0x19, lpOverlapped=0x0) returned 1 [0124.345] SetFilePointer (in: hFile=0x5f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.345] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa5eff48 | out: phKey=0xa5eff48*=0x2f24880) returned 1 [0124.345] SetFilePointer (in: hFile=0x5f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.345] ReadFile (in: hFile=0x5f0, lpBuffer=0x43e0000, nNumberOfBytesToRead=0x3a7c, lpNumberOfBytesRead=0xa5eff28, lpOverlapped=0x0 | out: lpBuffer=0x43e0000*, lpNumberOfBytesRead=0xa5eff28*=0x3a7c, lpOverlapped=0x0) returned 1 [0124.347] CryptEncrypt (in: hKey=0x2f24880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa5eff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa5eff2c*=0xf4250) returned 1 [0124.348] CryptEncrypt (in: hKey=0x2f24880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x43e0000*, pdwDataLen=0xa5eff24*=0x3a7c, dwBufLen=0xf4250 | out: pbData=0x43e0000*, pdwDataLen=0xa5eff24*=0x3a80) returned 1 [0124.348] SetFilePointer (in: hFile=0x5f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.348] WriteFile (in: hFile=0x5f0, lpBuffer=0x43e0000*, nNumberOfBytesToWrite=0x3a80, lpNumberOfBytesWritten=0xa5eff28, lpOverlapped=0x0 | out: lpBuffer=0x43e0000*, lpNumberOfBytesWritten=0xa5eff28*=0x3a80, lpOverlapped=0x0) returned 1 [0124.348] WriteFile (in: hFile=0x5f0, lpBuffer=0xa5efef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa5eff18, lpOverlapped=0x0 | out: lpBuffer=0xa5efef0*, lpNumberOfBytesWritten=0xa5eff18*=0x6, lpOverlapped=0x0) returned 1 [0124.348] CryptExportKey (in: hKey=0x2f24880, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa5eff38 | out: pbData=0x0*, pdwDataLen=0xa5eff38*=0x10c) returned 1 [0124.348] CryptExportKey (in: hKey=0x2f24880, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa5efd98, pdwDataLen=0xa5eff38 | out: pbData=0xa5efd98*, pdwDataLen=0xa5eff38*=0x10c) returned 1 [0124.348] WriteFile (in: hFile=0x5f0, lpBuffer=0xa5efd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa5eff18, lpOverlapped=0x0 | out: lpBuffer=0xa5efd98*, lpNumberOfBytesWritten=0xa5eff18*=0x10c, lpOverlapped=0x0) returned 1 [0124.348] CloseHandle (hObject=0x5f0) returned 1 [0124.352] CryptDestroyKey (hKey=0x2f24880) returned 1 [0124.352] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\mf\\active.grl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\MF\\Active.GRL.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\mf\\active.grl.ryk"), dwFlags=0x8) returned 1 Thread: id = 308 os_tid = 0x14cc [0124.335] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\MF\\Pending.GRL", dwFileAttributes=0x80) returned 1 [0124.363] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\mf\\pending.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0124.367] GetFileSizeEx (in: hFile=0x5f0, lpFileSize=0xa92ff10 | out: lpFileSize=0xa92ff10*=14972) returned 1 [0124.367] GetFileSizeEx (in: hFile=0x5f0, lpFileSize=0xa92ff50 | out: lpFileSize=0xa92ff50*=14972) returned 1 [0124.367] SetFilePointerEx (in: hFile=0x5f0, liDistanceToMove=0x395a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0124.367] ReadFile (in: hFile=0x5f0, lpBuffer=0xa92fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xa92ff40, lpOverlapped=0x0 | out: lpBuffer=0xa92fed4*, lpNumberOfBytesRead=0xa92ff40*=0x19, lpOverlapped=0x0) returned 1 [0124.368] SetFilePointer (in: hFile=0x5f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.368] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xa92ff48 | out: phKey=0xa92ff48*=0x2f24880) returned 1 [0124.368] SetFilePointer (in: hFile=0x5f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.368] ReadFile (in: hFile=0x5f0, lpBuffer=0x44f0000, nNumberOfBytesToRead=0x3a7c, lpNumberOfBytesRead=0xa92ff28, lpOverlapped=0x0 | out: lpBuffer=0x44f0000*, lpNumberOfBytesRead=0xa92ff28*=0x3a7c, lpOverlapped=0x0) returned 1 [0124.371] CryptEncrypt (in: hKey=0x2f24880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xa92ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xa92ff2c*=0xf4250) returned 1 [0124.371] CryptEncrypt (in: hKey=0x2f24880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x44f0000*, pdwDataLen=0xa92ff24*=0x3a7c, dwBufLen=0xf4250 | out: pbData=0x44f0000*, pdwDataLen=0xa92ff24*=0x3a80) returned 1 [0124.371] SetFilePointer (in: hFile=0x5f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.371] WriteFile (in: hFile=0x5f0, lpBuffer=0x44f0000*, nNumberOfBytesToWrite=0x3a80, lpNumberOfBytesWritten=0xa92ff28, lpOverlapped=0x0 | out: lpBuffer=0x44f0000*, lpNumberOfBytesWritten=0xa92ff28*=0x3a80, lpOverlapped=0x0) returned 1 [0124.371] WriteFile (in: hFile=0x5f0, lpBuffer=0xa92fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xa92ff18, lpOverlapped=0x0 | out: lpBuffer=0xa92fef0*, lpNumberOfBytesWritten=0xa92ff18*=0x6, lpOverlapped=0x0) returned 1 [0124.371] CryptExportKey (in: hKey=0x2f24880, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xa92ff38 | out: pbData=0x0*, pdwDataLen=0xa92ff38*=0x10c) returned 1 [0124.371] CryptExportKey (in: hKey=0x2f24880, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xa92fd98, pdwDataLen=0xa92ff38 | out: pbData=0xa92fd98*, pdwDataLen=0xa92ff38*=0x10c) returned 1 [0124.371] WriteFile (in: hFile=0x5f0, lpBuffer=0xa92fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa92ff18, lpOverlapped=0x0 | out: lpBuffer=0xa92fd98*, lpNumberOfBytesWritten=0xa92ff18*=0x10c, lpOverlapped=0x0) returned 1 [0124.371] CloseHandle (hObject=0x5f0) returned 1 [0124.374] CryptDestroyKey (hKey=0x2f24880) returned 1 [0124.374] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\mf\\pending.grl"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\MF\\Pending.GRL.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\mf\\pending.grl.ryk"), dwFlags=0x8) returned 1 Thread: id = 309 os_tid = 0x14d0 [0124.335] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\edb.chk", dwFileAttributes=0x80) returned 1 [0124.344] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\edb.chk" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\downloader\\edb.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x868 [0124.346] GetFileSizeEx (in: hFile=0x868, lpFileSize=0xaa6ff10 | out: lpFileSize=0xaa6ff10*=8192) returned 1 [0124.346] GetFileSizeEx (in: hFile=0x868, lpFileSize=0xaa6ff50 | out: lpFileSize=0xaa6ff50*=8192) returned 1 [0124.346] SetFilePointerEx (in: hFile=0x868, liDistanceToMove=0x1ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0124.346] ReadFile (in: hFile=0x868, lpBuffer=0xaa6fed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xaa6ff40, lpOverlapped=0x0 | out: lpBuffer=0xaa6fed4*, lpNumberOfBytesRead=0xaa6ff40*=0x19, lpOverlapped=0x0) returned 1 [0124.356] SetFilePointer (in: hFile=0x868, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.356] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xaa6ff48 | out: phKey=0xaa6ff48*=0x2f24880) returned 1 [0124.356] SetFilePointer (in: hFile=0x868, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.356] ReadFile (in: hFile=0x868, lpBuffer=0x4710000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0xaa6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4710000*, lpNumberOfBytesRead=0xaa6ff28*=0x2000, lpOverlapped=0x0) returned 1 [0124.358] CryptEncrypt (in: hKey=0x2f24880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xaa6ff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xaa6ff2c*=0xf4250) returned 1 [0124.358] CryptEncrypt (in: hKey=0x2f24880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4710000*, pdwDataLen=0xaa6ff24*=0x2000, dwBufLen=0xf4250 | out: pbData=0x4710000*, pdwDataLen=0xaa6ff24*=0x2010) returned 1 [0124.358] SetFilePointer (in: hFile=0x868, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.359] WriteFile (in: hFile=0x868, lpBuffer=0x4710000*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0xaa6ff28, lpOverlapped=0x0 | out: lpBuffer=0x4710000*, lpNumberOfBytesWritten=0xaa6ff28*=0x2010, lpOverlapped=0x0) returned 1 [0124.359] WriteFile (in: hFile=0x868, lpBuffer=0xaa6fef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xaa6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaa6fef0*, lpNumberOfBytesWritten=0xaa6ff18*=0x6, lpOverlapped=0x0) returned 1 [0124.359] CryptExportKey (in: hKey=0x2f24880, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xaa6ff38 | out: pbData=0x0*, pdwDataLen=0xaa6ff38*=0x10c) returned 1 [0124.359] CryptExportKey (in: hKey=0x2f24880, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xaa6fd98, pdwDataLen=0xaa6ff38 | out: pbData=0xaa6fd98*, pdwDataLen=0xaa6ff38*=0x10c) returned 1 [0124.359] WriteFile (in: hFile=0x868, lpBuffer=0xaa6fd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaa6ff18, lpOverlapped=0x0 | out: lpBuffer=0xaa6fd98*, lpNumberOfBytesWritten=0xaa6ff18*=0x10c, lpOverlapped=0x0) returned 1 [0124.360] CloseHandle (hObject=0x868) returned 1 [0124.363] CryptDestroyKey (hKey=0x2f24880) returned 1 [0124.363] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\edb.chk" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\downloader\\edb.chk"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\edb.chk.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\downloader\\edb.chk.ryk"), dwFlags=0x8) returned 0 Thread: id = 310 os_tid = 0x14d4 [0124.336] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\edb.log", dwFileAttributes=0x80) returned 1 [0124.369] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\edb.log" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\downloader\\edb.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x868 [0124.369] GetFileSizeEx (in: hFile=0x868, lpFileSize=0xabaff10 | out: lpFileSize=0xabaff10*=1310720) returned 1 [0124.369] GetFileSizeEx (in: hFile=0x868, lpFileSize=0xabaff50 | out: lpFileSize=0xabaff50*=1310720) returned 1 [0124.369] SetFilePointerEx (in: hFile=0x868, liDistanceToMove=0x13fede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0124.369] ReadFile (in: hFile=0x868, lpBuffer=0xabafed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xabaff40, lpOverlapped=0x0 | out: lpBuffer=0xabafed4*, lpNumberOfBytesRead=0xabaff40*=0x19, lpOverlapped=0x0) returned 1 [0124.375] SetFilePointer (in: hFile=0x868, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.377] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xabaff48 | out: phKey=0xabaff48*=0x2f24880) returned 1 [0124.377] SetFilePointer (in: hFile=0x868, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.377] ReadFile (in: hFile=0x868, lpBuffer=0x4820000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xabaff28, lpOverlapped=0x0 | out: lpBuffer=0x4820000*, lpNumberOfBytesRead=0xabaff28*=0xf4240, lpOverlapped=0x0) returned 1 [0124.387] CryptEncrypt (in: hKey=0x2f24880, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xabaff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xabaff2c*=0xf4240) returned 1 [0124.387] CryptEncrypt (in: hKey=0x2f24880, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4820000*, pdwDataLen=0xabaff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4820000*, pdwDataLen=0xabaff24*=0xf4240) returned 1 [0124.388] SetFilePointer (in: hFile=0x868, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.388] WriteFile (in: hFile=0x868, lpBuffer=0x4820000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xabaff28, lpOverlapped=0x0 | out: lpBuffer=0x4820000*, lpNumberOfBytesWritten=0xabaff28*=0xf4240, lpOverlapped=0x0) returned 1 [0124.391] SetFilePointer (in: hFile=0x868, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0124.391] ReadFile (in: hFile=0x868, lpBuffer=0x4820000, nNumberOfBytesToRead=0x4bdc0, lpNumberOfBytesRead=0xabaff28, lpOverlapped=0x0 | out: lpBuffer=0x4820000*, lpNumberOfBytesRead=0xabaff28*=0x4bdc0, lpOverlapped=0x0) returned 1 [0124.394] CryptEncrypt (in: hKey=0x2f24880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xabaff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xabaff2c*=0xf4250) returned 1 [0124.394] CryptEncrypt (in: hKey=0x2f24880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4820000*, pdwDataLen=0xabaff24*=0x4bdc0, dwBufLen=0xf4250 | out: pbData=0x4820000*, pdwDataLen=0xabaff24*=0x4bdd0) returned 1 [0124.394] SetFilePointer (in: hFile=0x868, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0124.394] WriteFile (in: hFile=0x868, lpBuffer=0x4820000*, nNumberOfBytesToWrite=0x4bdd0, lpNumberOfBytesWritten=0xabaff28, lpOverlapped=0x0 | out: lpBuffer=0x4820000*, lpNumberOfBytesWritten=0xabaff28*=0x4bdd0, lpOverlapped=0x0) returned 1 [0124.396] WriteFile (in: hFile=0x868, lpBuffer=0xabafef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xabaff18, lpOverlapped=0x0 | out: lpBuffer=0xabafef0*, lpNumberOfBytesWritten=0xabaff18*=0x6, lpOverlapped=0x0) returned 1 [0124.396] CryptExportKey (in: hKey=0x2f24880, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xabaff38 | out: pbData=0x0*, pdwDataLen=0xabaff38*=0x10c) returned 1 [0124.396] CryptExportKey (in: hKey=0x2f24880, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xabafd98, pdwDataLen=0xabaff38 | out: pbData=0xabafd98*, pdwDataLen=0xabaff38*=0x10c) returned 1 [0124.396] WriteFile (in: hFile=0x868, lpBuffer=0xabafd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xabaff18, lpOverlapped=0x0 | out: lpBuffer=0xabafd98*, lpNumberOfBytesWritten=0xabaff18*=0x10c, lpOverlapped=0x0) returned 1 [0124.396] CloseHandle (hObject=0x868) returned 1 [0124.902] CryptDestroyKey (hKey=0x2f24880) returned 1 [0124.902] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\edb.log" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\downloader\\edb.log"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\edb.log.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\downloader\\edb.log.ryk"), dwFlags=0x8) returned 0 Thread: id = 311 os_tid = 0x14d8 [0124.336] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\edbres00001.jrs", dwFileAttributes=0x80) returned 0 [0124.336] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\edbres00001.jrs" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\downloader\\edbres00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.336] CloseHandle (hObject=0xffffffff) returned 1 [0124.336] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\edbres00001.jrs" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\downloader\\edbres00001.jrs"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\edbres00001.jrs.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\downloader\\edbres00001.jrs.ryk"), dwFlags=0x8) returned 0 Thread: id = 312 os_tid = 0x14dc [0124.337] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\edbres00002.jrs", dwFileAttributes=0x80) returned 0 [0124.337] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\edbres00002.jrs" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\downloader\\edbres00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.337] CloseHandle (hObject=0xffffffff) returned 1 [0124.337] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\edbres00002.jrs" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\downloader\\edbres00002.jrs"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\edbres00002.jrs.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\downloader\\edbres00002.jrs.ryk"), dwFlags=0x8) returned 0 Thread: id = 313 os_tid = 0x14e0 [0124.337] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\edbtmp.log", dwFileAttributes=0x80) returned 0 [0124.338] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\edbtmp.log" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\downloader\\edbtmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.338] CloseHandle (hObject=0xffffffff) returned 1 [0124.338] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\edbtmp.log" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\downloader\\edbtmp.log"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\edbtmp.log.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\downloader\\edbtmp.log.ryk"), dwFlags=0x8) returned 0 Thread: id = 314 os_tid = 0x14e4 [0124.338] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\qmgr.db", dwFileAttributes=0x80) returned 1 [0124.391] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\qmgr.db" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\downloader\\qmgr.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0124.392] GetFileSizeEx (in: hFile=0x5f0, lpFileSize=0xb0aff10 | out: lpFileSize=0xb0aff10*=1310720) returned 1 [0124.410] GetFileSizeEx (in: hFile=0x5f0, lpFileSize=0xb0aff50 | out: lpFileSize=0xb0aff50*=1310720) returned 1 [0124.410] SetFilePointerEx (in: hFile=0x5f0, liDistanceToMove=0x13fede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0124.410] ReadFile (in: hFile=0x5f0, lpBuffer=0xb0afed4, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xb0aff40, lpOverlapped=0x0 | out: lpBuffer=0xb0afed4*, lpNumberOfBytesRead=0xb0aff40*=0x19, lpOverlapped=0x0) returned 1 [0124.412] SetFilePointer (in: hFile=0x5f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.412] CryptGenKey (in: hProv=0x265f4d8, Algid=0x6610, dwFlags=0x1, phKey=0xb0aff48 | out: phKey=0xb0aff48*=0x2f24900) returned 1 [0124.412] SetFilePointer (in: hFile=0x5f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.412] ReadFile (in: hFile=0x5f0, lpBuffer=0x4c60000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xb0aff28, lpOverlapped=0x0 | out: lpBuffer=0x4c60000*, lpNumberOfBytesRead=0xb0aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0124.422] CryptEncrypt (in: hKey=0x2f24900, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb0aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb0aff2c*=0xf4240) returned 1 [0124.422] CryptEncrypt (in: hKey=0x2f24900, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x4c60000*, pdwDataLen=0xb0aff24*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x4c60000*, pdwDataLen=0xb0aff24*=0xf4240) returned 1 [0124.423] SetFilePointer (in: hFile=0x5f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.424] WriteFile (in: hFile=0x5f0, lpBuffer=0x4c60000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xb0aff28, lpOverlapped=0x0 | out: lpBuffer=0x4c60000*, lpNumberOfBytesWritten=0xb0aff28*=0xf4240, lpOverlapped=0x0) returned 1 [0124.426] SetFilePointer (in: hFile=0x5f0, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0124.426] ReadFile (in: hFile=0x5f0, lpBuffer=0x4c60000, nNumberOfBytesToRead=0x4bdc0, lpNumberOfBytesRead=0xb0aff28, lpOverlapped=0x0 | out: lpBuffer=0x4c60000*, lpNumberOfBytesRead=0xb0aff28*=0x4bdc0, lpOverlapped=0x0) returned 1 [0124.428] CryptEncrypt (in: hKey=0x2f24900, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xb0aff2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xb0aff2c*=0xf4250) returned 1 [0124.428] CryptEncrypt (in: hKey=0x2f24900, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x4c60000*, pdwDataLen=0xb0aff24*=0x4bdc0, dwBufLen=0xf4250 | out: pbData=0x4c60000*, pdwDataLen=0xb0aff24*=0x4bdd0) returned 1 [0124.428] SetFilePointer (in: hFile=0x5f0, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240 [0124.428] WriteFile (in: hFile=0x5f0, lpBuffer=0x4c60000*, nNumberOfBytesToWrite=0x4bdd0, lpNumberOfBytesWritten=0xb0aff28, lpOverlapped=0x0 | out: lpBuffer=0x4c60000*, lpNumberOfBytesWritten=0xb0aff28*=0x4bdd0, lpOverlapped=0x0) returned 1 [0124.430] WriteFile (in: hFile=0x5f0, lpBuffer=0xb0afef0*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xb0aff18, lpOverlapped=0x0 | out: lpBuffer=0xb0afef0*, lpNumberOfBytesWritten=0xb0aff18*=0x6, lpOverlapped=0x0) returned 1 [0124.430] CryptExportKey (in: hKey=0x2f24900, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xb0aff38 | out: pbData=0x0*, pdwDataLen=0xb0aff38*=0x10c) returned 1 [0124.430] CryptExportKey (in: hKey=0x2f24900, hExpKey=0x763c58, dwBlobType=0x1, dwFlags=0x0, pbData=0xb0afd98, pdwDataLen=0xb0aff38 | out: pbData=0xb0afd98*, pdwDataLen=0xb0aff38*=0x10c) returned 1 [0124.430] WriteFile (in: hFile=0x5f0, lpBuffer=0xb0afd98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb0aff18, lpOverlapped=0x0 | out: lpBuffer=0xb0afd98*, lpNumberOfBytesWritten=0xb0aff18*=0x10c, lpOverlapped=0x0) returned 1 [0124.430] CloseHandle (hObject=0x5f0) returned 1 [0124.451] CryptDestroyKey (hKey=0x2f24900) returned 1 [0124.451] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\qmgr.db" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\downloader\\qmgr.db"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\qmgr.db.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\downloader\\qmgr.db.ryk"), dwFlags=0x8) returned 0 Thread: id = 315 os_tid = 0x14e8 [0124.339] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\qmgr.jfm", dwFileAttributes=0x80) returned 0 [0124.339] CreateFileW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\qmgr.jfm" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\downloader\\qmgr.jfm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.339] CloseHandle (hObject=0xffffffff) returned 1 [0124.339] MoveFileExW (lpExistingFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\qmgr.jfm" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\downloader\\qmgr.jfm"), lpNewFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Network\\Downloader\\qmgr.jfm.RYK" (normalized: "c:\\documents and settings\\all users\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\application data\\microsoft\\network\\downloader\\qmgr.jfm.ryk"), dwFlags=0x8) returned 0 Thread: id = 319 os_tid = 0x14f8 [0124.905] SetFileAttributesW (lpFileName="C:\\Documents and Settings\\All Users\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Application Data\\Microsoft\\Office\\ClickToRunPackageLocker", dwFileAttributes=0x80) Process: id = "2" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x4baba000" os_pid = "0x590" os_integrity_level = "0x4000" os_privileges = "0x260814080" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0x244" cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k appmodel" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EntAppSvc" [0xa], "NT SERVICE\\StateRepository" [0xe], "NT SERVICE\\tiledatamodelsvc" [0xa], "NT SERVICE\\WalletService" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000f160" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 10 os_tid = 0x1168 Thread: id = 11 os_tid = 0x1164 Thread: id = 12 os_tid = 0x115c Thread: id = 13 os_tid = 0xa7c Thread: id = 14 os_tid = 0x9a0 Thread: id = 15 os_tid = 0x99c Thread: id = 16 os_tid = 0x98c Thread: id = 17 os_tid = 0x674 Thread: id = 18 os_tid = 0x66c Thread: id = 19 os_tid = 0x5e8 Thread: id = 20 os_tid = 0x5e4 Thread: id = 21 os_tid = 0x5e0 Thread: id = 22 os_tid = 0x594 Process: id = "3" image_name = "sccawbeqylan.exe" filename = "c:\\users\\fd1hvy\\desktop\\sccawbeqylan.exe" page_root = "0x1c431000" os_pid = "0xd8c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13a8" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\SCcawBEQYlan.exe\" 8 LAN" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 23 os_tid = 0x58 [0092.483] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0092.484] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x74d70000 [0092.485] GetProcAddress (hModule=0x74d70000, lpProcName="InitializeCriticalSectionEx") returned 0x74e67060 [0092.485] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x74d70000 [0092.485] GetProcAddress (hModule=0x74d70000, lpProcName="FlsAlloc") returned 0x74e6bea0 [0092.485] GetProcAddress (hModule=0x74d70000, lpProcName="FlsSetValue") returned 0x74e62550 [0092.486] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x74d70000 [0092.486] GetProcAddress (hModule=0x74d70000, lpProcName="InitializeCriticalSectionEx") returned 0x74e67060 [0092.487] GetProcessHeap () returned 0x760000 [0092.487] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x74d70000 [0092.487] GetProcAddress (hModule=0x74d70000, lpProcName="FlsAlloc") returned 0x74e6bea0 [0092.487] GetLastError () returned 0xcb [0092.487] GetProcAddress (hModule=0x74d70000, lpProcName="FlsGetValue") returned 0x74e570c0 [0092.487] GetProcAddress (hModule=0x74d70000, lpProcName="FlsSetValue") returned 0x74e62550 [0092.488] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x364) returned 0x78a918 [0092.488] SetLastError (dwErrCode=0xcb) [0092.488] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xe00) returned 0x78ac88 [0092.667] GetStartupInfoW (in: lpStartupInfo=0x19fe9c | out: lpStartupInfo=0x19fe9c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\SCcawBEQYlan.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0092.667] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0092.667] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0092.667] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0092.667] GetCommandLineA () returned="\"C:\\Users\\FD1HVy\\Desktop\\SCcawBEQYlan.exe\" 8 LAN" [0092.667] GetCommandLineW () returned="\"C:\\Users\\FD1HVy\\Desktop\\SCcawBEQYlan.exe\" 8 LAN" [0092.667] GetACP () returned 0x4e4 [0092.667] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x220) returned 0x7730f0 [0092.667] IsValidCodePage (CodePage=0x4e4) returned 1 [0092.667] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19febc | out: lpCPInfo=0x19febc) returned 1 [0092.667] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19f784 | out: lpCPInfo=0x19f784) returned 1 [0092.668] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0092.668] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x19f528, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿỂ㔈Ā") returned 256 [0092.668] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿỂ㔈Ā", cchSrc=256, lpCharType=0x19f798 | out: lpCharType=0x19f798) returned 1 [0092.668] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0092.668] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x19f4d8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0092.668] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x74d70000 [0092.668] GetProcAddress (hModule=0x74d70000, lpProcName="LCMapStringEx") returned 0x74e4ed00 [0092.668] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0092.668] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x19f2c8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0092.668] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x19fc98, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ)ÍþRÔþ\x19", lpUsedDefaultChar=0x0) returned 256 [0092.668] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0092.668] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x19f4f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ흹㔇Ā") returned 256 [0092.668] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ흹㔇Ā", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0092.668] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ흹㔇Ā", cchSrc=256, lpDestStr=0x19f2e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0092.668] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x19fb98, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ)ÍþRÔþ\x19", lpUsedDefaultChar=0x0) returned 256 [0092.668] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x80) returned 0x770cd8 [0092.668] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x19fce0, nSize=0x105 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\SCcawBEQYlan.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\sccawbeqylan.exe")) returned 0x28 [0092.668] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x73b80000 [0092.669] GetProcAddress (hModule=0x73b80000, lpProcName="AreFileApisANSI") returned 0x73b94280 [0092.669] AreFileApisANSI () returned 1 [0092.669] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\SCcawBEQYlan.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0092.669] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\SCcawBEQYlan.exe", cchWideChar=-1, lpMultiByteStr=0x350c3940, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\Desktop\\SCcawBEQYlan.exe", lpUsedDefaultChar=0x0) returned 41 [0092.669] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x3f) returned 0x772030 [0092.669] RtlInitializeSListHead (in: ListHead=0x350c3870 | out: ListHead=0x350c3870) [0092.669] GetLastError () returned 0x0 [0092.669] SetLastError (dwErrCode=0x0) [0092.669] GetEnvironmentStringsW () returned 0x78ba90* [0092.669] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0092.669] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x565) returned 0x788ae0 [0092.669] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x788ae0, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0092.669] FreeEnvironmentStringsW (penv=0x78ba90) returned 1 [0092.669] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x94) returned 0x771838 [0092.669] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x1f) returned 0x784648 [0092.669] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x28) returned 0x77c990 [0092.669] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x37) returned 0x782328 [0092.669] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x3c) returned 0x772150 [0092.669] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x31) returned 0x782468 [0092.669] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x14) returned 0x77b9f8 [0092.669] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x24) returned 0x77c9f0 [0092.669] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xd) returned 0x7897d8 [0092.669] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x17) returned 0x77bbb8 [0092.669] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x2b) returned 0x772860 [0092.669] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x15) returned 0x77bbd8 [0092.669] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x17) returned 0x77bbf8 [0092.669] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x22) returned 0x77c720 [0092.669] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xe) returned 0x7896d0 [0092.669] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xc1) returned 0x76fba0 [0092.670] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x3e) returned 0x771da8 [0092.670] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x1b) returned 0x784aa8 [0092.670] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x1d) returned 0x784620 [0092.670] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x48) returned 0x778220 [0092.670] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x12) returned 0x77bb78 [0092.670] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x18) returned 0x77b958 [0092.670] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x1b) returned 0x7849b8 [0092.670] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x24) returned 0x77c750 [0092.670] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x29) returned 0x772898 [0092.670] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x1e) returned 0x784a08 [0092.670] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x6b) returned 0x772f90 [0092.670] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x17) returned 0x77bc18 [0092.670] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xf) returned 0x789760 [0092.670] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x16) returned 0x77ba38 [0092.670] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x28) returned 0x77ca20 [0092.670] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x27) returned 0x77c780 [0092.670] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x12) returned 0x77b978 [0092.670] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x21) returned 0x77c960 [0092.670] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x10) returned 0x789628 [0092.670] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x1c) returned 0x7847b0 [0092.670] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x12) returned 0x77ba58 [0092.670] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x788ae0 | out: hHeap=0x760000) returned 1 [0092.670] GetModuleHandleW (lpModuleName="api-ms-win-core-synch-l1-2-0.dll") returned 0x74d70000 [0092.670] GetProcAddress (hModule=0x74d70000, lpProcName="SleepConditionVariableCS") returned 0x74edfca0 [0092.670] GetProcAddress (hModule=0x74d70000, lpProcName="WakeAllConditionVariable") returned 0x76f28a90 [0092.670] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x800) returned 0x788ae0 [0092.671] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0092.671] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x35063e92) returned 0x0 [0092.671] GetStartupInfoW (in: lpStartupInfo=0x19ff00 | out: lpStartupInfo=0x19ff00*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\SCcawBEQYlan.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0092.671] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x3bd8) returned 0x78bed8 [0092.671] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x5c) returned 0x766788 [0092.671] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0xc0) returned 0x76f7d8 [0092.671] FtpSetCurrentDirectoryA (hConnect=0x350c2a70, lpszDirectory=0x0) returned 0 [0092.672] wglShareLists () returned 0x0 [0092.672] GetFocus () returned 0x0 [0092.673] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0092.673] GetFocus () returned 0x0 [0092.673] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0092.673] GetFocus () returned 0x0 [0092.673] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0092.673] GetFocus () returned 0x0 [0092.673] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0092.673] GetFocus () returned 0x0 [0092.674] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0092.674] GetFocus () returned 0x0 [0092.674] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0092.674] GetFocus () returned 0x0 [0092.674] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0092.674] GetFocus () returned 0x0 [0092.674] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0092.674] GetFocus () returned 0x0 [0092.674] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0092.674] GetFocus () returned 0x0 [0092.674] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0092.674] GetFocus () returned 0x0 [0092.674] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0092.674] GetFocus () returned 0x0 [0092.674] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0092.674] GetFocus () returned 0x0 [0092.674] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0092.674] GetFocus () returned 0x0 [0092.674] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0092.674] GetFocus () returned 0x0 [0092.674] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0092.674] GetFocus () returned 0x0 [0092.674] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0092.674] GetFocus () returned 0x0 [0092.674] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0092.674] GetFocus () returned 0x0 [0092.674] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0092.675] SetFocus (hWnd=0x0) returned 0x0 [0092.675] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.675] SetFocus (hWnd=0x0) returned 0x0 [0092.675] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.675] SetFocus (hWnd=0x0) returned 0x0 [0092.675] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.675] SetFocus (hWnd=0x0) returned 0x0 [0092.675] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.675] SetFocus (hWnd=0x0) returned 0x0 [0092.675] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.675] SetFocus (hWnd=0x0) returned 0x0 [0092.675] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.675] SetFocus (hWnd=0x0) returned 0x0 [0092.675] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.675] SetFocus (hWnd=0x0) returned 0x0 [0092.675] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.675] SetFocus (hWnd=0x0) returned 0x0 [0092.675] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.676] SetFocus (hWnd=0x0) returned 0x0 [0092.676] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.676] SetFocus (hWnd=0x0) returned 0x0 [0092.676] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.676] SetFocus (hWnd=0x0) returned 0x0 [0092.676] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.676] SetFocus (hWnd=0x0) returned 0x0 [0092.676] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.676] SetFocus (hWnd=0x0) returned 0x0 [0092.676] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.676] SetFocus (hWnd=0x0) returned 0x0 [0092.676] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.676] SetFocus (hWnd=0x0) returned 0x0 [0092.676] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.676] SetFocus (hWnd=0x0) returned 0x0 [0092.676] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.676] SetFocus (hWnd=0x0) returned 0x0 [0092.676] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.676] SetFocus (hWnd=0x0) returned 0x0 [0092.676] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.676] SetFocus (hWnd=0x0) returned 0x0 [0092.676] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.676] SetFocus (hWnd=0x0) returned 0x0 [0092.676] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.676] SetFocus (hWnd=0x0) returned 0x0 [0092.677] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.677] SetFocus (hWnd=0x0) returned 0x0 [0092.677] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.677] SetFocus (hWnd=0x0) returned 0x0 [0092.677] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.677] SetFocus (hWnd=0x0) returned 0x0 [0092.677] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.677] SetFocus (hWnd=0x0) returned 0x0 [0092.677] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.677] SetFocus (hWnd=0x0) returned 0x0 [0092.677] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.677] SetFocus (hWnd=0x0) returned 0x0 [0092.677] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.677] SetFocus (hWnd=0x0) returned 0x0 [0092.677] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.677] SetFocus (hWnd=0x0) returned 0x0 [0092.677] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.677] SetFocus (hWnd=0x0) returned 0x0 [0092.677] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.677] SetFocus (hWnd=0x0) returned 0x0 [0092.677] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.677] SetFocus (hWnd=0x0) returned 0x0 [0092.677] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.677] SetFocus (hWnd=0x0) returned 0x0 [0092.677] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.677] SetFocus (hWnd=0x0) returned 0x0 [0092.677] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0092.678] GetLastError () returned 0x578 [0092.678] GetStockObject (i=1) returned 0x900014 [0092.678] NetGetJoinInformation (in: lpServer=0x0, lpNameBuffer=0x19fc68, BufferType=0x19fc70 | out: lpNameBuffer=0x19fc68*="WORKGROUP", BufferType=0x19fc70) returned 0x0 [0092.816] NetApiBufferFree (Buffer=0x77c870) returned 0x0 [0092.816] CreateHalftonePalette (hdc=0x0) returned 0x580807c1 [0092.817] SelectPalette (hdc=0x0, hPal=0x0, bForceBkgd=0) returned 0x0 [0092.817] RealizePalette (hdc=0x0) returned 0xffffffff [0092.817] DeleteObject (ho=0x0) returned 0 [0092.817] QuerySecurityPackageInfoW (in: pPackageName=0x350a9f90, ppPackageInfo=0x19fc6c | out: ppPackageInfo=0x19fc6c) returned 0x0 [0092.830] AcquireCredentialsHandleW (in: pPrincipal=0x0, pPackage=0x350a9f9c, fCredentialUse=0x2, pvLogonId=0x0, pAuthData=0x0, pGetKeyFn=0x0, pvGetKeyArgument=0x0, phCredential=0x19fc7c, ptsExpiry=0x19fc74 | out: phCredential=0x19fc7c, ptsExpiry=0x19fc74) returned 0x0 [0092.831] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0xb48) returned 0x7958c8 [0092.831] SetLayout (hdc=0x1, l=0x1) returned 0xffffffff [0092.831] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName="lll") returned 0x2d8 [0092.831] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x8) returned 0x792090 [0092.831] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x20) returned 0x784a80 [0092.832] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x10) returned 0x789850 [0092.832] SetTextJustification (hdc=0x0, extra=0, count=0) returned 0 [0092.832] GetCursorPos (in: lpPoint=0x19f990 | out: lpPoint=0x19f990*(x=286, y=695)) returned 1 [0092.832] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0092.832] GetCursorPos (in: lpPoint=0x19f9c8 | out: lpPoint=0x19f9c8*(x=286, y=695)) returned 1 [0092.832] FindResourceExA (hModule=0x35000000, lpType="CODE", lpName="MYCODE", wLanguage=0x0) returned 0x0 [0092.832] PdhAddCounterW (in: hQuery=0x0, szFullCounterPath=0x0, dwUserData=0x0, phCounter=0x19f9a8 | out: phCounter=0x19f9a8) returned 0xc0000bbd [0092.832] GetMenuCheckMarkDimensions () returned 983055 [0092.832] GetCursorPos (in: lpPoint=0x350c34e4 | out: lpPoint=0x350c34e4*(x=286, y=695)) returned 1 [0092.832] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0x12b) returned 0x102 [0093.135] TrackPopupMenuEx (param_1=0x0, param_2=0x40, param_3=286, param_4=695, param_5=0x0, param_6=0x0) returned 0 [0093.135] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0093.135] GetCursorPos (in: lpPoint=0x19f9c8 | out: lpPoint=0x19f9c8*(x=286, y=695)) returned 1 [0093.135] FindResourceExA (hModule=0x35000000, lpType="CODE", lpName="MYCODE", wLanguage=0x0) returned 0x0 [0093.135] PdhAddCounterW (in: hQuery=0x0, szFullCounterPath=0x0, dwUserData=0x0, phCounter=0x19f9a8 | out: phCounter=0x19f9a8) returned 0xc0000bbd [0093.135] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.135] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.135] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.135] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.136] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.136] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.136] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.136] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.136] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.136] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.136] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.136] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.136] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.136] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.136] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.136] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.136] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.136] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.136] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.136] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.136] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.136] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.136] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.136] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.136] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.136] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.136] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.136] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.136] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.136] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.136] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.137] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.137] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.137] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.137] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.137] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.137] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.137] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.137] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.137] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.137] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.137] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.137] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.137] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.137] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.137] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.137] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.137] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.137] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.137] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.137] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.137] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.137] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.137] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.137] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.137] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.137] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.137] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.137] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.138] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.138] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.138] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.138] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.138] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.138] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.138] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.138] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.138] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.138] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.138] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.138] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.138] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.138] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.138] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.138] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.138] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.138] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.138] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.138] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.138] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.138] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.138] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.138] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.138] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.138] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.138] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.138] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.138] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.139] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.139] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.139] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.139] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.139] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.139] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.139] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.139] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.139] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.139] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.139] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.139] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.139] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.139] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.139] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.139] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.139] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.139] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.139] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.139] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.139] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.139] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.139] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.139] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.139] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.139] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.139] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.139] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.140] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.140] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.140] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.140] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.140] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.140] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.140] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.140] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.140] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.140] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.140] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.140] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.140] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.140] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.140] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.140] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.140] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.140] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.140] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.140] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.140] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.140] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.140] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.140] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.140] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.140] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.140] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.140] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.141] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.141] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.141] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.141] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.141] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.141] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.141] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.141] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.141] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.141] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.141] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.141] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.141] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0093.141] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0093.141] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x789850 | out: hHeap=0x760000) returned 1 [0093.141] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x784a80 | out: hHeap=0x760000) returned 1 [0093.141] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792090 | out: hHeap=0x760000) returned 1 [0093.141] FillConsoleOutputCharacterA (in: hConsoleOutput=0x0, cCharacter=32, nLength=0x0, dwWriteCoord=0x0, lpNumberOfCharsWritten=0x19f9a8 | out: lpNumberOfCharsWritten=0x19f9a8) returned 0 [0093.141] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792000 [0093.141] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792050 [0093.141] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792000 | out: hHeap=0x760000) returned 1 [0093.141] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792110 [0093.141] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792050 | out: hHeap=0x760000) returned 1 [0093.141] GetFocus () returned 0x0 [0093.141] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.141] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.142] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.142] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792060 [0093.142] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792110 [0093.142] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792060 | out: hHeap=0x760000) returned 1 [0093.142] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791fb0 [0093.142] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.142] GetFocus () returned 0x0 [0093.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.143] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fb0 | out: hHeap=0x760000) returned 1 [0093.143] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791ff0 [0093.143] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x791fc0 [0093.143] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791ff0 | out: hHeap=0x760000) returned 1 [0093.143] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791f80 [0093.143] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fc0 | out: hHeap=0x760000) returned 1 [0093.143] GetFocus () returned 0x0 [0093.143] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.143] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.143] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.143] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.143] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.143] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.143] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.143] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.143] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.143] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791f80 | out: hHeap=0x760000) returned 1 [0093.143] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791fa0 [0093.143] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x791f80 [0093.143] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fa0 | out: hHeap=0x760000) returned 1 [0093.143] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792080 [0093.143] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791f80 | out: hHeap=0x760000) returned 1 [0093.143] GetFocus () returned 0x0 [0093.143] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.143] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.143] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.144] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.144] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.144] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.144] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.144] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.144] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.144] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792080 | out: hHeap=0x760000) returned 1 [0093.144] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x7920a0 [0093.144] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792110 [0093.144] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7920a0 | out: hHeap=0x760000) returned 1 [0093.144] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791fd0 [0093.144] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.144] GetFocus () returned 0x0 [0093.146] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.146] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.146] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.146] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.146] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.146] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.146] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.146] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.146] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.146] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fd0 | out: hHeap=0x760000) returned 1 [0093.146] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791f80 [0093.146] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792030 [0093.146] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791f80 | out: hHeap=0x760000) returned 1 [0093.146] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791ff0 [0093.146] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792030 | out: hHeap=0x760000) returned 1 [0093.146] GetFocus () returned 0x0 [0093.146] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.146] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.147] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.147] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.147] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.147] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.147] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.147] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.147] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.147] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791ff0 | out: hHeap=0x760000) returned 1 [0093.147] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791fa0 [0093.147] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792110 [0093.147] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fa0 | out: hHeap=0x760000) returned 1 [0093.147] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792120 [0093.147] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.147] GetFocus () returned 0x0 [0093.147] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.147] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.147] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.147] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.147] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.147] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.147] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.147] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.148] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.148] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792120 | out: hHeap=0x760000) returned 1 [0093.148] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792030 [0093.148] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792120 [0093.148] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792030 | out: hHeap=0x760000) returned 1 [0093.148] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791fd0 [0093.148] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792120 | out: hHeap=0x760000) returned 1 [0093.148] GetFocus () returned 0x0 [0093.148] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.148] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.148] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.148] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.148] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.148] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.148] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.148] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.148] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.148] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fd0 | out: hHeap=0x760000) returned 1 [0093.148] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792110 [0093.148] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792120 [0093.148] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.148] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x7920a0 [0093.148] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792120 | out: hHeap=0x760000) returned 1 [0093.148] GetFocus () returned 0x0 [0093.148] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.149] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.149] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.149] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.149] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.149] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.149] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.149] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.149] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.149] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7920a0 | out: hHeap=0x760000) returned 1 [0093.149] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792110 [0093.149] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x7920a0 [0093.149] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.149] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792090 [0093.149] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7920a0 | out: hHeap=0x760000) returned 1 [0093.149] GetFocus () returned 0x0 [0093.149] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.149] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.149] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.149] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.149] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.149] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.149] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.149] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.150] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.150] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792090 | out: hHeap=0x760000) returned 1 [0093.150] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792120 [0093.150] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792080 [0093.150] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792120 | out: hHeap=0x760000) returned 1 [0093.150] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792110 [0093.150] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792080 | out: hHeap=0x760000) returned 1 [0093.150] GetFocus () returned 0x0 [0093.150] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.150] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.150] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.150] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.150] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.150] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.150] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.150] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.150] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.150] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.150] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792120 [0093.150] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x791f80 [0093.150] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792120 | out: hHeap=0x760000) returned 1 [0093.150] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791fa0 [0093.151] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791f80 | out: hHeap=0x760000) returned 1 [0093.151] GetFocus () returned 0x0 [0093.151] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.151] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.151] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.151] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.151] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.151] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.151] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.151] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.151] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.151] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fa0 | out: hHeap=0x760000) returned 1 [0093.151] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792080 [0093.151] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792130 [0093.152] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792080 | out: hHeap=0x760000) returned 1 [0093.152] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792110 [0093.152] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792130 | out: hHeap=0x760000) returned 1 [0093.152] GetFocus () returned 0x0 [0093.152] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.152] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.152] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.152] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.152] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.152] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.152] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.152] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.152] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.152] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.152] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791fa0 [0093.152] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792130 [0093.152] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fa0 | out: hHeap=0x760000) returned 1 [0093.152] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792110 [0093.152] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792130 | out: hHeap=0x760000) returned 1 [0093.152] GetFocus () returned 0x0 [0093.152] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.152] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.152] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.152] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.153] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.153] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.153] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.153] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.153] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.153] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.153] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792080 [0093.153] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x7920a0 [0093.153] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792080 | out: hHeap=0x760000) returned 1 [0093.153] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791fc0 [0093.153] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7920a0 | out: hHeap=0x760000) returned 1 [0093.153] GetFocus () returned 0x0 [0093.153] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.153] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.153] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.153] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.153] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.153] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.153] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.153] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.153] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.153] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fc0 | out: hHeap=0x760000) returned 1 [0093.153] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792110 [0093.153] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792120 [0093.153] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.154] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791f80 [0093.154] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792120 | out: hHeap=0x760000) returned 1 [0093.154] GetFocus () returned 0x0 [0093.154] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.154] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.154] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.154] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.154] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.154] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.154] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.154] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.154] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.154] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791f80 | out: hHeap=0x760000) returned 1 [0093.154] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792040 [0093.154] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792000 [0093.154] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792040 | out: hHeap=0x760000) returned 1 [0093.154] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792010 [0093.154] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792000 | out: hHeap=0x760000) returned 1 [0093.154] GetFocus () returned 0x0 [0093.154] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.154] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.154] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.154] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.154] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.155] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.155] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.155] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.155] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.155] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792010 | out: hHeap=0x760000) returned 1 [0093.155] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791fd0 [0093.155] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x791ff0 [0093.155] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fd0 | out: hHeap=0x760000) returned 1 [0093.155] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792010 [0093.155] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791ff0 | out: hHeap=0x760000) returned 1 [0093.155] GetFocus () returned 0x0 [0093.155] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.155] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.155] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.155] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.155] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.155] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.155] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.155] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.155] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.155] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792010 | out: hHeap=0x760000) returned 1 [0093.155] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792010 [0093.155] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x791f80 [0093.156] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792010 | out: hHeap=0x760000) returned 1 [0093.156] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791fa0 [0093.156] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791f80 | out: hHeap=0x760000) returned 1 [0093.156] GetFocus () returned 0x0 [0093.156] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.156] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.156] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.156] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.156] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.156] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.156] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.156] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.156] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.156] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fa0 | out: hHeap=0x760000) returned 1 [0093.156] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791ff0 [0093.156] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792010 [0093.156] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791ff0 | out: hHeap=0x760000) returned 1 [0093.156] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792110 [0093.156] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792010 | out: hHeap=0x760000) returned 1 [0093.156] GetFocus () returned 0x0 [0093.156] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.156] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.156] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.156] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.157] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.157] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.157] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.157] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.157] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.157] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.157] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792080 [0093.157] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792130 [0093.157] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792080 | out: hHeap=0x760000) returned 1 [0093.157] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792120 [0093.157] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792130 | out: hHeap=0x760000) returned 1 [0093.157] GetFocus () returned 0x0 [0093.157] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.157] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.157] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.157] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.157] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.157] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.157] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.157] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.157] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.157] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792120 | out: hHeap=0x760000) returned 1 [0093.157] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791fa0 [0093.157] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792120 [0093.157] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fa0 | out: hHeap=0x760000) returned 1 [0093.158] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791f80 [0093.158] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792120 | out: hHeap=0x760000) returned 1 [0093.158] GetFocus () returned 0x0 [0093.158] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.158] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.158] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.158] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.158] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.158] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.158] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.158] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.158] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.158] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791f80 | out: hHeap=0x760000) returned 1 [0093.158] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791fd0 [0093.158] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792030 [0093.158] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fd0 | out: hHeap=0x760000) returned 1 [0093.158] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792110 [0093.158] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792030 | out: hHeap=0x760000) returned 1 [0093.158] GetFocus () returned 0x0 [0093.158] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.158] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.158] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.158] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.158] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.159] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.159] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.159] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.159] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.159] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.159] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792110 [0093.159] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792030 [0093.159] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.159] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792000 [0093.159] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792030 | out: hHeap=0x760000) returned 1 [0093.159] GetFocus () returned 0x0 [0093.159] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.159] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.159] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.159] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.159] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.159] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.159] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.159] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.159] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.159] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792000 | out: hHeap=0x760000) returned 1 [0093.159] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791ff0 [0093.159] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x791f80 [0093.159] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791ff0 | out: hHeap=0x760000) returned 1 [0093.159] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792060 [0093.160] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791f80 | out: hHeap=0x760000) returned 1 [0093.160] GetFocus () returned 0x0 [0093.160] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.160] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.160] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.160] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.160] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.160] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.160] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.160] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.160] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.160] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792060 | out: hHeap=0x760000) returned 1 [0093.160] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791ff0 [0093.160] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792110 [0093.160] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791ff0 | out: hHeap=0x760000) returned 1 [0093.160] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792000 [0093.160] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.160] GetFocus () returned 0x0 [0093.160] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.160] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.160] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.160] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.160] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.160] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.161] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.161] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.161] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.161] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792000 | out: hHeap=0x760000) returned 1 [0093.161] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791f80 [0093.161] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x791fa0 [0093.161] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791f80 | out: hHeap=0x760000) returned 1 [0093.161] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791fd0 [0093.161] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fa0 | out: hHeap=0x760000) returned 1 [0093.161] GetFocus () returned 0x0 [0093.161] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.161] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.161] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.161] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.161] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.161] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.161] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.161] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.161] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.161] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fd0 | out: hHeap=0x760000) returned 1 [0093.161] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792010 [0093.161] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792130 [0093.161] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792010 | out: hHeap=0x760000) returned 1 [0093.161] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791f80 [0093.161] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792130 | out: hHeap=0x760000) returned 1 [0093.161] GetFocus () returned 0x0 [0093.162] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.162] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.162] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.162] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.162] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.162] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0093.162] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791f80 | out: hHeap=0x760000) returned 1 [0093.162] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792120 [0093.162] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792060 [0093.162] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792120 | out: hHeap=0x760000) returned 1 [0093.162] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792070 [0093.162] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792060 | out: hHeap=0x760000) returned 1 [0093.162] GetFocus () returned 0x0 [0093.163] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792070 | out: hHeap=0x760000) returned 1 [0093.163] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792040 [0093.163] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x791fc0 [0093.163] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792040 | out: hHeap=0x760000) returned 1 [0093.163] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791fa0 [0093.163] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fc0 | out: hHeap=0x760000) returned 1 [0093.163] GetFocus () returned 0x0 [0093.163] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fa0 | out: hHeap=0x760000) returned 1 [0093.163] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792030 [0093.163] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792110 [0093.163] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792030 | out: hHeap=0x760000) returned 1 [0093.163] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791fb0 [0093.163] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.163] GetFocus () returned 0x0 [0093.163] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fb0 | out: hHeap=0x760000) returned 1 [0093.163] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791f80 [0093.163] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x791fd0 [0093.163] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791f80 | out: hHeap=0x760000) returned 1 [0093.163] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791ff0 [0093.163] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fd0 | out: hHeap=0x760000) returned 1 [0093.163] GetFocus () returned 0x0 [0093.164] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791ff0 | out: hHeap=0x760000) returned 1 [0093.164] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792110 [0093.164] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x791f80 [0093.164] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.164] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791ff0 [0093.164] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791f80 | out: hHeap=0x760000) returned 1 [0093.164] GetFocus () returned 0x0 [0093.164] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791ff0 | out: hHeap=0x760000) returned 1 [0093.164] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792010 [0093.164] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792050 [0093.164] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792010 | out: hHeap=0x760000) returned 1 [0093.164] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792010 [0093.164] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792050 | out: hHeap=0x760000) returned 1 [0093.164] GetFocus () returned 0x0 [0093.164] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792010 | out: hHeap=0x760000) returned 1 [0093.164] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792010 [0093.164] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792110 [0093.164] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792010 | out: hHeap=0x760000) returned 1 [0093.164] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791f80 [0093.165] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.165] GetFocus () returned 0x0 [0093.165] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791f80 | out: hHeap=0x760000) returned 1 [0093.165] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791f80 [0093.165] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x791fb0 [0093.165] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791f80 | out: hHeap=0x760000) returned 1 [0093.165] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791fa0 [0093.165] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fb0 | out: hHeap=0x760000) returned 1 [0093.165] GetFocus () returned 0x0 [0093.165] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fa0 | out: hHeap=0x760000) returned 1 [0093.165] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792030 [0093.165] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792120 [0093.165] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792030 | out: hHeap=0x760000) returned 1 [0093.165] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792080 [0093.165] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792120 | out: hHeap=0x760000) returned 1 [0093.165] GetFocus () returned 0x0 [0093.165] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792080 | out: hHeap=0x760000) returned 1 [0093.165] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792110 [0093.166] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792040 [0093.166] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.166] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792110 [0093.166] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792040 | out: hHeap=0x760000) returned 1 [0093.166] GetFocus () returned 0x0 [0093.166] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.166] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792040 [0093.166] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792090 [0093.166] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792040 | out: hHeap=0x760000) returned 1 [0093.166] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792110 [0093.166] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792090 | out: hHeap=0x760000) returned 1 [0093.166] GetFocus () returned 0x0 [0093.166] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.167] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791ff0 [0093.167] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792000 [0093.167] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791ff0 | out: hHeap=0x760000) returned 1 [0093.167] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791fa0 [0093.167] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792000 | out: hHeap=0x760000) returned 1 [0093.167] GetFocus () returned 0x0 [0093.167] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fa0 | out: hHeap=0x760000) returned 1 [0093.167] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792060 [0093.167] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792030 [0093.167] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792060 | out: hHeap=0x760000) returned 1 [0093.167] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791fa0 [0093.167] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792030 | out: hHeap=0x760000) returned 1 [0093.167] GetFocus () returned 0x0 [0093.167] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fa0 | out: hHeap=0x760000) returned 1 [0093.167] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792000 [0093.167] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x791f80 [0093.167] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792000 | out: hHeap=0x760000) returned 1 [0093.167] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792110 [0093.167] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791f80 | out: hHeap=0x760000) returned 1 [0093.167] GetFocus () returned 0x0 [0093.168] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.168] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792000 [0093.168] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792090 [0093.168] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792000 | out: hHeap=0x760000) returned 1 [0093.168] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792030 [0093.168] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792090 | out: hHeap=0x760000) returned 1 [0093.168] GetFocus () returned 0x0 [0093.168] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792030 | out: hHeap=0x760000) returned 1 [0093.168] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791fa0 [0093.168] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792070 [0093.168] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fa0 | out: hHeap=0x760000) returned 1 [0093.168] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791f80 [0093.168] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792070 | out: hHeap=0x760000) returned 1 [0093.168] GetFocus () returned 0x0 [0093.168] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791f80 | out: hHeap=0x760000) returned 1 [0093.168] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792110 [0093.168] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792080 [0093.168] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.168] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791f80 [0093.168] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792080 | out: hHeap=0x760000) returned 1 [0093.169] GetFocus () returned 0x0 [0093.169] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791f80 | out: hHeap=0x760000) returned 1 [0093.169] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791fa0 [0093.169] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792110 [0093.169] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fa0 | out: hHeap=0x760000) returned 1 [0093.169] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792030 [0093.169] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.169] GetFocus () returned 0x0 [0093.169] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792030 | out: hHeap=0x760000) returned 1 [0093.169] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792050 [0093.169] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792080 [0093.169] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792050 | out: hHeap=0x760000) returned 1 [0093.169] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791ff0 [0093.169] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792080 | out: hHeap=0x760000) returned 1 [0093.169] GetFocus () returned 0x0 [0093.169] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791ff0 | out: hHeap=0x760000) returned 1 [0093.169] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792110 [0093.169] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x791fd0 [0093.170] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.170] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792110 [0093.170] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fd0 | out: hHeap=0x760000) returned 1 [0093.170] GetFocus () returned 0x0 [0093.170] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.170] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792030 [0093.170] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x791fd0 [0093.170] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792030 | out: hHeap=0x760000) returned 1 [0093.170] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792120 [0093.170] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fd0 | out: hHeap=0x760000) returned 1 [0093.170] GetFocus () returned 0x0 [0093.170] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792120 | out: hHeap=0x760000) returned 1 [0093.170] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791fd0 [0093.170] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x791f80 [0093.170] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fd0 | out: hHeap=0x760000) returned 1 [0093.170] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791fb0 [0093.170] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791f80 | out: hHeap=0x760000) returned 1 [0093.170] GetFocus () returned 0x0 [0093.171] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fb0 | out: hHeap=0x760000) returned 1 [0093.171] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791fa0 [0093.171] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792110 [0093.171] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fa0 | out: hHeap=0x760000) returned 1 [0093.171] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791ff0 [0093.171] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.171] GetFocus () returned 0x0 [0093.171] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791ff0 | out: hHeap=0x760000) returned 1 [0093.171] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792110 [0093.171] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792120 [0093.171] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.171] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792110 [0093.171] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792120 | out: hHeap=0x760000) returned 1 [0093.171] GetFocus () returned 0x0 [0093.171] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.171] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791fb0 [0093.171] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792090 [0093.171] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fb0 | out: hHeap=0x760000) returned 1 [0093.171] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791fa0 [0093.171] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792090 | out: hHeap=0x760000) returned 1 [0093.171] GetFocus () returned 0x0 [0093.172] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fa0 | out: hHeap=0x760000) returned 1 [0093.172] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792110 [0093.172] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792090 [0093.172] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.172] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792070 [0093.172] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792090 | out: hHeap=0x760000) returned 1 [0093.172] GetFocus () returned 0x0 [0093.172] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792070 | out: hHeap=0x760000) returned 1 [0093.172] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791fa0 [0093.172] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x791ff0 [0093.172] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fa0 | out: hHeap=0x760000) returned 1 [0093.172] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791fc0 [0093.172] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791ff0 | out: hHeap=0x760000) returned 1 [0093.172] GetFocus () returned 0x0 [0093.172] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fc0 | out: hHeap=0x760000) returned 1 [0093.172] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792110 [0093.172] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792120 [0093.173] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.173] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792130 [0093.173] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792120 | out: hHeap=0x760000) returned 1 [0093.173] GetFocus () returned 0x0 [0093.173] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792130 | out: hHeap=0x760000) returned 1 [0093.173] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791f80 [0093.173] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792120 [0093.173] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791f80 | out: hHeap=0x760000) returned 1 [0093.173] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792110 [0093.173] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792120 | out: hHeap=0x760000) returned 1 [0093.173] GetFocus () returned 0x0 [0093.173] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.173] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791ff0 [0093.173] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792000 [0093.173] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791ff0 | out: hHeap=0x760000) returned 1 [0093.173] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x7920a0 [0093.173] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792000 | out: hHeap=0x760000) returned 1 [0093.173] GetFocus () returned 0x0 [0093.174] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7920a0 | out: hHeap=0x760000) returned 1 [0093.174] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791fa0 [0093.174] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x791fc0 [0093.174] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fa0 | out: hHeap=0x760000) returned 1 [0093.174] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791ff0 [0093.174] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fc0 | out: hHeap=0x760000) returned 1 [0093.174] GetFocus () returned 0x0 [0093.174] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791ff0 | out: hHeap=0x760000) returned 1 [0093.174] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x7920a0 [0093.174] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792110 [0093.174] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7920a0 | out: hHeap=0x760000) returned 1 [0093.174] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792120 [0093.174] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.174] GetFocus () returned 0x0 [0093.174] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792120 | out: hHeap=0x760000) returned 1 [0093.174] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792110 [0093.174] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792000 [0093.174] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.174] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792110 [0093.174] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792000 | out: hHeap=0x760000) returned 1 [0093.175] GetFocus () returned 0x0 [0093.175] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.175] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792030 [0093.175] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792050 [0093.175] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792030 | out: hHeap=0x760000) returned 1 [0093.175] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791fa0 [0093.175] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792050 | out: hHeap=0x760000) returned 1 [0093.175] GetFocus () returned 0x0 [0093.175] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fa0 | out: hHeap=0x760000) returned 1 [0093.175] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791fa0 [0093.175] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792090 [0093.175] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fa0 | out: hHeap=0x760000) returned 1 [0093.175] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791f80 [0093.175] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792090 | out: hHeap=0x760000) returned 1 [0093.175] GetFocus () returned 0x0 [0093.176] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791f80 | out: hHeap=0x760000) returned 1 [0093.176] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792110 [0093.176] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792070 [0093.176] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.176] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x7920a0 [0093.176] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792070 | out: hHeap=0x760000) returned 1 [0093.176] GetFocus () returned 0x0 [0093.176] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7920a0 | out: hHeap=0x760000) returned 1 [0093.176] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792030 [0093.176] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792040 [0093.176] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792030 | out: hHeap=0x760000) returned 1 [0093.176] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792110 [0093.176] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792040 | out: hHeap=0x760000) returned 1 [0093.176] GetFocus () returned 0x0 [0093.176] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.176] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791f80 [0093.176] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792010 [0093.176] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791f80 | out: hHeap=0x760000) returned 1 [0093.176] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792030 [0093.176] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792010 | out: hHeap=0x760000) returned 1 [0093.176] GetFocus () returned 0x0 [0093.177] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792030 | out: hHeap=0x760000) returned 1 [0093.177] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791fc0 [0093.177] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792000 [0093.177] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fc0 | out: hHeap=0x760000) returned 1 [0093.177] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792050 [0093.177] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792000 | out: hHeap=0x760000) returned 1 [0093.177] GetFocus () returned 0x0 [0093.177] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792050 | out: hHeap=0x760000) returned 1 [0093.177] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792110 [0093.177] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792000 [0093.177] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.177] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792040 [0093.177] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792000 | out: hHeap=0x760000) returned 1 [0093.177] GetFocus () returned 0x0 [0093.177] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792040 | out: hHeap=0x760000) returned 1 [0093.177] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791fb0 [0093.177] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792110 [0093.177] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fb0 | out: hHeap=0x760000) returned 1 [0093.178] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792010 [0093.178] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.178] GetFocus () returned 0x0 [0093.178] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792010 | out: hHeap=0x760000) returned 1 [0093.178] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792110 [0093.178] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x791f80 [0093.178] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.178] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792130 [0093.178] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791f80 | out: hHeap=0x760000) returned 1 [0093.178] GetFocus () returned 0x0 [0093.178] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792130 | out: hHeap=0x760000) returned 1 [0093.178] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792080 [0093.178] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x791fd0 [0093.178] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792080 | out: hHeap=0x760000) returned 1 [0093.178] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791fc0 [0093.178] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fd0 | out: hHeap=0x760000) returned 1 [0093.178] GetFocus () returned 0x0 [0093.179] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fc0 | out: hHeap=0x760000) returned 1 [0093.179] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792000 [0093.179] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792050 [0093.179] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792000 | out: hHeap=0x760000) returned 1 [0093.179] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792080 [0093.179] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792050 | out: hHeap=0x760000) returned 1 [0093.179] GetFocus () returned 0x0 [0093.179] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792080 | out: hHeap=0x760000) returned 1 [0093.179] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791fd0 [0093.179] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792110 [0093.179] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fd0 | out: hHeap=0x760000) returned 1 [0093.179] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791ff0 [0093.179] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.179] GetFocus () returned 0x0 [0093.179] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791ff0 | out: hHeap=0x760000) returned 1 [0093.179] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791f80 [0093.179] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792080 [0093.179] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791f80 | out: hHeap=0x760000) returned 1 [0093.179] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792050 [0093.179] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792080 | out: hHeap=0x760000) returned 1 [0093.180] GetFocus () returned 0x0 [0093.180] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792050 | out: hHeap=0x760000) returned 1 [0093.180] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791f80 [0093.180] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792110 [0093.180] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791f80 | out: hHeap=0x760000) returned 1 [0093.180] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792120 [0093.180] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.180] GetFocus () returned 0x0 [0093.180] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792120 | out: hHeap=0x760000) returned 1 [0093.180] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792110 [0093.180] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792080 [0093.180] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.180] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792110 [0093.180] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792080 | out: hHeap=0x760000) returned 1 [0093.180] GetFocus () returned 0x0 [0093.181] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.181] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792000 [0093.181] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792030 [0093.181] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792000 | out: hHeap=0x760000) returned 1 [0093.181] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792040 [0093.181] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792030 | out: hHeap=0x760000) returned 1 [0093.181] GetFocus () returned 0x0 [0093.181] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792040 | out: hHeap=0x760000) returned 1 [0093.181] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x791fc0 [0093.181] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792030 [0093.181] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fc0 | out: hHeap=0x760000) returned 1 [0093.181] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792110 [0093.181] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792030 | out: hHeap=0x760000) returned 1 [0093.181] GetFocus () returned 0x0 [0093.181] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.181] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792110 [0093.181] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792030 [0093.181] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792110 | out: hHeap=0x760000) returned 1 [0093.181] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792040 [0093.181] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792030 | out: hHeap=0x760000) returned 1 [0093.181] GetFocus () returned 0x0 [0093.213] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792040 | out: hHeap=0x760000) returned 1 [0093.214] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792130 [0093.214] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x791fc0 [0093.214] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792130 | out: hHeap=0x760000) returned 1 [0093.214] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792050 [0093.214] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fc0 | out: hHeap=0x760000) returned 1 [0093.214] GetFocus () returned 0x0 [0093.214] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792050 | out: hHeap=0x760000) returned 1 [0093.214] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792120 [0093.214] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792080 [0093.214] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792120 | out: hHeap=0x760000) returned 1 [0093.214] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791fc0 [0093.214] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792080 | out: hHeap=0x760000) returned 1 [0093.214] GetFocus () returned 0x0 [0093.214] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x791fc0 | out: hHeap=0x760000) returned 1 [0093.214] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792070 [0093.214] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x792030 [0093.214] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792070 | out: hHeap=0x760000) returned 1 [0093.214] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x792090 [0093.214] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792030 | out: hHeap=0x760000) returned 1 [0093.214] GetFocus () returned 0x0 [0093.215] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x792090 | out: hHeap=0x760000) returned 1 [0093.215] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x2) returned 0x792050 [0093.215] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x4) returned 0x791f80 [0093.215] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x6) returned 0x791fa0 [0093.215] GetFocus () returned 0x0 [0093.215] GetFocus () returned 0x0 [0093.215] GetFocus () returned 0x0 [0093.216] GetFocus () returned 0x0 [0093.216] GetFocus () returned 0x0 [0093.216] GetFocus () returned 0x0 [0093.216] GetFocus () returned 0x0 [0093.216] GetFocus () returned 0x0 [0093.217] GetFocus () returned 0x0 [0093.217] GetFocus () returned 0x0 [0093.217] GetFocus () returned 0x0 [0093.217] GetFocus () returned 0x0 [0093.218] GetFocus () returned 0x0 [0093.218] GetFocus () returned 0x0 [0093.218] GetFocus () returned 0x0 [0093.218] GetFocus () returned 0x0 [0093.219] GetFocus () returned 0x0 [0093.219] GetFocus () returned 0x0 [0093.219] GetFocus () returned 0x0 [0093.219] GetFocus () returned 0x0 [0093.219] GetFocus () returned 0x0 [0093.220] GetFocus () returned 0x0 [0093.220] GetFocus () returned 0x0 [0093.220] GetFocus () returned 0x0 [0093.220] GetFocus () returned 0x0 [0093.220] GetFocus () returned 0x0 [0093.221] GetFocus () returned 0x0 [0093.221] GetFocus () returned 0x0 [0093.221] GetFocus () returned 0x0 [0093.221] GetFocus () returned 0x0 [0093.222] GetFocus () returned 0x0 [0093.222] GetFocus () returned 0x0 [0093.222] GetFocus () returned 0x0 [0093.222] GetFocus () returned 0x0 [0093.222] GetFocus () returned 0x0 [0093.223] GetFocus () returned 0x0 [0093.223] GetFocus () returned 0x0 [0093.223] GetFocus () returned 0x0 [0093.223] GetFocus () returned 0x0 [0093.223] GetFocus () returned 0x0 [0093.224] GetFocus () returned 0x0 [0093.224] GetFocus () returned 0x0 [0093.224] GetFocus () returned 0x0 [0093.224] GetFocus () returned 0x0 [0093.225] GetFocus () returned 0x0 [0093.225] GetFocus () returned 0x0 [0093.225] GetFocus () returned 0x0 [0093.225] GetFocus () returned 0x0 [0093.225] GetFocus () returned 0x0 [0093.226] GetFocus () returned 0x0 [0093.226] GetFocus () returned 0x0 [0093.226] GetFocus () returned 0x0 [0093.226] GetFocus () returned 0x0 [0093.227] GetFocus () returned 0x0 [0093.227] GetFocus () returned 0x0 [0093.227] GetFocus () returned 0x0 [0093.227] GetFocus () returned 0x0 [0093.227] GetFocus () returned 0x0 [0093.228] GetFocus () returned 0x0 [0093.228] GetFocus () returned 0x0 [0093.228] GetFocus () returned 0x0 [0093.228] GetFocus () returned 0x0 [0093.228] GetFocus () returned 0x0 [0093.229] GetFocus () returned 0x0 [0093.229] GetFocus () returned 0x0 [0093.229] GetFocus () returned 0x0 [0093.229] GetFocus () returned 0x0 [0093.230] GetFocus () returned 0x0 [0093.230] GetFocus () returned 0x0 [0093.230] GetFocus () returned 0x0 [0093.230] GetFocus () returned 0x0 [0093.231] GetFocus () returned 0x0 [0093.231] GetFocus () returned 0x0 [0093.231] GetFocus () returned 0x0 [0093.231] GetFocus () returned 0x0 [0093.231] GetFocus () returned 0x0 [0093.232] GetFocus () returned 0x0 [0093.232] GetFocus () returned 0x0 [0093.232] GetFocus () returned 0x0 [0093.232] GetFocus () returned 0x0 [0093.232] GetFocus () returned 0x0 [0093.233] GetFocus () returned 0x0 [0093.233] GetFocus () returned 0x0 [0093.233] GetFocus () returned 0x0 [0093.233] GetFocus () returned 0x0 [0093.234] GetFocus () returned 0x0 [0093.234] GetFocus () returned 0x0 [0093.234] GetFocus () returned 0x0 [0093.234] GetFocus () returned 0x0 [0093.234] GetFocus () returned 0x0 [0093.235] GetFocus () returned 0x0 [0093.235] GetFocus () returned 0x0 [0093.235] GetFocus () returned 0x0 [0093.235] GetFocus () returned 0x0 [0093.235] GetFocus () returned 0x0 [0093.236] GetFocus () returned 0x0 [0093.236] GetFocus () returned 0x0 [0093.236] GetFocus () returned 0x0 [0093.236] GetFocus () returned 0x0 [0093.237] GetFocus () returned 0x0 [0093.237] GetFocus () returned 0x0 [0093.237] GetFocus () returned 0x0 [0093.239] GetFocus () returned 0x0 [0093.239] GetFocus () returned 0x0 [0093.239] GetFocus () returned 0x0 [0093.240] GetFocus () returned 0x0 [0093.240] GetFocus () returned 0x0 [0093.240] GetFocus () returned 0x0 [0093.240] GetFocus () returned 0x0 [0093.241] GetFocus () returned 0x0 [0093.241] GetFocus () returned 0x0 [0093.241] GetFocus () returned 0x0 [0093.241] GetFocus () returned 0x0 [0093.242] GetFocus () returned 0x0 [0093.242] GetFocus () returned 0x0 [0093.242] GetFocus () returned 0x0 [0093.242] GetFocus () returned 0x0 [0093.243] GetFocus () returned 0x0 [0093.243] GetFocus () returned 0x0 [0093.243] GetFocus () returned 0x0 [0093.243] GetFocus () returned 0x0 [0093.244] GetFocus () returned 0x0 [0093.244] GetFocus () returned 0x0 [0093.244] GetFocus () returned 0x0 [0093.245] GetFocus () returned 0x0 [0093.245] GetFocus () returned 0x0 [0093.245] GetFocus () returned 0x0 [0093.245] GetFocus () returned 0x0 [0093.245] GetFocus () returned 0x0 [0093.246] GetFocus () returned 0x0 [0093.246] GetFocus () returned 0x0 [0093.246] GetFocus () returned 0x0 [0093.246] GetFocus () returned 0x0 [0093.247] GetFocus () returned 0x0 [0093.247] GetFocus () returned 0x0 [0093.247] GetFocus () returned 0x0 [0093.247] GetFocus () returned 0x0 [0093.248] GetFocus () returned 0x0 [0093.248] GetFocus () returned 0x0 [0093.248] GetFocus () returned 0x0 [0093.248] GetFocus () returned 0x0 [0093.249] GetFocus () returned 0x0 [0093.249] GetFocus () returned 0x0 [0093.249] GetFocus () returned 0x0 [0093.249] GetFocus () returned 0x0 [0093.250] GetFocus () returned 0x0 [0093.250] GetFocus () returned 0x0 [0093.250] GetFocus () returned 0x0 [0093.250] GetFocus () returned 0x0 [0093.250] GetFocus () returned 0x0 [0093.251] GetFocus () returned 0x0 [0093.251] GetFocus () returned 0x0 [0093.251] GetFocus () returned 0x0 [0093.251] GetFocus () returned 0x0 [0093.251] GetFocus () returned 0x0 [0093.252] GetFocus () returned 0x0 [0093.252] GetFocus () returned 0x0 [0093.252] GetFocus () returned 0x0 [0093.252] GetFocus () returned 0x0 [0093.253] GetFocus () returned 0x0 [0093.253] GetFocus () returned 0x0 [0093.253] GetFocus () returned 0x0 [0093.253] GetFocus () returned 0x0 [0093.253] GetFocus () returned 0x0 [0093.254] GetFocus () returned 0x0 [0093.254] GetFocus () returned 0x0 [0093.254] GetFocus () returned 0x0 [0095.626] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x440a066f [0095.626] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x960a07bf [0095.627] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x2a0a07ba [0095.627] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x120a0808 [0095.627] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x2e0a0630 [0095.627] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x460a062d [0095.627] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x140a07cb [0095.627] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x460a0797 [0095.627] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x130a0802 [0095.627] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x290a07c2 [0095.627] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xc0a07d0 [0095.627] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x10a0804 [0095.627] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x20a0803 [0095.627] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x10a080a [0095.627] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa080b [0095.627] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa080c [0095.627] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa080d [0095.627] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa080e [0095.627] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa080f [0095.627] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0810 [0095.628] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0811 [0095.628] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0812 [0095.628] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0813 [0095.628] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0814 [0095.628] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0815 [0095.628] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0816 [0095.628] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0817 [0095.628] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0818 [0095.628] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0819 [0095.628] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa081a [0095.628] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa081b [0095.628] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa081c [0095.628] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa081d [0095.628] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa081e [0095.628] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa081f [0095.628] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0820 [0095.628] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0821 [0095.628] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0822 [0095.628] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0823 [0095.628] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0824 [0095.628] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0825 [0095.628] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0826 [0095.629] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0827 [0095.629] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0828 [0095.629] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0829 [0095.629] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa082a [0095.629] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa082b [0095.629] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa082c [0095.629] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa082d [0095.629] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa082e [0095.629] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa082f [0095.629] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0830 [0095.629] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0831 [0095.629] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0832 [0095.629] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0833 [0095.629] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0834 [0095.629] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0835 [0095.629] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0836 [0095.629] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0837 [0095.629] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0838 [0095.629] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0839 [0095.629] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa083a [0095.629] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa083b [0095.629] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa083c [0095.630] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa083d [0095.630] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa083e [0095.630] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa083f [0095.630] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0840 [0095.630] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0841 [0095.630] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0842 [0095.630] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0843 [0095.630] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0844 [0095.630] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0845 [0095.630] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0846 [0095.630] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0847 [0095.630] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0848 [0095.630] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0849 [0095.630] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa084a [0095.630] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa084b [0095.630] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa084c [0095.630] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa084d [0095.630] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa084e [0095.631] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f9a4 | out: ppstm=0x19f9a4*=0x784a80) returned 0x0 [0095.633] IStream:SetSize (This=0x784a80, libNewSize=0x400) returned 0x0 [0095.633] IStream:RemoteSeek (in: This=0x784a80, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0095.633] LoadLibraryA (lpLibFileName="kernel32") returned 0x73b80000 [0095.633] ISequentialStream:RemoteWrite (in: This=0x784a80, pv=0x796c20*=0xc0, cb=0x400, pcbWritten=0x0 | out: pcbWritten=0x0) returned 0x0 [0095.634] GdipAlloc (size=0x10) returned 0x0 [0095.634] GetProcAddress (hModule=0x73b80000, lpProcName="VirtualAlloc") returned 0x73b96970 [0095.634] IUnknown:Release (This=0x784a80) returned 0x0 [0095.634] VirtualAlloc (lpAddress=0x0, dwSize=0x34000, flAllocationType=0x3000, flProtect=0x40) returned 0x520000 [0095.635] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName="doroga") returned 0x2dc [0095.635] GetCursorPos (in: lpPoint=0x19f9c8 | out: lpPoint=0x19f9c8*(x=286, y=695)) returned 1 [0095.636] GetStockObject (i=6) returned 0xb00018 [0095.636] SelectObject (hdc=0x0, h=0xb00018) returned 0x0 [0095.636] GetCursorPos (in: lpPoint=0x19f990 | out: lpPoint=0x19f990*(x=286, y=695)) returned 1 [0095.636] DrawIconEx (hdc=0x0, xLeft=5, yTop=10, hIcon=0x0, cxWidth=10, cyWidth=15, istepIfAniCur=0x0, hbrFlickerFreeDraw=0x0, diFlags=0x3) returned 0 [0095.636] GetConsoleWindow () returned 0x0 [0095.636] GetDC (hWnd=0x0) returned 0x54010809 [0095.636] CreatePen (iStyle=0, cWidth=2, color=0x133f13) returned 0x30084f [0095.636] ImpersonateLoggedOnUser (hToken=0x0) returned 0 [0095.636] SendInput (cInputs=0x1, pInputs=0x19f94c, cbSize=28) returned 0x1 [0095.637] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0xbb6) returned 0x102 [0098.650] GetStockObject (i=6) returned 0xb00018 [0098.650] SelectObject (hdc=0x0, h=0xb00018) returned 0x0 [0098.650] GetCursorPos (in: lpPoint=0x19f990 | out: lpPoint=0x19f990*(x=286, y=695)) returned 1 [0098.650] DrawIconEx (hdc=0x0, xLeft=5, yTop=10, hIcon=0x0, cxWidth=10, cyWidth=15, istepIfAniCur=0x0, hbrFlickerFreeDraw=0x0, diFlags=0x3) returned 0 [0098.650] GetConsoleWindow () returned 0x0 [0098.650] GetDC (hWnd=0x0) returned 0x8d0107ee [0098.651] CreatePen (iStyle=0, cWidth=2, color=0x523fc3) returned 0x1300855 [0098.651] ImpersonateLoggedOnUser (hToken=0x0) returned 0 [0098.651] SendInput (cInputs=0x1, pInputs=0x19f94c, cbSize=28) returned 0x1 [0098.651] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.651] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.651] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.651] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.651] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.651] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.651] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.651] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.651] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.651] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.651] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.651] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.651] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.651] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.651] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.651] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.651] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.651] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.651] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.651] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.651] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.651] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.652] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.653] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.653] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.653] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.653] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.653] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.653] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.653] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.653] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.653] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.653] GetDC (hWnd=0x0) returned 0x10856 [0098.653] wglCreateContext () returned 0x0 [0098.653] wglMakeCurrent () returned 0x0 [0098.654] GetDlgItem (hDlg=0x0, nIDDlgItem=1951716248) returned 0x0 [0098.654] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0098.654] lstrlenA (lpString="\x92\x07") returned 2 [0098.654] lstrlenA (lpString="\x92\x07") returned 2 [0098.654] lstrlenA (lpString="\x92\x07") returned 2 [0098.654] lstrlenA (lpString="\x92\x07") returned 2 [0098.654] lstrlenA (lpString="\x92\x07") returned 2 [0098.654] lstrlenA (lpString="\x92\x07") returned 2 [0098.654] capGetDriverDescriptionA () returned 0x0 [0098.656] GetLastError () returned 0x0 [0098.656] SetLastError (dwErrCode=0x0) [0098.656] OpenThemeData () returned 0x10000 [0098.745] GetSystemMetrics (nIndex=32) returned 4 [0098.745] GetSystemMetrics (nIndex=33) returned 4 [0098.745] CloseThemeData () returned 0x0 [0098.745] lstrlenA (lpString="\x92\x07") returned 2 [0098.745] lstrlenA (lpString="\x92\x07") returned 2 [0098.745] lstrlenA (lpString="\x92\x07") returned 2 [0098.745] lstrlenA (lpString="\x92\x07") returned 2 [0098.745] lstrlenA (lpString="\x92\x07") returned 2 [0098.745] lstrlenA (lpString="\x92\x07") returned 2 [0098.745] capGetDriverDescriptionA () returned 0x0 [0098.746] GetLastError () returned 0x0 [0098.746] SetLastError (dwErrCode=0x0) [0098.746] OpenThemeData () returned 0x20000 [0098.746] GetSystemMetrics (nIndex=32) returned 4 [0098.746] GetSystemMetrics (nIndex=33) returned 4 [0098.746] CloseThemeData () returned 0x0 [0098.747] lstrlenA (lpString="\x92\x07") returned 2 [0098.747] lstrlenA (lpString="\x92\x07") returned 2 [0098.747] lstrlenA (lpString="\x92\x07") returned 2 [0098.747] lstrlenA (lpString="\x92\x07") returned 2 [0098.747] lstrlenA (lpString="\x92\x07") returned 2 [0098.747] lstrlenA (lpString="\x92\x07") returned 2 [0098.747] capGetDriverDescriptionA () returned 0x0 [0098.747] GetLastError () returned 0x0 [0098.748] SetLastError (dwErrCode=0x0) [0098.748] OpenThemeData () returned 0x30000 [0098.748] GetSystemMetrics (nIndex=32) returned 4 [0098.748] GetSystemMetrics (nIndex=33) returned 4 [0098.748] CloseThemeData () returned 0x0 [0098.748] lstrlenA (lpString="\x92\x07") returned 2 [0098.748] lstrlenA (lpString="\x92\x07") returned 2 [0098.748] lstrlenA (lpString="\x92\x07") returned 2 [0098.748] lstrlenA (lpString="\x92\x07") returned 2 [0098.748] lstrlenA (lpString="\x92\x07") returned 2 [0098.748] lstrlenA (lpString="\x92\x07") returned 2 [0098.749] capGetDriverDescriptionA () returned 0x0 [0098.749] GetLastError () returned 0x0 [0098.749] SetLastError (dwErrCode=0x0) [0098.749] OpenThemeData () returned 0x40000 [0098.750] GetSystemMetrics (nIndex=32) returned 4 [0098.750] GetSystemMetrics (nIndex=33) returned 4 [0098.750] CloseThemeData () returned 0x0 [0098.750] lstrlenA (lpString="\x92\x07") returned 2 [0098.750] lstrlenA (lpString="\x92\x07") returned 2 [0098.750] lstrlenA (lpString="\x92\x07") returned 2 [0098.750] lstrlenA (lpString="\x92\x07") returned 2 [0098.750] lstrlenA (lpString="\x92\x07") returned 2 [0098.750] lstrlenA (lpString="\x92\x07") returned 2 [0098.750] capGetDriverDescriptionA () returned 0x0 [0098.751] GetLastError () returned 0x0 [0098.751] SetLastError (dwErrCode=0x0) [0098.751] OpenThemeData () returned 0x50000 [0098.751] GetSystemMetrics (nIndex=32) returned 4 [0098.751] GetSystemMetrics (nIndex=33) returned 4 [0098.751] CloseThemeData () returned 0x0 [0098.752] lstrlenA (lpString="\x92\x07") returned 2 [0098.752] lstrlenA (lpString="\x92\x07") returned 2 [0098.752] lstrlenA (lpString="\x92\x07") returned 2 [0098.752] lstrlenA (lpString="\x92\x07") returned 2 [0098.752] lstrlenA (lpString="\x92\x07") returned 2 [0098.752] lstrlenA (lpString="\x92\x07") returned 2 [0098.752] capGetDriverDescriptionA () returned 0x0 [0098.753] GetLastError () returned 0x0 [0098.753] SetLastError (dwErrCode=0x0) [0098.753] OpenThemeData () returned 0x60000 [0098.753] GetSystemMetrics (nIndex=32) returned 4 [0098.753] GetSystemMetrics (nIndex=33) returned 4 [0098.753] CloseThemeData () returned 0x0 [0098.754] lstrlenA (lpString="\x92\x07") returned 2 [0098.754] lstrlenA (lpString="\x92\x07") returned 2 [0098.754] lstrlenA (lpString="\x92\x07") returned 2 [0098.754] lstrlenA (lpString="\x92\x07") returned 2 [0098.754] lstrlenA (lpString="\x92\x07") returned 2 [0098.754] lstrlenA (lpString="\x92\x07") returned 2 [0098.754] capGetDriverDescriptionA () returned 0x0 [0098.754] GetLastError () returned 0x0 [0098.754] SetLastError (dwErrCode=0x0) [0098.754] OpenThemeData () returned 0x70000 [0098.755] GetSystemMetrics (nIndex=32) returned 4 [0098.755] GetSystemMetrics (nIndex=33) returned 4 [0098.755] CloseThemeData () returned 0x0 [0098.755] lstrlenA (lpString="\x92\x07") returned 2 [0098.755] lstrlenA (lpString="\x92\x07") returned 2 [0098.755] lstrlenA (lpString="\x92\x07") returned 2 [0098.755] lstrlenA (lpString="\x92\x07") returned 2 [0098.755] lstrlenA (lpString="\x92\x07") returned 2 [0098.755] lstrlenA (lpString="\x92\x07") returned 2 [0098.755] capGetDriverDescriptionA () returned 0x0 [0098.756] GetLastError () returned 0x0 [0098.756] SetLastError (dwErrCode=0x0) [0098.756] OpenThemeData () returned 0x80000 [0098.757] GetSystemMetrics (nIndex=32) returned 4 [0098.757] GetSystemMetrics (nIndex=33) returned 4 [0098.757] CloseThemeData () returned 0x0 [0098.757] lstrlenA (lpString="\x92\x07") returned 2 [0098.757] lstrlenA (lpString="\x92\x07") returned 2 [0098.757] lstrlenA (lpString="\x92\x07") returned 2 [0098.757] lstrlenA (lpString="\x92\x07") returned 2 [0098.757] lstrlenA (lpString="\x92\x07") returned 2 [0098.757] lstrlenA (lpString="\x92\x07") returned 2 [0098.757] capGetDriverDescriptionA () returned 0x0 [0098.758] GetLastError () returned 0x0 [0098.758] SetLastError (dwErrCode=0x0) [0098.758] OpenThemeData () returned 0x90000 [0098.758] GetSystemMetrics (nIndex=32) returned 4 [0098.758] GetSystemMetrics (nIndex=33) returned 4 [0098.758] CloseThemeData () returned 0x0 [0098.759] lstrlenA (lpString="\x92\x07") returned 2 [0098.759] lstrlenA (lpString="\x92\x07") returned 2 [0098.759] lstrlenA (lpString="\x92\x07") returned 2 [0098.759] lstrlenA (lpString="\x92\x07") returned 2 [0098.759] lstrlenA (lpString="\x92\x07") returned 2 [0098.759] lstrlenA (lpString="\x92\x07") returned 2 [0098.759] capGetDriverDescriptionA () returned 0x0 [0098.760] GetLastError () returned 0x0 [0098.760] SetLastError (dwErrCode=0x0) [0098.760] OpenThemeData () returned 0xa0000 [0098.760] GetSystemMetrics (nIndex=32) returned 4 [0098.761] GetSystemMetrics (nIndex=33) returned 4 [0098.761] CloseThemeData () returned 0x0 [0098.761] lstrlenA (lpString="\x92\x07") returned 2 [0098.761] lstrlenA (lpString="\x92\x07") returned 2 [0098.761] lstrlenA (lpString="\x92\x07") returned 2 [0098.761] lstrlenA (lpString="\x92\x07") returned 2 [0098.761] lstrlenA (lpString="\x92\x07") returned 2 [0098.761] lstrlenA (lpString="\x92\x07") returned 2 [0098.761] capGetDriverDescriptionA () returned 0x0 [0098.762] GetLastError () returned 0x0 [0098.762] SetLastError (dwErrCode=0x0) [0098.762] OpenThemeData () returned 0xb0000 [0098.762] GetSystemMetrics (nIndex=32) returned 4 [0098.762] GetSystemMetrics (nIndex=33) returned 4 [0098.762] CloseThemeData () returned 0x0 [0098.762] lstrlenA (lpString="\x92\x07") returned 2 [0098.762] lstrlenA (lpString="\x92\x07") returned 2 [0098.762] lstrlenA (lpString="\x92\x07") returned 2 [0098.763] lstrlenA (lpString="\x92\x07") returned 2 [0098.763] lstrlenA (lpString="\x92\x07") returned 2 [0098.763] lstrlenA (lpString="\x92\x07") returned 2 [0098.763] capGetDriverDescriptionA () returned 0x0 [0098.763] GetLastError () returned 0x0 [0098.763] SetLastError (dwErrCode=0x0) [0098.763] OpenThemeData () returned 0xc0000 [0098.764] GetSystemMetrics (nIndex=32) returned 4 [0098.764] GetSystemMetrics (nIndex=33) returned 4 [0098.764] CloseThemeData () returned 0x0 [0098.764] lstrlenA (lpString="\x92\x07") returned 2 [0098.764] lstrlenA (lpString="\x92\x07") returned 2 [0098.764] lstrlenA (lpString="\x92\x07") returned 2 [0098.764] lstrlenA (lpString="\x92\x07") returned 2 [0098.764] lstrlenA (lpString="\x92\x07") returned 2 [0098.764] lstrlenA (lpString="\x92\x07") returned 2 [0098.764] capGetDriverDescriptionA () returned 0x0 [0098.765] GetLastError () returned 0x0 [0098.765] SetLastError (dwErrCode=0x0) [0098.765] OpenThemeData () returned 0xd0000 [0098.765] GetSystemMetrics (nIndex=32) returned 4 [0098.765] GetSystemMetrics (nIndex=33) returned 4 [0098.765] CloseThemeData () returned 0x0 [0098.766] lstrlenA (lpString="\x92\x07") returned 2 [0098.766] lstrlenA (lpString="\x92\x07") returned 2 [0098.766] lstrlenA (lpString="\x92\x07") returned 2 [0098.766] lstrlenA (lpString="\x92\x07") returned 2 [0098.766] lstrlenA (lpString="\x92\x07") returned 2 [0098.766] lstrlenA (lpString="\x92\x07") returned 2 [0098.766] capGetDriverDescriptionA () returned 0x0 [0098.767] GetLastError () returned 0x0 [0098.767] SetLastError (dwErrCode=0x0) [0098.767] OpenThemeData () returned 0xe0000 [0098.767] GetSystemMetrics (nIndex=32) returned 4 [0098.767] GetSystemMetrics (nIndex=33) returned 4 [0098.767] CloseThemeData () returned 0x0 [0098.768] lstrlenA (lpString="\x92\x07") returned 2 [0098.768] lstrlenA (lpString="\x92\x07") returned 2 [0098.768] lstrlenA (lpString="\x92\x07") returned 2 [0098.768] lstrlenA (lpString="\x92\x07") returned 2 [0098.768] lstrlenA (lpString="\x92\x07") returned 2 [0098.768] lstrlenA (lpString="\x92\x07") returned 2 [0098.768] capGetDriverDescriptionA () returned 0x0 [0098.768] GetLastError () returned 0x0 [0098.768] SetLastError (dwErrCode=0x0) [0098.768] OpenThemeData () returned 0xf0000 [0098.769] GetSystemMetrics (nIndex=32) returned 4 [0098.769] GetSystemMetrics (nIndex=33) returned 4 [0098.769] CloseThemeData () returned 0x0 [0098.769] lstrlenA (lpString="\x92\x07") returned 2 [0098.769] lstrlenA (lpString="\x92\x07") returned 2 [0098.769] lstrlenA (lpString="\x92\x07") returned 2 [0098.769] lstrlenA (lpString="\x92\x07") returned 2 [0098.769] lstrlenA (lpString="\x92\x07") returned 2 [0098.769] lstrlenA (lpString="\x92\x07") returned 2 [0098.769] capGetDriverDescriptionA () returned 0x0 [0098.770] GetLastError () returned 0x0 [0098.770] SetLastError (dwErrCode=0x0) [0098.770] OpenThemeData () returned 0x100000 [0098.771] GetSystemMetrics (nIndex=32) returned 4 [0098.771] GetSystemMetrics (nIndex=33) returned 4 [0098.771] CloseThemeData () returned 0x0 [0098.771] lstrlenA (lpString="\x92\x07") returned 2 [0098.771] lstrlenA (lpString="\x92\x07") returned 2 [0098.771] lstrlenA (lpString="\x92\x07") returned 2 [0098.771] lstrlenA (lpString="\x92\x07") returned 2 [0098.771] lstrlenA (lpString="\x92\x07") returned 2 [0098.771] lstrlenA (lpString="\x92\x07") returned 2 [0098.771] capGetDriverDescriptionA () returned 0x0 [0098.772] GetLastError () returned 0x0 [0098.772] SetLastError (dwErrCode=0x0) [0098.772] OpenThemeData () returned 0x110000 [0098.772] GetSystemMetrics (nIndex=32) returned 4 [0098.772] GetSystemMetrics (nIndex=33) returned 4 [0098.772] CloseThemeData () returned 0x0 [0098.772] lstrlenA (lpString="\x92\x07") returned 2 [0098.772] lstrlenA (lpString="\x92\x07") returned 2 [0098.772] lstrlenA (lpString="\x92\x07") returned 2 [0098.773] lstrlenA (lpString="\x92\x07") returned 2 [0098.773] lstrlenA (lpString="\x92\x07") returned 2 [0098.773] lstrlenA (lpString="\x92\x07") returned 2 [0098.773] capGetDriverDescriptionA () returned 0x0 [0098.774] GetLastError () returned 0x0 [0098.774] SetLastError (dwErrCode=0x0) [0098.774] OpenThemeData () returned 0x120000 [0098.774] GetSystemMetrics (nIndex=32) returned 4 [0098.774] GetSystemMetrics (nIndex=33) returned 4 [0098.774] CloseThemeData () returned 0x0 [0098.775] lstrlenA (lpString="\x92\x07") returned 2 [0098.775] lstrlenA (lpString="\x92\x07") returned 2 [0098.775] lstrlenA (lpString="\x92\x07") returned 2 [0098.775] lstrlenA (lpString="\x92\x07") returned 2 [0098.775] lstrlenA (lpString="\x92\x07") returned 2 [0098.775] lstrlenA (lpString="\x92\x07") returned 2 [0098.775] capGetDriverDescriptionA () returned 0x0 [0098.776] GetLastError () returned 0x0 [0098.776] SetLastError (dwErrCode=0x0) [0098.776] OpenThemeData () returned 0x130000 [0098.776] GetSystemMetrics (nIndex=32) returned 4 [0098.776] GetSystemMetrics (nIndex=33) returned 4 [0098.776] CloseThemeData () returned 0x0 [0098.776] lstrlenA (lpString="\x92\x07") returned 2 [0098.776] lstrlenA (lpString="\x92\x07") returned 2 [0098.776] lstrlenA (lpString="\x92\x07") returned 2 [0098.776] lstrlenA (lpString="\x92\x07") returned 2 [0098.776] lstrlenA (lpString="\x92\x07") returned 2 [0098.776] lstrlenA (lpString="\x92\x07") returned 2 [0098.777] capGetDriverDescriptionA () returned 0x0 [0098.777] GetLastError () returned 0x0 [0098.777] SetLastError (dwErrCode=0x0) [0098.777] OpenThemeData () returned 0x140000 [0098.778] GetSystemMetrics (nIndex=32) returned 4 [0098.778] GetSystemMetrics (nIndex=33) returned 4 [0098.778] CloseThemeData () returned 0x0 [0098.778] lstrlenA (lpString="\x92\x07") returned 2 [0098.778] lstrlenA (lpString="\x92\x07") returned 2 [0098.778] lstrlenA (lpString="\x92\x07") returned 2 [0098.778] lstrlenA (lpString="\x92\x07") returned 2 [0098.778] lstrlenA (lpString="\x92\x07") returned 2 [0098.778] lstrlenA (lpString="\x92\x07") returned 2 [0098.778] capGetDriverDescriptionA () returned 0x0 [0098.779] GetLastError () returned 0x0 [0098.779] SetLastError (dwErrCode=0x0) [0098.779] OpenThemeData () returned 0x150000 [0098.779] GetSystemMetrics (nIndex=32) returned 4 [0098.779] GetSystemMetrics (nIndex=33) returned 4 [0098.779] CloseThemeData () returned 0x0 [0098.779] lstrlenA (lpString="\x92\x07") returned 2 [0098.779] lstrlenA (lpString="\x92\x07") returned 2 [0098.779] lstrlenA (lpString="\x92\x07") returned 2 [0098.779] lstrlenA (lpString="\x92\x07") returned 2 [0098.779] lstrlenA (lpString="\x92\x07") returned 2 [0098.779] lstrlenA (lpString="\x92\x07") returned 2 [0098.779] capGetDriverDescriptionA () returned 0x0 [0098.780] GetLastError () returned 0x0 [0098.780] SetLastError (dwErrCode=0x0) [0098.780] OpenThemeData () returned 0x160000 [0098.780] GetSystemMetrics (nIndex=32) returned 4 [0098.781] GetSystemMetrics (nIndex=33) returned 4 [0098.781] CloseThemeData () returned 0x0 [0098.781] lstrlenA (lpString="\x92\x07") returned 2 [0098.781] lstrlenA (lpString="\x92\x07") returned 2 [0098.781] lstrlenA (lpString="\x92\x07") returned 2 [0098.781] lstrlenA (lpString="\x92\x07") returned 2 [0098.781] lstrlenA (lpString="\x92\x07") returned 2 [0098.781] lstrlenA (lpString="\x92\x07") returned 2 [0098.781] capGetDriverDescriptionA () returned 0x0 [0098.782] GetLastError () returned 0x0 [0098.782] SetLastError (dwErrCode=0x0) [0098.782] OpenThemeData () returned 0x170000 [0098.782] GetSystemMetrics (nIndex=32) returned 4 [0098.782] GetSystemMetrics (nIndex=33) returned 4 [0098.782] CloseThemeData () returned 0x0 [0098.782] lstrlenA (lpString="\x92\x07") returned 2 [0098.782] lstrlenA (lpString="\x92\x07") returned 2 [0098.783] lstrlenA (lpString="\x92\x07") returned 2 [0098.783] lstrlenA (lpString="\x92\x07") returned 2 [0098.783] lstrlenA (lpString="\x92\x07") returned 2 [0098.783] lstrlenA (lpString="\x92\x07") returned 2 [0098.783] capGetDriverDescriptionA () returned 0x0 [0098.783] GetLastError () returned 0x0 [0098.783] SetLastError (dwErrCode=0x0) [0098.783] OpenThemeData () returned 0x180000 [0098.784] GetSystemMetrics (nIndex=32) returned 4 [0098.784] GetSystemMetrics (nIndex=33) returned 4 [0098.784] CloseThemeData () returned 0x0 [0098.784] lstrlenA (lpString="\x92\x07") returned 2 [0098.784] lstrlenA (lpString="\x92\x07") returned 2 [0098.784] lstrlenA (lpString="\x92\x07") returned 2 [0098.784] lstrlenA (lpString="\x92\x07") returned 2 [0098.784] lstrlenA (lpString="\x92\x07") returned 2 [0098.784] lstrlenA (lpString="\x92\x07") returned 2 [0098.784] capGetDriverDescriptionA () returned 0x0 [0098.785] GetLastError () returned 0x0 [0098.785] SetLastError (dwErrCode=0x0) [0098.785] OpenThemeData () returned 0x190000 [0098.785] GetSystemMetrics (nIndex=32) returned 4 [0098.785] GetSystemMetrics (nIndex=33) returned 4 [0098.785] CloseThemeData () returned 0x0 [0098.785] lstrlenA (lpString="\x92\x07") returned 2 [0098.785] lstrlenA (lpString="\x92\x07") returned 2 [0098.785] lstrlenA (lpString="\x92\x07") returned 2 [0098.786] lstrlenA (lpString="\x92\x07") returned 2 [0098.786] lstrlenA (lpString="\x92\x07") returned 2 [0098.786] lstrlenA (lpString="\x92\x07") returned 2 [0098.786] capGetDriverDescriptionA () returned 0x0 [0098.787] GetLastError () returned 0x0 [0098.787] SetLastError (dwErrCode=0x0) [0098.787] OpenThemeData () returned 0x1a0000 [0098.787] GetSystemMetrics (nIndex=32) returned 4 [0098.787] GetSystemMetrics (nIndex=33) returned 4 [0098.787] CloseThemeData () returned 0x0 [0098.787] lstrlenA (lpString="\x92\x07") returned 2 [0098.787] lstrlenA (lpString="\x92\x07") returned 2 [0098.787] lstrlenA (lpString="\x92\x07") returned 2 [0098.787] lstrlenA (lpString="\x92\x07") returned 2 [0098.787] lstrlenA (lpString="\x92\x07") returned 2 [0098.787] lstrlenA (lpString="\x92\x07") returned 2 [0098.788] capGetDriverDescriptionA () returned 0x0 [0098.788] GetLastError () returned 0x0 [0098.788] SetLastError (dwErrCode=0x0) [0098.788] OpenThemeData () returned 0x1b0000 [0098.789] GetSystemMetrics (nIndex=32) returned 4 [0098.789] GetSystemMetrics (nIndex=33) returned 4 [0098.789] CloseThemeData () returned 0x0 [0098.789] lstrlenA (lpString="\x92\x07") returned 2 [0098.789] lstrlenA (lpString="\x92\x07") returned 2 [0098.789] lstrlenA (lpString="\x92\x07") returned 2 [0098.789] lstrlenA (lpString="\x92\x07") returned 2 [0098.789] lstrlenA (lpString="\x92\x07") returned 2 [0098.789] lstrlenA (lpString="\x92\x07") returned 2 [0098.789] capGetDriverDescriptionA () returned 0x0 [0098.790] GetLastError () returned 0x0 [0098.790] SetLastError (dwErrCode=0x0) [0098.790] OpenThemeData () returned 0x1c0000 [0098.838] GetSystemMetrics (nIndex=32) returned 4 [0098.838] GetSystemMetrics (nIndex=33) returned 4 [0098.838] CloseThemeData () returned 0x0 [0098.838] lstrlenA (lpString="\x92\x07") returned 2 [0098.838] lstrlenA (lpString="\x92\x07") returned 2 [0098.838] lstrlenA (lpString="\x92\x07") returned 2 [0098.838] lstrlenA (lpString="\x92\x07") returned 2 [0098.838] lstrlenA (lpString="\x92\x07") returned 2 [0098.838] lstrlenA (lpString="\x92\x07") returned 2 [0098.838] capGetDriverDescriptionA () returned 0x0 [0098.839] GetLastError () returned 0x0 [0098.839] SetLastError (dwErrCode=0x0) [0098.839] OpenThemeData () returned 0x1d0000 [0098.839] GetSystemMetrics (nIndex=32) returned 4 [0098.839] GetSystemMetrics (nIndex=33) returned 4 [0098.839] CloseThemeData () returned 0x0 [0098.840] lstrlenA (lpString="\x92\x07") returned 2 [0098.840] lstrlenA (lpString="\x92\x07") returned 2 [0098.840] lstrlenA (lpString="\x92\x07") returned 2 [0098.840] lstrlenA (lpString="\x92\x07") returned 2 [0098.840] lstrlenA (lpString="\x92\x07") returned 2 [0098.840] lstrlenA (lpString="\x92\x07") returned 2 [0098.840] capGetDriverDescriptionA () returned 0x0 [0098.840] GetLastError () returned 0x0 [0098.840] SetLastError (dwErrCode=0x0) [0098.840] OpenThemeData () returned 0x1e0000 [0098.841] GetSystemMetrics (nIndex=32) returned 4 [0098.841] GetSystemMetrics (nIndex=33) returned 4 [0098.841] CloseThemeData () returned 0x0 [0098.841] lstrlenA (lpString="\x92\x07") returned 2 [0098.841] lstrlenA (lpString="\x92\x07") returned 2 [0098.841] lstrlenA (lpString="\x92\x07") returned 2 [0098.841] lstrlenA (lpString="\x92\x07") returned 2 [0098.841] lstrlenA (lpString="\x92\x07") returned 2 [0098.841] lstrlenA (lpString="\x92\x07") returned 2 [0098.841] capGetDriverDescriptionA () returned 0x0 [0098.842] GetLastError () returned 0x0 [0098.842] SetLastError (dwErrCode=0x0) [0098.842] OpenThemeData () returned 0x1f0000 [0098.842] GetSystemMetrics (nIndex=32) returned 4 [0098.842] GetSystemMetrics (nIndex=33) returned 4 [0098.842] CloseThemeData () returned 0x0 [0098.843] lstrlenA (lpString="\x92\x07") returned 2 [0098.843] lstrlenA (lpString="\x92\x07") returned 2 [0098.843] lstrlenA (lpString="\x92\x07") returned 2 [0098.843] lstrlenA (lpString="\x92\x07") returned 2 [0098.843] lstrlenA (lpString="\x92\x07") returned 2 [0098.843] lstrlenA (lpString="\x92\x07") returned 2 [0098.843] capGetDriverDescriptionA () returned 0x0 [0098.843] GetLastError () returned 0x0 [0098.843] SetLastError (dwErrCode=0x0) [0098.843] OpenThemeData () returned 0x200000 [0098.844] GetSystemMetrics (nIndex=32) returned 4 [0098.844] GetSystemMetrics (nIndex=33) returned 4 [0098.844] CloseThemeData () returned 0x0 [0098.844] lstrlenA (lpString="\x92\x07") returned 2 [0098.844] lstrlenA (lpString="\x92\x07") returned 2 [0098.844] lstrlenA (lpString="\x92\x07") returned 2 [0098.844] lstrlenA (lpString="\x92\x07") returned 2 [0098.844] lstrlenA (lpString="\x92\x07") returned 2 [0098.844] lstrlenA (lpString="\x92\x07") returned 2 [0098.844] capGetDriverDescriptionA () returned 0x0 [0098.845] GetLastError () returned 0x0 [0098.845] SetLastError (dwErrCode=0x0) [0098.845] OpenThemeData () returned 0x210000 [0098.845] GetSystemMetrics (nIndex=32) returned 4 [0098.845] GetSystemMetrics (nIndex=33) returned 4 [0098.845] CloseThemeData () returned 0x0 [0098.846] lstrlenA (lpString="\x92\x07") returned 2 [0098.846] lstrlenA (lpString="\x92\x07") returned 2 [0098.846] lstrlenA (lpString="\x92\x07") returned 2 [0098.846] lstrlenA (lpString="\x92\x07") returned 2 [0098.846] lstrlenA (lpString="\x92\x07") returned 2 [0098.846] lstrlenA (lpString="\x92\x07") returned 2 [0098.846] capGetDriverDescriptionA () returned 0x0 [0098.846] GetLastError () returned 0x0 [0098.846] SetLastError (dwErrCode=0x0) [0098.846] OpenThemeData () returned 0x220000 [0098.847] GetSystemMetrics (nIndex=32) returned 4 [0098.847] GetSystemMetrics (nIndex=33) returned 4 [0098.847] CloseThemeData () returned 0x0 [0098.847] lstrlenA (lpString="\x92\x07") returned 2 [0098.847] lstrlenA (lpString="\x92\x07") returned 2 [0098.847] lstrlenA (lpString="\x92\x07") returned 2 [0098.847] lstrlenA (lpString="\x92\x07") returned 2 [0098.847] lstrlenA (lpString="\x92\x07") returned 2 [0098.847] lstrlenA (lpString="\x92\x07") returned 2 [0098.847] capGetDriverDescriptionA () returned 0x0 [0098.848] GetLastError () returned 0x0 [0098.848] SetLastError (dwErrCode=0x0) [0098.848] OpenThemeData () returned 0x230000 [0098.848] GetSystemMetrics (nIndex=32) returned 4 [0098.849] GetSystemMetrics (nIndex=33) returned 4 [0098.849] CloseThemeData () returned 0x0 [0098.849] lstrlenA (lpString="\x92\x07") returned 2 [0098.849] lstrlenA (lpString="\x92\x07") returned 2 [0098.849] lstrlenA (lpString="\x92\x07") returned 2 [0098.849] lstrlenA (lpString="\x92\x07") returned 2 [0098.849] lstrlenA (lpString="\x92\x07") returned 2 [0098.849] lstrlenA (lpString="\x92\x07") returned 2 [0098.849] capGetDriverDescriptionA () returned 0x0 [0098.850] GetLastError () returned 0x0 [0098.850] SetLastError (dwErrCode=0x0) [0098.850] OpenThemeData () returned 0x240000 [0098.850] GetSystemMetrics (nIndex=32) returned 4 [0098.850] GetSystemMetrics (nIndex=33) returned 4 [0098.850] CloseThemeData () returned 0x0 [0098.850] lstrlenA (lpString="\x92\x07") returned 2 [0098.851] lstrlenA (lpString="\x92\x07") returned 2 [0098.851] lstrlenA (lpString="\x92\x07") returned 2 [0098.851] lstrlenA (lpString="\x92\x07") returned 2 [0098.851] lstrlenA (lpString="\x92\x07") returned 2 [0098.851] lstrlenA (lpString="\x92\x07") returned 2 [0098.851] capGetDriverDescriptionA () returned 0x0 [0098.851] GetLastError () returned 0x0 [0098.851] SetLastError (dwErrCode=0x0) [0098.851] OpenThemeData () returned 0x250000 [0098.852] GetSystemMetrics (nIndex=32) returned 4 [0098.852] GetSystemMetrics (nIndex=33) returned 4 [0098.852] CloseThemeData () returned 0x0 [0098.852] lstrlenA (lpString="\x92\x07") returned 2 [0098.852] lstrlenA (lpString="\x92\x07") returned 2 [0098.852] lstrlenA (lpString="\x92\x07") returned 2 [0098.852] lstrlenA (lpString="\x92\x07") returned 2 [0098.852] lstrlenA (lpString="\x92\x07") returned 2 [0098.852] lstrlenA (lpString="\x92\x07") returned 2 [0098.852] capGetDriverDescriptionA () returned 0x0 [0098.853] GetLastError () returned 0x0 [0098.853] SetLastError (dwErrCode=0x0) [0098.853] OpenThemeData () returned 0x260000 [0098.853] GetSystemMetrics (nIndex=32) returned 4 [0098.853] GetSystemMetrics (nIndex=33) returned 4 [0098.853] CloseThemeData () returned 0x0 [0098.854] lstrlenA (lpString="\x92\x07") returned 2 [0098.854] lstrlenA (lpString="\x92\x07") returned 2 [0098.854] lstrlenA (lpString="\x92\x07") returned 2 [0098.854] lstrlenA (lpString="\x92\x07") returned 2 [0098.854] lstrlenA (lpString="\x92\x07") returned 2 [0098.854] lstrlenA (lpString="\x92\x07") returned 2 [0098.854] capGetDriverDescriptionA () returned 0x0 [0098.855] GetLastError () returned 0x0 [0098.855] SetLastError (dwErrCode=0x0) [0098.855] OpenThemeData () returned 0x270000 [0098.855] GetSystemMetrics (nIndex=32) returned 4 [0098.855] GetSystemMetrics (nIndex=33) returned 4 [0098.855] CloseThemeData () returned 0x0 [0098.855] lstrlenA (lpString="\x92\x07") returned 2 [0098.855] lstrlenA (lpString="\x92\x07") returned 2 [0098.855] lstrlenA (lpString="\x92\x07") returned 2 [0098.856] lstrlenA (lpString="\x92\x07") returned 2 [0098.856] lstrlenA (lpString="\x92\x07") returned 2 [0098.856] lstrlenA (lpString="\x92\x07") returned 2 [0098.856] capGetDriverDescriptionA () returned 0x0 [0098.856] GetLastError () returned 0x0 [0098.856] SetLastError (dwErrCode=0x0) [0098.856] OpenThemeData () returned 0x280000 [0098.857] GetSystemMetrics (nIndex=32) returned 4 [0098.857] GetSystemMetrics (nIndex=33) returned 4 [0098.857] CloseThemeData () returned 0x0 [0098.857] lstrlenA (lpString="\x92\x07") returned 2 [0098.857] lstrlenA (lpString="\x92\x07") returned 2 [0098.857] lstrlenA (lpString="\x92\x07") returned 2 [0098.857] lstrlenA (lpString="\x92\x07") returned 2 [0098.857] lstrlenA (lpString="\x92\x07") returned 2 [0098.857] lstrlenA (lpString="\x92\x07") returned 2 [0098.857] capGetDriverDescriptionA () returned 0x0 [0098.858] GetLastError () returned 0x0 [0098.858] SetLastError (dwErrCode=0x0) [0098.858] OpenThemeData () returned 0x290000 [0098.858] GetSystemMetrics (nIndex=32) returned 4 [0098.858] GetSystemMetrics (nIndex=33) returned 4 [0098.858] CloseThemeData () returned 0x0 [0098.859] lstrlenA (lpString="\x92\x07") returned 2 [0098.859] lstrlenA (lpString="\x92\x07") returned 2 [0098.859] lstrlenA (lpString="\x92\x07") returned 2 [0098.859] lstrlenA (lpString="\x92\x07") returned 2 [0098.859] lstrlenA (lpString="\x92\x07") returned 2 [0098.859] lstrlenA (lpString="\x92\x07") returned 2 [0098.859] capGetDriverDescriptionA () returned 0x0 [0098.860] GetLastError () returned 0x0 [0098.860] SetLastError (dwErrCode=0x0) [0098.860] OpenThemeData () returned 0x2a0000 [0098.861] GetSystemMetrics (nIndex=32) returned 4 [0098.861] GetSystemMetrics (nIndex=33) returned 4 [0098.861] CloseThemeData () returned 0x0 [0098.861] lstrlenA (lpString="\x92\x07") returned 2 [0098.861] lstrlenA (lpString="\x92\x07") returned 2 [0098.861] lstrlenA (lpString="\x92\x07") returned 2 [0098.861] lstrlenA (lpString="\x92\x07") returned 2 [0098.861] lstrlenA (lpString="\x92\x07") returned 2 [0098.861] lstrlenA (lpString="\x92\x07") returned 2 [0098.861] capGetDriverDescriptionA () returned 0x0 [0098.862] GetLastError () returned 0x0 [0098.862] SetLastError (dwErrCode=0x0) [0098.862] OpenThemeData () returned 0x2b0000 [0098.862] GetSystemMetrics (nIndex=32) returned 4 [0098.862] GetSystemMetrics (nIndex=33) returned 4 [0098.862] CloseThemeData () returned 0x0 [0098.863] lstrlenA (lpString="\x92\x07") returned 2 [0098.863] lstrlenA (lpString="\x92\x07") returned 2 [0098.863] lstrlenA (lpString="\x92\x07") returned 2 [0098.863] lstrlenA (lpString="\x92\x07") returned 2 [0098.863] lstrlenA (lpString="\x92\x07") returned 2 [0098.863] lstrlenA (lpString="\x92\x07") returned 2 [0098.863] capGetDriverDescriptionA () returned 0x0 [0098.863] GetLastError () returned 0x0 [0098.863] SetLastError (dwErrCode=0x0) [0098.863] OpenThemeData () returned 0x2c0000 [0098.864] GetSystemMetrics (nIndex=32) returned 4 [0098.864] GetSystemMetrics (nIndex=33) returned 4 [0098.864] CloseThemeData () returned 0x0 [0098.864] lstrlenA (lpString="\x92\x07") returned 2 [0098.864] lstrlenA (lpString="\x92\x07") returned 2 [0098.864] lstrlenA (lpString="\x92\x07") returned 2 [0098.864] lstrlenA (lpString="\x92\x07") returned 2 [0098.864] lstrlenA (lpString="\x92\x07") returned 2 [0098.864] lstrlenA (lpString="\x92\x07") returned 2 [0098.864] capGetDriverDescriptionA () returned 0x0 [0098.865] GetLastError () returned 0x0 [0098.865] SetLastError (dwErrCode=0x0) [0098.865] OpenThemeData () returned 0x2d0000 [0098.865] GetSystemMetrics (nIndex=32) returned 4 [0098.865] GetSystemMetrics (nIndex=33) returned 4 [0098.865] CloseThemeData () returned 0x0 [0098.866] lstrlenA (lpString="\x92\x07") returned 2 [0098.866] lstrlenA (lpString="\x92\x07") returned 2 [0098.866] lstrlenA (lpString="\x92\x07") returned 2 [0098.866] lstrlenA (lpString="\x92\x07") returned 2 [0098.866] lstrlenA (lpString="\x92\x07") returned 2 [0098.866] lstrlenA (lpString="\x92\x07") returned 2 [0098.866] capGetDriverDescriptionA () returned 0x0 [0098.866] GetLastError () returned 0x0 [0098.867] SetLastError (dwErrCode=0x0) [0098.867] OpenThemeData () returned 0x2e0000 [0098.867] GetSystemMetrics (nIndex=32) returned 4 [0098.867] GetSystemMetrics (nIndex=33) returned 4 [0098.867] CloseThemeData () returned 0x0 [0098.867] lstrlenA (lpString="\x92\x07") returned 2 [0098.867] lstrlenA (lpString="\x92\x07") returned 2 [0098.867] lstrlenA (lpString="\x92\x07") returned 2 [0098.867] lstrlenA (lpString="\x92\x07") returned 2 [0098.867] lstrlenA (lpString="\x92\x07") returned 2 [0098.867] lstrlenA (lpString="\x92\x07") returned 2 [0098.867] capGetDriverDescriptionA () returned 0x0 [0098.869] GetLastError () returned 0x0 [0098.869] SetLastError (dwErrCode=0x0) [0098.869] OpenThemeData () returned 0x2f0000 [0098.869] GetSystemMetrics (nIndex=32) returned 4 [0098.869] GetSystemMetrics (nIndex=33) returned 4 [0098.869] CloseThemeData () returned 0x0 [0098.869] lstrlenA (lpString="\x92\x07") returned 2 [0098.869] lstrlenA (lpString="\x92\x07") returned 2 [0098.870] lstrlenA (lpString="\x92\x07") returned 2 [0098.870] lstrlenA (lpString="\x92\x07") returned 2 [0098.870] lstrlenA (lpString="\x92\x07") returned 2 [0098.870] lstrlenA (lpString="\x92\x07") returned 2 [0098.870] capGetDriverDescriptionA () returned 0x0 [0098.870] GetLastError () returned 0x0 [0098.870] SetLastError (dwErrCode=0x0) [0098.870] OpenThemeData () returned 0x300000 [0098.871] GetSystemMetrics (nIndex=32) returned 4 [0098.871] GetSystemMetrics (nIndex=33) returned 4 [0098.871] CloseThemeData () returned 0x0 [0098.871] lstrlenA (lpString="\x92\x07") returned 2 [0098.871] lstrlenA (lpString="\x92\x07") returned 2 [0098.871] lstrlenA (lpString="\x92\x07") returned 2 [0098.871] lstrlenA (lpString="\x92\x07") returned 2 [0098.871] lstrlenA (lpString="\x92\x07") returned 2 [0098.871] lstrlenA (lpString="\x92\x07") returned 2 [0098.871] capGetDriverDescriptionA () returned 0x0 [0098.872] GetLastError () returned 0x0 [0098.872] SetLastError (dwErrCode=0x0) [0098.872] OpenThemeData () returned 0x310000 [0098.872] GetSystemMetrics (nIndex=32) returned 4 [0098.872] GetSystemMetrics (nIndex=33) returned 4 [0098.872] CloseThemeData () returned 0x0 [0098.873] lstrlenA (lpString="\x92\x07") returned 2 [0098.873] lstrlenA (lpString="\x92\x07") returned 2 [0098.873] lstrlenA (lpString="\x92\x07") returned 2 [0098.873] lstrlenA (lpString="\x92\x07") returned 2 [0098.873] lstrlenA (lpString="\x92\x07") returned 2 [0098.873] lstrlenA (lpString="\x92\x07") returned 2 [0098.873] capGetDriverDescriptionA () returned 0x0 [0098.873] GetLastError () returned 0x0 [0098.874] SetLastError (dwErrCode=0x0) [0098.874] OpenThemeData () returned 0x320000 [0098.874] GetSystemMetrics (nIndex=32) returned 4 [0098.874] GetSystemMetrics (nIndex=33) returned 4 [0098.874] CloseThemeData () returned 0x0 [0098.874] lstrlenA (lpString="\x92\x07") returned 2 [0098.874] lstrlenA (lpString="\x92\x07") returned 2 [0098.874] lstrlenA (lpString="\x92\x07") returned 2 [0098.874] lstrlenA (lpString="\x92\x07") returned 2 [0098.874] lstrlenA (lpString="\x92\x07") returned 2 [0098.874] lstrlenA (lpString="\x92\x07") returned 2 [0098.874] capGetDriverDescriptionA () returned 0x0 [0098.875] GetLastError () returned 0x0 [0098.875] SetLastError (dwErrCode=0x0) [0098.875] OpenThemeData () returned 0x330000 [0098.876] GetSystemMetrics (nIndex=32) returned 4 [0098.876] GetSystemMetrics (nIndex=33) returned 4 [0098.876] CloseThemeData () returned 0x0 [0098.876] lstrlenA (lpString="\x92\x07") returned 2 [0098.876] lstrlenA (lpString="\x92\x07") returned 2 [0098.876] lstrlenA (lpString="\x92\x07") returned 2 [0098.876] lstrlenA (lpString="\x92\x07") returned 2 [0098.876] lstrlenA (lpString="\x92\x07") returned 2 [0098.876] lstrlenA (lpString="\x92\x07") returned 2 [0098.876] capGetDriverDescriptionA () returned 0x0 [0098.877] GetLastError () returned 0x0 [0098.877] SetLastError (dwErrCode=0x0) [0098.877] OpenThemeData () returned 0x340000 [0098.877] GetSystemMetrics (nIndex=32) returned 4 [0098.877] GetSystemMetrics (nIndex=33) returned 4 [0098.877] CloseThemeData () returned 0x0 [0098.877] lstrlenA (lpString="\x92\x07") returned 2 [0098.878] lstrlenA (lpString="\x92\x07") returned 2 [0098.878] lstrlenA (lpString="\x92\x07") returned 2 [0098.878] lstrlenA (lpString="\x92\x07") returned 2 [0098.878] lstrlenA (lpString="\x92\x07") returned 2 [0098.878] lstrlenA (lpString="\x92\x07") returned 2 [0098.878] capGetDriverDescriptionA () returned 0x0 [0098.878] GetLastError () returned 0x0 [0098.878] SetLastError (dwErrCode=0x0) [0098.878] OpenThemeData () returned 0x350000 [0098.879] GetSystemMetrics (nIndex=32) returned 4 [0098.879] GetSystemMetrics (nIndex=33) returned 4 [0098.879] CloseThemeData () returned 0x0 [0098.879] lstrlenA (lpString="\x92\x07") returned 2 [0098.879] lstrlenA (lpString="\x92\x07") returned 2 [0098.879] lstrlenA (lpString="\x92\x07") returned 2 [0098.879] lstrlenA (lpString="\x92\x07") returned 2 [0098.879] lstrlenA (lpString="\x92\x07") returned 2 [0098.879] lstrlenA (lpString="\x92\x07") returned 2 [0098.879] capGetDriverDescriptionA () returned 0x0 [0098.880] GetLastError () returned 0x0 [0098.880] SetLastError (dwErrCode=0x0) [0098.880] OpenThemeData () returned 0x360000 [0098.880] GetSystemMetrics (nIndex=32) returned 4 [0098.880] GetSystemMetrics (nIndex=33) returned 4 [0098.880] CloseThemeData () returned 0x0 [0098.881] lstrlenA (lpString="\x92\x07") returned 2 [0098.881] lstrlenA (lpString="\x92\x07") returned 2 [0098.881] lstrlenA (lpString="\x92\x07") returned 2 [0098.881] lstrlenA (lpString="\x92\x07") returned 2 [0098.881] lstrlenA (lpString="\x92\x07") returned 2 [0098.881] lstrlenA (lpString="\x92\x07") returned 2 [0098.881] capGetDriverDescriptionA () returned 0x0 [0098.881] GetLastError () returned 0x0 [0098.881] SetLastError (dwErrCode=0x0) [0098.881] OpenThemeData () returned 0x370000 [0098.882] GetSystemMetrics (nIndex=32) returned 4 [0098.882] GetSystemMetrics (nIndex=33) returned 4 [0098.882] CloseThemeData () returned 0x0 [0098.882] lstrlenA (lpString="\x92\x07") returned 2 [0098.882] lstrlenA (lpString="\x92\x07") returned 2 [0098.882] lstrlenA (lpString="\x92\x07") returned 2 [0098.882] lstrlenA (lpString="\x92\x07") returned 2 [0098.882] lstrlenA (lpString="\x92\x07") returned 2 [0098.882] lstrlenA (lpString="\x92\x07") returned 2 [0098.882] capGetDriverDescriptionA () returned 0x0 [0098.883] GetLastError () returned 0x0 [0098.883] SetLastError (dwErrCode=0x0) [0098.883] OpenThemeData () returned 0x380000 [0098.883] GetSystemMetrics (nIndex=32) returned 4 [0098.883] GetSystemMetrics (nIndex=33) returned 4 [0098.883] CloseThemeData () returned 0x0 [0099.165] lstrlenA (lpString="\x92\x07") returned 2 [0099.165] lstrlenA (lpString="\x92\x07") returned 2 [0099.165] lstrlenA (lpString="\x92\x07") returned 2 [0099.165] lstrlenA (lpString="\x92\x07") returned 2 [0099.165] lstrlenA (lpString="\x92\x07") returned 2 [0099.165] lstrlenA (lpString="\x92\x07") returned 2 [0099.165] capGetDriverDescriptionA () returned 0x0 [0099.166] GetLastError () returned 0x0 [0099.166] SetLastError (dwErrCode=0x0) [0099.166] OpenThemeData () returned 0x390000 [0099.167] GetSystemMetrics (nIndex=32) returned 4 [0099.167] GetSystemMetrics (nIndex=33) returned 4 [0099.167] CloseThemeData () returned 0x0 [0099.167] lstrlenA (lpString="\x92\x07") returned 2 [0099.167] lstrlenA (lpString="\x92\x07") returned 2 [0099.167] lstrlenA (lpString="\x92\x07") returned 2 [0099.167] lstrlenA (lpString="\x92\x07") returned 2 [0099.167] lstrlenA (lpString="\x92\x07") returned 2 [0099.167] lstrlenA (lpString="\x92\x07") returned 2 [0099.167] capGetDriverDescriptionA () returned 0x0 [0099.168] GetLastError () returned 0x0 [0099.168] SetLastError (dwErrCode=0x0) [0099.168] OpenThemeData () returned 0x3a0000 [0099.168] GetSystemMetrics (nIndex=32) returned 4 [0099.168] GetSystemMetrics (nIndex=33) returned 4 [0099.168] CloseThemeData () returned 0x0 [0099.169] lstrlenA (lpString="\x92\x07") returned 2 [0099.169] lstrlenA (lpString="\x92\x07") returned 2 [0099.169] lstrlenA (lpString="\x92\x07") returned 2 [0099.169] lstrlenA (lpString="\x92\x07") returned 2 [0099.169] lstrlenA (lpString="\x92\x07") returned 2 [0099.169] lstrlenA (lpString="\x92\x07") returned 2 [0099.169] capGetDriverDescriptionA () returned 0x0 [0099.169] GetLastError () returned 0x0 [0099.169] SetLastError (dwErrCode=0x0) [0099.169] OpenThemeData () returned 0x3b0000 [0099.170] GetSystemMetrics (nIndex=32) returned 4 [0099.170] GetSystemMetrics (nIndex=33) returned 4 [0099.170] CloseThemeData () returned 0x0 [0099.170] lstrlenA (lpString="\x92\x07") returned 2 [0099.170] lstrlenA (lpString="\x92\x07") returned 2 [0099.170] lstrlenA (lpString="\x92\x07") returned 2 [0099.170] lstrlenA (lpString="\x92\x07") returned 2 [0099.170] lstrlenA (lpString="\x92\x07") returned 2 [0099.170] lstrlenA (lpString="\x92\x07") returned 2 [0099.170] capGetDriverDescriptionA () returned 0x0 [0099.171] GetLastError () returned 0x0 [0099.171] SetLastError (dwErrCode=0x0) [0099.171] OpenThemeData () returned 0x3c0000 [0099.171] GetSystemMetrics (nIndex=32) returned 4 [0099.171] GetSystemMetrics (nIndex=33) returned 4 [0099.171] CloseThemeData () returned 0x0 [0099.172] lstrlenA (lpString="\x92\x07") returned 2 [0099.172] lstrlenA (lpString="\x92\x07") returned 2 [0099.172] lstrlenA (lpString="\x92\x07") returned 2 [0099.172] lstrlenA (lpString="\x92\x07") returned 2 [0099.172] lstrlenA (lpString="\x92\x07") returned 2 [0099.172] lstrlenA (lpString="\x92\x07") returned 2 [0099.172] capGetDriverDescriptionA () returned 0x0 [0099.172] GetLastError () returned 0x0 [0099.172] SetLastError (dwErrCode=0x0) [0099.172] OpenThemeData () returned 0x3d0000 [0099.173] GetSystemMetrics (nIndex=32) returned 4 [0099.173] GetSystemMetrics (nIndex=33) returned 4 [0099.173] CloseThemeData () returned 0x0 [0099.173] lstrlenA (lpString="\x92\x07") returned 2 [0099.173] lstrlenA (lpString="\x92\x07") returned 2 [0099.173] lstrlenA (lpString="\x92\x07") returned 2 [0099.173] lstrlenA (lpString="\x92\x07") returned 2 [0099.173] lstrlenA (lpString="\x92\x07") returned 2 [0099.173] lstrlenA (lpString="\x92\x07") returned 2 [0099.173] capGetDriverDescriptionA () returned 0x0 [0099.174] GetLastError () returned 0x0 [0099.174] SetLastError (dwErrCode=0x0) [0099.174] OpenThemeData () returned 0x3e0000 [0099.174] GetSystemMetrics (nIndex=32) returned 4 [0099.174] GetSystemMetrics (nIndex=33) returned 4 [0099.174] CloseThemeData () returned 0x0 [0099.175] lstrlenA (lpString="\x92\x07") returned 2 [0099.175] lstrlenA (lpString="\x92\x07") returned 2 [0099.175] lstrlenA (lpString="\x92\x07") returned 2 [0099.175] lstrlenA (lpString="\x92\x07") returned 2 [0099.175] lstrlenA (lpString="\x92\x07") returned 2 [0099.175] lstrlenA (lpString="\x92\x07") returned 2 [0099.175] capGetDriverDescriptionA () returned 0x0 [0099.175] GetLastError () returned 0x0 [0099.175] SetLastError (dwErrCode=0x0) [0099.175] OpenThemeData () returned 0x3f0000 [0099.176] GetSystemMetrics (nIndex=32) returned 4 [0099.176] GetSystemMetrics (nIndex=33) returned 4 [0099.176] CloseThemeData () returned 0x0 [0099.176] lstrlenA (lpString="\x92\x07") returned 2 [0099.176] lstrlenA (lpString="\x92\x07") returned 2 [0099.176] lstrlenA (lpString="\x92\x07") returned 2 [0099.176] lstrlenA (lpString="\x92\x07") returned 2 [0099.176] lstrlenA (lpString="\x92\x07") returned 2 [0099.176] lstrlenA (lpString="\x92\x07") returned 2 [0099.176] capGetDriverDescriptionA () returned 0x0 [0099.177] GetLastError () returned 0x0 [0099.177] SetLastError (dwErrCode=0x0) [0099.177] OpenThemeData () returned 0x400000 [0099.177] GetSystemMetrics (nIndex=32) returned 4 [0099.177] GetSystemMetrics (nIndex=33) returned 4 [0099.177] CloseThemeData () returned 0x0 [0099.178] lstrlenA (lpString="\x92\x07") returned 2 [0099.178] lstrlenA (lpString="\x92\x07") returned 2 [0099.178] lstrlenA (lpString="\x92\x07") returned 2 [0099.178] lstrlenA (lpString="\x92\x07") returned 2 [0099.178] lstrlenA (lpString="\x92\x07") returned 2 [0099.178] lstrlenA (lpString="\x92\x07") returned 2 [0099.178] capGetDriverDescriptionA () returned 0x0 [0099.178] GetLastError () returned 0x0 [0099.178] SetLastError (dwErrCode=0x0) [0099.178] OpenThemeData () returned 0x410000 [0099.179] GetSystemMetrics (nIndex=32) returned 4 [0099.179] GetSystemMetrics (nIndex=33) returned 4 [0099.179] CloseThemeData () returned 0x0 [0099.179] lstrlenA (lpString="\x92\x07") returned 2 [0099.179] lstrlenA (lpString="\x92\x07") returned 2 [0099.179] lstrlenA (lpString="\x92\x07") returned 2 [0099.179] lstrlenA (lpString="\x92\x07") returned 2 [0099.179] lstrlenA (lpString="\x92\x07") returned 2 [0099.179] lstrlenA (lpString="\x92\x07") returned 2 [0099.179] capGetDriverDescriptionA () returned 0x0 [0099.180] GetLastError () returned 0x0 [0099.180] SetLastError (dwErrCode=0x0) [0099.180] OpenThemeData () returned 0x420000 [0099.180] GetSystemMetrics (nIndex=32) returned 4 [0099.180] GetSystemMetrics (nIndex=33) returned 4 [0099.180] CloseThemeData () returned 0x0 [0099.181] lstrlenA (lpString="\x92\x07") returned 2 [0099.181] lstrlenA (lpString="\x92\x07") returned 2 [0099.181] lstrlenA (lpString="\x92\x07") returned 2 [0099.181] lstrlenA (lpString="\x92\x07") returned 2 [0099.181] lstrlenA (lpString="\x92\x07") returned 2 [0099.181] lstrlenA (lpString="\x92\x07") returned 2 [0099.181] capGetDriverDescriptionA () returned 0x0 [0099.182] GetLastError () returned 0x0 [0099.182] SetLastError (dwErrCode=0x0) [0099.182] OpenThemeData () returned 0x430000 [0099.182] GetSystemMetrics (nIndex=32) returned 4 [0099.182] GetSystemMetrics (nIndex=33) returned 4 [0099.182] CloseThemeData () returned 0x0 [0099.182] lstrlenA (lpString="\x92\x07") returned 2 [0099.182] lstrlenA (lpString="\x92\x07") returned 2 [0099.182] lstrlenA (lpString="\x92\x07") returned 2 [0099.182] lstrlenA (lpString="\x92\x07") returned 2 [0099.182] lstrlenA (lpString="\x92\x07") returned 2 [0099.182] lstrlenA (lpString="\x92\x07") returned 2 [0099.183] capGetDriverDescriptionA () returned 0x0 [0099.183] GetLastError () returned 0x0 [0099.183] SetLastError (dwErrCode=0x0) [0099.183] OpenThemeData () returned 0x440000 [0099.184] GetSystemMetrics (nIndex=32) returned 4 [0099.184] GetSystemMetrics (nIndex=33) returned 4 [0099.184] CloseThemeData () returned 0x0 [0099.184] lstrlenA (lpString="\x92\x07") returned 2 [0099.184] lstrlenA (lpString="\x92\x07") returned 2 [0099.184] lstrlenA (lpString="\x92\x07") returned 2 [0099.184] lstrlenA (lpString="\x92\x07") returned 2 [0099.184] lstrlenA (lpString="\x92\x07") returned 2 [0099.184] lstrlenA (lpString="\x92\x07") returned 2 [0099.184] capGetDriverDescriptionA () returned 0x0 [0099.185] GetLastError () returned 0x0 [0099.185] SetLastError (dwErrCode=0x0) [0099.185] OpenThemeData () returned 0x450000 [0099.185] GetSystemMetrics (nIndex=32) returned 4 [0099.185] GetSystemMetrics (nIndex=33) returned 4 [0099.185] CloseThemeData () returned 0x0 [0099.185] lstrlenA (lpString="\x92\x07") returned 2 [0099.185] lstrlenA (lpString="\x92\x07") returned 2 [0099.185] lstrlenA (lpString="\x92\x07") returned 2 [0099.185] lstrlenA (lpString="\x92\x07") returned 2 [0099.185] lstrlenA (lpString="\x92\x07") returned 2 [0099.185] lstrlenA (lpString="\x92\x07") returned 2 [0099.186] capGetDriverDescriptionA () returned 0x0 [0099.186] GetLastError () returned 0x0 [0099.186] SetLastError (dwErrCode=0x0) [0099.186] OpenThemeData () returned 0x460000 [0099.187] GetSystemMetrics (nIndex=32) returned 4 [0099.187] GetSystemMetrics (nIndex=33) returned 4 [0099.187] CloseThemeData () returned 0x0 [0099.187] lstrlenA (lpString="\x92\x07") returned 2 [0099.187] lstrlenA (lpString="\x92\x07") returned 2 [0099.187] lstrlenA (lpString="\x92\x07") returned 2 [0099.187] lstrlenA (lpString="\x92\x07") returned 2 [0099.187] lstrlenA (lpString="\x92\x07") returned 2 [0099.187] lstrlenA (lpString="\x92\x07") returned 2 [0099.187] capGetDriverDescriptionA () returned 0x0 [0099.188] GetLastError () returned 0x0 [0099.188] SetLastError (dwErrCode=0x0) [0099.188] OpenThemeData () returned 0x470000 [0099.188] GetSystemMetrics (nIndex=32) returned 4 [0099.188] GetSystemMetrics (nIndex=33) returned 4 [0099.188] CloseThemeData () returned 0x0 [0099.188] lstrlenA (lpString="\x92\x07") returned 2 [0099.188] lstrlenA (lpString="\x92\x07") returned 2 [0099.188] lstrlenA (lpString="\x92\x07") returned 2 [0099.188] lstrlenA (lpString="\x92\x07") returned 2 [0099.188] lstrlenA (lpString="\x92\x07") returned 2 [0099.188] lstrlenA (lpString="\x92\x07") returned 2 [0099.189] capGetDriverDescriptionA () returned 0x0 [0099.189] GetLastError () returned 0x0 [0099.189] SetLastError (dwErrCode=0x0) [0099.189] OpenThemeData () returned 0x480000 [0099.190] GetSystemMetrics (nIndex=32) returned 4 [0099.190] GetSystemMetrics (nIndex=33) returned 4 [0099.190] CloseThemeData () returned 0x0 [0099.190] lstrlenA (lpString="\x92\x07") returned 2 [0099.190] lstrlenA (lpString="\x92\x07") returned 2 [0099.190] lstrlenA (lpString="\x92\x07") returned 2 [0099.190] lstrlenA (lpString="\x92\x07") returned 2 [0099.190] lstrlenA (lpString="\x92\x07") returned 2 [0099.190] lstrlenA (lpString="\x92\x07") returned 2 [0099.190] capGetDriverDescriptionA () returned 0x0 [0099.191] GetLastError () returned 0x0 [0099.191] SetLastError (dwErrCode=0x0) [0099.191] OpenThemeData () returned 0x490000 [0099.191] GetSystemMetrics (nIndex=32) returned 4 [0099.191] GetSystemMetrics (nIndex=33) returned 4 [0099.191] CloseThemeData () returned 0x0 [0099.191] lstrlenA (lpString="\x92\x07") returned 2 [0099.191] lstrlenA (lpString="\x92\x07") returned 2 [0099.191] lstrlenA (lpString="\x92\x07") returned 2 [0099.191] lstrlenA (lpString="\x92\x07") returned 2 [0099.191] lstrlenA (lpString="\x92\x07") returned 2 [0099.191] lstrlenA (lpString="\x92\x07") returned 2 [0099.191] capGetDriverDescriptionA () returned 0x0 [0099.193] GetLastError () returned 0x0 [0099.193] SetLastError (dwErrCode=0x0) [0099.193] OpenThemeData () returned 0x4a0000 [0099.193] GetSystemMetrics (nIndex=32) returned 4 [0099.193] GetSystemMetrics (nIndex=33) returned 4 [0099.193] CloseThemeData () returned 0x0 [0099.193] lstrlenA (lpString="\x92\x07") returned 2 [0099.194] lstrlenA (lpString="\x92\x07") returned 2 [0099.194] lstrlenA (lpString="\x92\x07") returned 2 [0099.194] lstrlenA (lpString="\x92\x07") returned 2 [0099.194] lstrlenA (lpString="\x92\x07") returned 2 [0099.194] lstrlenA (lpString="\x92\x07") returned 2 [0099.194] capGetDriverDescriptionA () returned 0x0 [0099.194] GetLastError () returned 0x0 [0099.194] SetLastError (dwErrCode=0x0) [0099.194] OpenThemeData () returned 0x4b0000 [0099.195] GetSystemMetrics (nIndex=32) returned 4 [0099.195] GetSystemMetrics (nIndex=33) returned 4 [0099.195] CloseThemeData () returned 0x0 [0099.195] lstrlenA (lpString="\x92\x07") returned 2 [0099.195] lstrlenA (lpString="\x92\x07") returned 2 [0099.195] lstrlenA (lpString="\x92\x07") returned 2 [0099.195] lstrlenA (lpString="\x92\x07") returned 2 [0099.195] lstrlenA (lpString="\x92\x07") returned 2 [0099.195] lstrlenA (lpString="\x92\x07") returned 2 [0099.195] capGetDriverDescriptionA () returned 0x0 [0099.196] GetLastError () returned 0x0 [0099.196] SetLastError (dwErrCode=0x0) [0099.196] OpenThemeData () returned 0x4c0000 [0099.196] GetSystemMetrics (nIndex=32) returned 4 [0099.196] GetSystemMetrics (nIndex=33) returned 4 [0099.196] CloseThemeData () returned 0x0 [0099.197] lstrlenA (lpString="\x92\x07") returned 2 [0099.197] lstrlenA (lpString="\x92\x07") returned 2 [0099.197] lstrlenA (lpString="\x92\x07") returned 2 [0099.197] lstrlenA (lpString="\x92\x07") returned 2 [0099.197] lstrlenA (lpString="\x92\x07") returned 2 [0099.197] lstrlenA (lpString="\x92\x07") returned 2 [0099.197] capGetDriverDescriptionA () returned 0x0 [0099.197] GetLastError () returned 0x0 [0099.198] SetLastError (dwErrCode=0x0) [0099.198] OpenThemeData () returned 0x4d0000 [0099.198] GetSystemMetrics (nIndex=32) returned 4 [0099.198] GetSystemMetrics (nIndex=33) returned 4 [0099.198] CloseThemeData () returned 0x0 [0099.198] lstrlenA (lpString="\x92\x07") returned 2 [0099.198] lstrlenA (lpString="\x92\x07") returned 2 [0099.198] lstrlenA (lpString="\x92\x07") returned 2 [0099.198] lstrlenA (lpString="\x92\x07") returned 2 [0099.198] lstrlenA (lpString="\x92\x07") returned 2 [0099.198] lstrlenA (lpString="\x92\x07") returned 2 [0099.198] capGetDriverDescriptionA () returned 0x0 [0099.199] GetLastError () returned 0x0 [0099.199] SetLastError (dwErrCode=0x0) [0099.199] OpenThemeData () returned 0x4e0000 [0099.199] GetSystemMetrics (nIndex=32) returned 4 [0099.199] GetSystemMetrics (nIndex=33) returned 4 [0099.199] CloseThemeData () returned 0x0 [0099.200] lstrlenA (lpString="\x92\x07") returned 2 [0099.200] lstrlenA (lpString="\x92\x07") returned 2 [0099.200] lstrlenA (lpString="\x92\x07") returned 2 [0099.200] lstrlenA (lpString="\x92\x07") returned 2 [0099.200] lstrlenA (lpString="\x92\x07") returned 2 [0099.200] lstrlenA (lpString="\x92\x07") returned 2 [0099.200] capGetDriverDescriptionA () returned 0x0 [0099.200] GetLastError () returned 0x0 [0099.201] SetLastError (dwErrCode=0x0) [0099.201] OpenThemeData () returned 0x4f0000 [0099.201] GetSystemMetrics (nIndex=32) returned 4 [0099.201] GetSystemMetrics (nIndex=33) returned 4 [0099.201] CloseThemeData () returned 0x0 [0099.201] lstrlenA (lpString="\x92\x07") returned 2 [0099.201] lstrlenA (lpString="\x92\x07") returned 2 [0099.201] lstrlenA (lpString="\x92\x07") returned 2 [0099.201] capGetDriverDescriptionA () returned 0x0 [0099.202] GetLastError () returned 0x0 [0099.202] SetLastError (dwErrCode=0x0) [0099.202] OpenThemeData () returned 0x500000 [0099.202] GetSystemMetrics (nIndex=32) returned 4 [0099.202] GetSystemMetrics (nIndex=33) returned 4 [0099.202] CloseThemeData () returned 0x0 [0099.203] capGetDriverDescriptionA () returned 0x0 [0099.203] GetLastError () returned 0x0 [0099.203] SetLastError (dwErrCode=0x0) [0099.203] OpenThemeData () returned 0x510000 [0099.204] GetSystemMetrics (nIndex=32) returned 4 [0099.204] GetSystemMetrics (nIndex=33) returned 4 [0099.204] CloseThemeData () returned 0x0 [0099.204] capGetDriverDescriptionA () returned 0x0 [0099.205] GetLastError () returned 0x0 [0099.205] SetLastError (dwErrCode=0x0) [0099.205] OpenThemeData () returned 0x520000 [0099.205] GetSystemMetrics (nIndex=32) returned 4 [0099.205] GetSystemMetrics (nIndex=33) returned 4 [0099.205] CloseThemeData () returned 0x0 [0099.206] capGetDriverDescriptionA () returned 0x0 [0099.206] GetLastError () returned 0x0 [0099.206] SetLastError (dwErrCode=0x0) [0099.206] OpenThemeData () returned 0x530000 [0099.207] GetSystemMetrics (nIndex=32) returned 4 [0099.207] GetSystemMetrics (nIndex=33) returned 4 [0099.207] CloseThemeData () returned 0x0 [0099.207] capGetDriverDescriptionA () returned 0x0 [0099.207] GetLastError () returned 0x0 [0099.207] SetLastError (dwErrCode=0x0) [0099.207] OpenThemeData () returned 0x540000 [0099.208] GetSystemMetrics (nIndex=32) returned 4 [0099.208] GetSystemMetrics (nIndex=33) returned 4 [0099.208] CloseThemeData () returned 0x0 [0099.208] capGetDriverDescriptionA () returned 0x0 [0099.209] GetLastError () returned 0x0 [0099.209] SetLastError (dwErrCode=0x0) [0099.209] OpenThemeData () returned 0x550000 [0099.209] GetSystemMetrics (nIndex=32) returned 4 [0099.209] GetSystemMetrics (nIndex=33) returned 4 [0099.209] CloseThemeData () returned 0x0 [0099.210] capGetDriverDescriptionA () returned 0x0 [0099.210] GetLastError () returned 0x0 [0099.210] SetLastError (dwErrCode=0x0) [0099.210] OpenThemeData () returned 0x560000 [0099.211] GetSystemMetrics (nIndex=32) returned 4 [0099.211] GetSystemMetrics (nIndex=33) returned 4 [0099.211] CloseThemeData () returned 0x0 [0099.211] capGetDriverDescriptionA () returned 0x0 [0099.211] GetLastError () returned 0x0 [0099.211] SetLastError (dwErrCode=0x0) [0099.211] OpenThemeData () returned 0x570000 [0099.306] GetSystemMetrics (nIndex=32) returned 4 [0099.306] GetSystemMetrics (nIndex=33) returned 4 [0099.306] CloseThemeData () returned 0x0 [0099.306] capGetDriverDescriptionA () returned 0x0 [0099.307] GetLastError () returned 0x0 [0099.307] SetLastError (dwErrCode=0x0) [0099.307] OpenThemeData () returned 0x580000 [0099.325] GetSystemMetrics (nIndex=32) returned 4 [0099.325] GetSystemMetrics (nIndex=33) returned 4 [0099.325] CloseThemeData () returned 0x0 [0099.326] capGetDriverDescriptionA () returned 0x0 [0099.326] GetLastError () returned 0x0 [0099.326] SetLastError (dwErrCode=0x0) [0099.326] OpenThemeData () returned 0x590000 [0099.327] GetSystemMetrics (nIndex=32) returned 4 [0099.327] GetSystemMetrics (nIndex=33) returned 4 [0099.327] CloseThemeData () returned 0x0 [0099.327] capGetDriverDescriptionA () returned 0x0 [0099.328] GetLastError () returned 0x0 [0099.328] SetLastError (dwErrCode=0x0) [0099.328] OpenThemeData () returned 0x5a0000 [0099.329] GetSystemMetrics (nIndex=32) returned 4 [0099.329] GetSystemMetrics (nIndex=33) returned 4 [0099.329] CloseThemeData () returned 0x0 [0099.329] capGetDriverDescriptionA () returned 0x0 [0099.330] GetLastError () returned 0x0 [0099.330] SetLastError (dwErrCode=0x0) [0099.330] OpenThemeData () returned 0x5b0000 [0099.330] GetSystemMetrics (nIndex=32) returned 4 [0099.330] GetSystemMetrics (nIndex=33) returned 4 [0099.330] CloseThemeData () returned 0x0 [0099.330] capGetDriverDescriptionA () returned 0x0 [0099.331] GetLastError () returned 0x0 [0099.331] SetLastError (dwErrCode=0x0) [0099.331] OpenThemeData () returned 0x5c0000 [0099.331] GetSystemMetrics (nIndex=32) returned 4 [0099.331] GetSystemMetrics (nIndex=33) returned 4 [0099.331] CloseThemeData () returned 0x0 [0099.332] capGetDriverDescriptionA () returned 0x0 [0099.332] GetLastError () returned 0x0 [0099.332] SetLastError (dwErrCode=0x0) [0099.332] OpenThemeData () returned 0x5d0000 [0099.333] GetSystemMetrics (nIndex=32) returned 4 [0099.333] GetSystemMetrics (nIndex=33) returned 4 [0099.333] CloseThemeData () returned 0x0 [0099.333] capGetDriverDescriptionA () returned 0x0 [0099.334] GetLastError () returned 0x0 [0099.334] SetLastError (dwErrCode=0x0) [0099.334] OpenThemeData () returned 0x5e0000 [0099.334] GetSystemMetrics (nIndex=32) returned 4 [0099.334] GetSystemMetrics (nIndex=33) returned 4 [0099.334] CloseThemeData () returned 0x0 [0099.334] capGetDriverDescriptionA () returned 0x0 [0099.335] GetLastError () returned 0x0 [0099.335] SetLastError (dwErrCode=0x0) [0099.335] OpenThemeData () returned 0x5f0000 [0099.335] GetSystemMetrics (nIndex=32) returned 4 [0099.335] GetSystemMetrics (nIndex=33) returned 4 [0099.335] CloseThemeData () returned 0x0 [0099.336] capGetDriverDescriptionA () returned 0x0 [0099.336] GetLastError () returned 0x0 [0099.336] SetLastError (dwErrCode=0x0) [0099.336] OpenThemeData () returned 0x600000 [0099.337] GetSystemMetrics (nIndex=32) returned 4 [0099.337] GetSystemMetrics (nIndex=33) returned 4 [0099.337] CloseThemeData () returned 0x0 [0099.337] capGetDriverDescriptionA () returned 0x0 [0099.338] GetLastError () returned 0x0 [0099.338] SetLastError (dwErrCode=0x0) [0099.338] OpenThemeData () returned 0x610000 [0099.339] GetSystemMetrics (nIndex=32) returned 4 [0099.339] GetSystemMetrics (nIndex=33) returned 4 [0099.339] CloseThemeData () returned 0x0 [0099.339] capGetDriverDescriptionA () returned 0x0 [0099.339] GetLastError () returned 0x0 [0099.340] SetLastError (dwErrCode=0x0) [0099.340] OpenThemeData () returned 0x620000 [0099.340] GetSystemMetrics (nIndex=32) returned 4 [0099.340] GetSystemMetrics (nIndex=33) returned 4 [0099.340] CloseThemeData () returned 0x0 [0099.340] capGetDriverDescriptionA () returned 0x0 [0099.341] GetLastError () returned 0x0 [0099.341] SetLastError (dwErrCode=0x0) [0099.341] OpenThemeData () returned 0x630000 [0099.341] GetSystemMetrics (nIndex=32) returned 4 [0099.341] GetSystemMetrics (nIndex=33) returned 4 [0099.341] CloseThemeData () returned 0x0 [0099.342] capGetDriverDescriptionA () returned 0x0 [0099.342] GetLastError () returned 0x0 [0099.342] SetLastError (dwErrCode=0x0) [0099.342] OpenThemeData () returned 0x640000 [0099.343] GetSystemMetrics (nIndex=32) returned 4 [0099.343] GetSystemMetrics (nIndex=33) returned 4 [0099.343] CloseThemeData () returned 0x0 [0099.343] capGetDriverDescriptionA () returned 0x0 [0099.344] GetLastError () returned 0x0 [0099.344] SetLastError (dwErrCode=0x0) [0099.344] OpenThemeData () returned 0x650000 [0099.344] GetSystemMetrics (nIndex=32) returned 4 [0099.344] GetSystemMetrics (nIndex=33) returned 4 [0099.344] CloseThemeData () returned 0x0 [0099.344] capGetDriverDescriptionA () returned 0x0 [0099.345] GetLastError () returned 0x0 [0099.345] SetLastError (dwErrCode=0x0) [0099.345] OpenThemeData () returned 0x660000 [0099.345] GetSystemMetrics (nIndex=32) returned 4 [0099.345] GetSystemMetrics (nIndex=33) returned 4 [0099.345] CloseThemeData () returned 0x0 [0099.346] capGetDriverDescriptionA () returned 0x0 [0099.346] GetLastError () returned 0x0 [0099.346] SetLastError (dwErrCode=0x0) [0099.346] OpenThemeData () returned 0x670000 [0099.347] GetSystemMetrics (nIndex=32) returned 4 [0099.347] GetSystemMetrics (nIndex=33) returned 4 [0099.347] CloseThemeData () returned 0x0 [0099.347] capGetDriverDescriptionA () returned 0x0 [0099.348] GetLastError () returned 0x0 [0099.348] SetLastError (dwErrCode=0x0) [0099.348] OpenThemeData () returned 0x680000 [0099.348] GetSystemMetrics (nIndex=32) returned 4 [0099.348] GetSystemMetrics (nIndex=33) returned 4 [0099.348] CloseThemeData () returned 0x0 [0099.348] capGetDriverDescriptionA () returned 0x0 [0099.349] GetLastError () returned 0x0 [0099.349] SetLastError (dwErrCode=0x0) [0099.349] OpenThemeData () returned 0x690000 [0099.349] GetSystemMetrics (nIndex=32) returned 4 [0099.349] GetSystemMetrics (nIndex=33) returned 4 [0099.349] CloseThemeData () returned 0x0 [0099.350] capGetDriverDescriptionA () returned 0x0 [0099.351] GetLastError () returned 0x0 [0099.351] SetLastError (dwErrCode=0x0) [0099.351] OpenThemeData () returned 0x6a0000 [0099.351] GetSystemMetrics (nIndex=32) returned 4 [0099.351] GetSystemMetrics (nIndex=33) returned 4 [0099.351] CloseThemeData () returned 0x0 [0099.352] capGetDriverDescriptionA () returned 0x0 [0099.352] GetLastError () returned 0x0 [0099.352] SetLastError (dwErrCode=0x0) [0099.352] OpenThemeData () returned 0x6b0000 [0099.353] GetSystemMetrics (nIndex=32) returned 4 [0099.353] GetSystemMetrics (nIndex=33) returned 4 [0099.353] CloseThemeData () returned 0x0 [0099.354] capGetDriverDescriptionA () returned 0x0 [0099.354] GetLastError () returned 0x0 [0099.354] SetLastError (dwErrCode=0x0) [0099.354] OpenThemeData () returned 0x6c0000 [0099.355] GetSystemMetrics (nIndex=32) returned 4 [0099.355] GetSystemMetrics (nIndex=33) returned 4 [0099.355] CloseThemeData () returned 0x0 [0099.355] capGetDriverDescriptionA () returned 0x0 [0099.356] GetLastError () returned 0x0 [0099.356] SetLastError (dwErrCode=0x0) [0099.356] OpenThemeData () returned 0x6d0000 [0099.356] GetSystemMetrics (nIndex=32) returned 4 [0099.356] GetSystemMetrics (nIndex=33) returned 4 [0099.356] CloseThemeData () returned 0x0 [0099.357] capGetDriverDescriptionA () returned 0x0 [0099.357] GetLastError () returned 0x0 [0099.357] SetLastError (dwErrCode=0x0) [0099.357] OpenThemeData () returned 0x6e0000 [0099.358] GetSystemMetrics (nIndex=32) returned 4 [0099.358] GetSystemMetrics (nIndex=33) returned 4 [0099.358] CloseThemeData () returned 0x0 [0099.358] capGetDriverDescriptionA () returned 0x0 [0099.359] GetLastError () returned 0x0 [0099.359] SetLastError (dwErrCode=0x0) [0099.359] OpenThemeData () returned 0x6f0000 [0099.359] GetSystemMetrics (nIndex=32) returned 4 [0099.359] GetSystemMetrics (nIndex=33) returned 4 [0099.359] CloseThemeData () returned 0x0 [0099.359] capGetDriverDescriptionA () returned 0x0 [0099.360] GetLastError () returned 0x0 [0099.360] SetLastError (dwErrCode=0x0) [0099.360] OpenThemeData () returned 0x700000 [0099.361] GetSystemMetrics (nIndex=32) returned 4 [0099.361] GetSystemMetrics (nIndex=33) returned 4 [0099.361] CloseThemeData () returned 0x0 [0099.361] capGetDriverDescriptionA () returned 0x0 [0099.362] GetLastError () returned 0x0 [0099.362] SetLastError (dwErrCode=0x0) [0099.362] OpenThemeData () returned 0x710000 [0099.362] GetSystemMetrics (nIndex=32) returned 4 [0099.362] GetSystemMetrics (nIndex=33) returned 4 [0099.362] CloseThemeData () returned 0x0 [0099.362] capGetDriverDescriptionA () returned 0x0 [0099.363] GetLastError () returned 0x0 [0099.363] SetLastError (dwErrCode=0x0) [0099.363] OpenThemeData () returned 0x720000 [0099.363] GetSystemMetrics (nIndex=32) returned 4 [0099.363] GetSystemMetrics (nIndex=33) returned 4 [0099.363] CloseThemeData () returned 0x0 [0099.364] capGetDriverDescriptionA () returned 0x0 [0099.364] GetLastError () returned 0x0 [0099.364] SetLastError (dwErrCode=0x0) [0099.364] OpenThemeData () returned 0x730000 [0099.365] GetSystemMetrics (nIndex=32) returned 4 [0099.365] GetSystemMetrics (nIndex=33) returned 4 [0099.365] CloseThemeData () returned 0x0 [0099.365] capGetDriverDescriptionA () returned 0x0 [0099.366] GetLastError () returned 0x0 [0099.366] SetLastError (dwErrCode=0x0) [0099.366] OpenThemeData () returned 0x740000 [0099.366] GetSystemMetrics (nIndex=32) returned 4 [0099.366] GetSystemMetrics (nIndex=33) returned 4 [0099.366] CloseThemeData () returned 0x0 [0099.367] capGetDriverDescriptionA () returned 0x0 [0099.367] GetLastError () returned 0x0 [0099.367] SetLastError (dwErrCode=0x0) [0099.367] OpenThemeData () returned 0x750000 [0099.368] GetSystemMetrics (nIndex=32) returned 4 [0099.368] GetSystemMetrics (nIndex=33) returned 4 [0099.368] CloseThemeData () returned 0x0 [0099.368] capGetDriverDescriptionA () returned 0x0 [0099.369] GetLastError () returned 0x0 [0099.369] SetLastError (dwErrCode=0x0) [0099.369] OpenThemeData () returned 0x760000 [0099.369] GetSystemMetrics (nIndex=32) returned 4 [0099.369] GetSystemMetrics (nIndex=33) returned 4 [0099.369] CloseThemeData () returned 0x0 [0099.370] capGetDriverDescriptionA () returned 0x0 [0099.370] GetLastError () returned 0x0 [0099.370] SetLastError (dwErrCode=0x0) [0099.370] OpenThemeData () returned 0x770000 [0099.371] GetSystemMetrics (nIndex=32) returned 4 [0099.371] GetSystemMetrics (nIndex=33) returned 4 [0099.371] CloseThemeData () returned 0x0 [0099.371] capGetDriverDescriptionA () returned 0x0 [0099.372] GetLastError () returned 0x0 [0099.372] SetLastError (dwErrCode=0x0) [0099.372] OpenThemeData () returned 0x780000 [0099.372] GetSystemMetrics (nIndex=32) returned 4 [0099.372] GetSystemMetrics (nIndex=33) returned 4 [0099.372] CloseThemeData () returned 0x0 [0099.373] capGetDriverDescriptionA () returned 0x0 [0099.373] GetLastError () returned 0x0 [0099.373] SetLastError (dwErrCode=0x0) [0099.373] OpenThemeData () returned 0x790000 [0099.374] GetSystemMetrics (nIndex=32) returned 4 [0099.374] GetSystemMetrics (nIndex=33) returned 4 [0099.374] CloseThemeData () returned 0x0 [0099.374] capGetDriverDescriptionA () returned 0x0 [0099.375] GetLastError () returned 0x0 [0099.375] SetLastError (dwErrCode=0x0) [0099.375] OpenThemeData () returned 0x7a0000 [0099.375] GetSystemMetrics (nIndex=32) returned 4 [0099.375] GetSystemMetrics (nIndex=33) returned 4 [0099.375] CloseThemeData () returned 0x0 [0099.376] capGetDriverDescriptionA () returned 0x0 [0099.376] GetLastError () returned 0x0 [0099.376] SetLastError (dwErrCode=0x0) [0099.376] OpenThemeData () returned 0x7b0000 [0099.377] GetSystemMetrics (nIndex=32) returned 4 [0099.377] GetSystemMetrics (nIndex=33) returned 4 [0099.377] CloseThemeData () returned 0x0 [0099.377] capGetDriverDescriptionA () returned 0x0 [0099.378] GetLastError () returned 0x0 [0099.378] SetLastError (dwErrCode=0x0) [0099.378] OpenThemeData () returned 0x7c0000 [0099.378] GetSystemMetrics (nIndex=32) returned 4 [0099.378] GetSystemMetrics (nIndex=33) returned 4 [0099.378] CloseThemeData () returned 0x0 [0099.378] capGetDriverDescriptionA () returned 0x0 [0099.379] GetLastError () returned 0x0 [0099.379] SetLastError (dwErrCode=0x0) [0099.379] OpenThemeData () returned 0x7d0000 [0099.379] GetSystemMetrics (nIndex=32) returned 4 [0099.379] GetSystemMetrics (nIndex=33) returned 4 [0099.379] CloseThemeData () returned 0x0 [0099.380] capGetDriverDescriptionA () returned 0x0 [0099.380] GetLastError () returned 0x0 [0099.380] SetLastError (dwErrCode=0x0) [0099.380] OpenThemeData () returned 0x7e0000 [0099.381] GetSystemMetrics (nIndex=32) returned 4 [0099.381] GetSystemMetrics (nIndex=33) returned 4 [0099.381] CloseThemeData () returned 0x0 [0099.381] capGetDriverDescriptionA () returned 0x0 [0099.382] GetLastError () returned 0x0 [0099.382] SetLastError (dwErrCode=0x0) [0099.382] OpenThemeData () returned 0x7f0000 [0099.382] GetSystemMetrics (nIndex=32) returned 4 [0099.382] GetSystemMetrics (nIndex=33) returned 4 [0099.382] CloseThemeData () returned 0x0 [0099.383] capGetDriverDescriptionA () returned 0x0 [0099.383] GetLastError () returned 0x0 [0099.383] SetLastError (dwErrCode=0x0) [0099.383] OpenThemeData () returned 0x800000 [0099.809] GetSystemMetrics (nIndex=32) returned 4 [0099.809] GetSystemMetrics (nIndex=33) returned 4 [0099.809] CloseThemeData () returned 0x0 [0099.809] capGetDriverDescriptionA () returned 0x0 [0099.810] GetLastError () returned 0x0 [0099.810] SetLastError (dwErrCode=0x0) [0099.810] OpenThemeData () returned 0x810000 [0099.822] GetSystemMetrics (nIndex=32) returned 4 [0099.822] GetSystemMetrics (nIndex=33) returned 4 [0099.822] CloseThemeData () returned 0x0 [0099.823] capGetDriverDescriptionA () returned 0x0 [0099.823] GetLastError () returned 0x0 [0099.823] SetLastError (dwErrCode=0x0) [0099.823] OpenThemeData () returned 0x820000 [0099.824] GetSystemMetrics (nIndex=32) returned 4 [0099.824] GetSystemMetrics (nIndex=33) returned 4 [0099.824] CloseThemeData () returned 0x0 [0099.824] capGetDriverDescriptionA () returned 0x0 [0099.825] GetLastError () returned 0x0 [0099.825] SetLastError (dwErrCode=0x0) [0099.825] OpenThemeData () returned 0x830000 [0099.825] GetSystemMetrics (nIndex=32) returned 4 [0099.825] GetSystemMetrics (nIndex=33) returned 4 [0099.825] CloseThemeData () returned 0x0 [0099.826] capGetDriverDescriptionA () returned 0x0 [0099.826] GetLastError () returned 0x0 [0099.826] SetLastError (dwErrCode=0x0) [0099.826] OpenThemeData () returned 0x840000 [0099.827] GetSystemMetrics (nIndex=32) returned 4 [0099.827] GetSystemMetrics (nIndex=33) returned 4 [0099.827] CloseThemeData () returned 0x0 [0099.827] capGetDriverDescriptionA () returned 0x0 [0099.828] GetLastError () returned 0x0 [0099.828] SetLastError (dwErrCode=0x0) [0099.828] OpenThemeData () returned 0x850000 [0099.828] GetSystemMetrics (nIndex=32) returned 4 [0099.828] GetSystemMetrics (nIndex=33) returned 4 [0099.828] CloseThemeData () returned 0x0 [0099.828] capGetDriverDescriptionA () returned 0x0 [0099.829] GetLastError () returned 0x0 [0099.829] SetLastError (dwErrCode=0x0) [0099.829] OpenThemeData () returned 0x860000 [0099.829] GetSystemMetrics (nIndex=32) returned 4 [0099.830] GetSystemMetrics (nIndex=33) returned 4 [0099.830] CloseThemeData () returned 0x0 [0099.830] capGetDriverDescriptionA () returned 0x0 [0099.830] GetLastError () returned 0x0 [0099.830] SetLastError (dwErrCode=0x0) [0099.830] OpenThemeData () returned 0x870000 [0099.831] GetSystemMetrics (nIndex=32) returned 4 [0099.831] GetSystemMetrics (nIndex=33) returned 4 [0099.831] CloseThemeData () returned 0x0 [0099.831] capGetDriverDescriptionA () returned 0x0 [0099.832] GetLastError () returned 0x0 [0099.832] SetLastError (dwErrCode=0x0) [0099.832] OpenThemeData () returned 0x880000 [0099.832] GetSystemMetrics (nIndex=32) returned 4 [0099.832] GetSystemMetrics (nIndex=33) returned 4 [0099.832] CloseThemeData () returned 0x0 [0099.833] capGetDriverDescriptionA () returned 0x0 [0099.833] GetLastError () returned 0x0 [0099.833] SetLastError (dwErrCode=0x0) [0099.833] OpenThemeData () returned 0x890000 [0099.834] GetSystemMetrics (nIndex=32) returned 4 [0099.834] GetSystemMetrics (nIndex=33) returned 4 [0099.834] CloseThemeData () returned 0x0 [0099.834] capGetDriverDescriptionA () returned 0x0 [0099.836] GetLastError () returned 0x0 [0099.836] SetLastError (dwErrCode=0x0) [0099.836] OpenThemeData () returned 0x8a0000 [0099.836] GetSystemMetrics (nIndex=32) returned 4 [0099.836] GetSystemMetrics (nIndex=33) returned 4 [0099.836] CloseThemeData () returned 0x0 [0099.837] capGetDriverDescriptionA () returned 0x0 [0099.839] GetLastError () returned 0x0 [0099.839] SetLastError (dwErrCode=0x0) [0099.839] OpenThemeData () returned 0x8b0000 [0099.839] GetSystemMetrics (nIndex=32) returned 4 [0099.839] GetSystemMetrics (nIndex=33) returned 4 [0099.839] CloseThemeData () returned 0x0 [0099.839] capGetDriverDescriptionA () returned 0x0 [0099.840] GetLastError () returned 0x0 [0099.840] SetLastError (dwErrCode=0x0) [0099.840] OpenThemeData () returned 0x8c0000 [0099.841] GetSystemMetrics (nIndex=32) returned 4 [0099.841] GetSystemMetrics (nIndex=33) returned 4 [0099.841] CloseThemeData () returned 0x0 [0099.841] capGetDriverDescriptionA () returned 0x0 [0099.841] GetLastError () returned 0x0 [0099.841] SetLastError (dwErrCode=0x0) [0099.841] OpenThemeData () returned 0x8d0000 [0099.842] GetSystemMetrics (nIndex=32) returned 4 [0099.842] GetSystemMetrics (nIndex=33) returned 4 [0099.842] CloseThemeData () returned 0x0 [0099.842] capGetDriverDescriptionA () returned 0x0 [0099.843] GetLastError () returned 0x0 [0099.843] SetLastError (dwErrCode=0x0) [0099.843] OpenThemeData () returned 0x8e0000 [0099.843] GetSystemMetrics (nIndex=32) returned 4 [0099.843] GetSystemMetrics (nIndex=33) returned 4 [0099.843] CloseThemeData () returned 0x0 [0099.844] capGetDriverDescriptionA () returned 0x0 [0099.844] GetLastError () returned 0x0 [0099.844] SetLastError (dwErrCode=0x0) [0099.844] OpenThemeData () returned 0x8f0000 [0099.845] GetSystemMetrics (nIndex=32) returned 4 [0099.845] GetSystemMetrics (nIndex=33) returned 4 [0099.845] CloseThemeData () returned 0x0 [0099.845] capGetDriverDescriptionA () returned 0x0 [0099.846] GetLastError () returned 0x0 [0099.846] SetLastError (dwErrCode=0x0) [0099.846] OpenThemeData () returned 0x900000 [0099.846] GetSystemMetrics (nIndex=32) returned 4 [0099.846] GetSystemMetrics (nIndex=33) returned 4 [0099.846] CloseThemeData () returned 0x0 [0099.847] capGetDriverDescriptionA () returned 0x0 [0099.847] GetLastError () returned 0x0 [0099.847] SetLastError (dwErrCode=0x0) [0099.847] OpenThemeData () returned 0x910000 [0099.848] GetSystemMetrics (nIndex=32) returned 4 [0099.848] GetSystemMetrics (nIndex=33) returned 4 [0099.848] CloseThemeData () returned 0x0 [0099.848] capGetDriverDescriptionA () returned 0x0 [0099.848] GetLastError () returned 0x0 [0099.849] SetLastError (dwErrCode=0x0) [0099.849] OpenThemeData () returned 0x920000 [0099.849] GetSystemMetrics (nIndex=32) returned 4 [0099.849] GetSystemMetrics (nIndex=33) returned 4 [0099.849] CloseThemeData () returned 0x0 [0099.849] capGetDriverDescriptionA () returned 0x0 [0099.850] GetLastError () returned 0x0 [0099.850] SetLastError (dwErrCode=0x0) [0099.850] OpenThemeData () returned 0x930000 [0099.850] GetSystemMetrics (nIndex=32) returned 4 [0099.850] GetSystemMetrics (nIndex=33) returned 4 [0099.850] CloseThemeData () returned 0x0 [0099.851] capGetDriverDescriptionA () returned 0x0 [0099.851] GetLastError () returned 0x0 [0099.851] SetLastError (dwErrCode=0x0) [0099.851] OpenThemeData () returned 0x940000 [0099.852] GetSystemMetrics (nIndex=32) returned 4 [0099.852] GetSystemMetrics (nIndex=33) returned 4 [0099.852] CloseThemeData () returned 0x0 [0099.852] capGetDriverDescriptionA () returned 0x0 [0099.853] GetLastError () returned 0x0 [0099.853] SetLastError (dwErrCode=0x0) [0099.853] OpenThemeData () returned 0x950000 [0099.853] GetSystemMetrics (nIndex=32) returned 4 [0099.853] GetSystemMetrics (nIndex=33) returned 4 [0099.853] CloseThemeData () returned 0x0 [0099.854] capGetDriverDescriptionA () returned 0x0 [0099.854] GetLastError () returned 0x0 [0099.854] SetLastError (dwErrCode=0x0) [0099.854] OpenThemeData () returned 0x960000 [0099.855] GetSystemMetrics (nIndex=32) returned 4 [0099.855] GetSystemMetrics (nIndex=33) returned 4 [0099.855] CloseThemeData () returned 0x0 [0099.855] capGetDriverDescriptionA () returned 0x0 [0099.856] GetLastError () returned 0x0 [0099.856] SetLastError (dwErrCode=0x0) [0099.856] OpenThemeData () returned 0x970000 [0099.856] GetSystemMetrics (nIndex=32) returned 4 [0099.856] GetSystemMetrics (nIndex=33) returned 4 [0099.856] CloseThemeData () returned 0x0 [0099.857] capGetDriverDescriptionA () returned 0x0 [0099.857] GetLastError () returned 0x0 [0099.857] SetLastError (dwErrCode=0x0) [0099.857] OpenThemeData () returned 0x980000 [0099.858] GetSystemMetrics (nIndex=32) returned 4 [0099.858] GetSystemMetrics (nIndex=33) returned 4 [0099.858] CloseThemeData () returned 0x0 [0099.858] capGetDriverDescriptionA () returned 0x0 [0099.859] GetLastError () returned 0x0 [0099.859] SetLastError (dwErrCode=0x0) [0099.859] OpenThemeData () returned 0x990000 [0099.859] GetSystemMetrics (nIndex=32) returned 4 [0099.859] GetSystemMetrics (nIndex=33) returned 4 [0099.859] CloseThemeData () returned 0x0 [0099.860] capGetDriverDescriptionA () returned 0x0 [0099.861] GetLastError () returned 0x0 [0099.861] SetLastError (dwErrCode=0x0) [0099.861] OpenThemeData () returned 0x9a0000 [0099.861] GetSystemMetrics (nIndex=32) returned 4 [0099.861] GetSystemMetrics (nIndex=33) returned 4 [0099.861] CloseThemeData () returned 0x0 [0099.862] capGetDriverDescriptionA () returned 0x0 [0099.862] GetLastError () returned 0x0 [0099.862] SetLastError (dwErrCode=0x0) [0099.862] OpenThemeData () returned 0x9b0000 [0099.863] GetSystemMetrics (nIndex=32) returned 4 [0099.863] GetSystemMetrics (nIndex=33) returned 4 [0099.863] CloseThemeData () returned 0x0 [0099.863] capGetDriverDescriptionA () returned 0x0 [0099.864] GetLastError () returned 0x0 [0099.864] SetLastError (dwErrCode=0x0) [0099.864] OpenThemeData () returned 0x9c0000 [0099.864] GetSystemMetrics (nIndex=32) returned 4 [0099.864] GetSystemMetrics (nIndex=33) returned 4 [0099.864] CloseThemeData () returned 0x0 [0099.865] capGetDriverDescriptionA () returned 0x0 [0099.865] GetLastError () returned 0x0 [0099.865] SetLastError (dwErrCode=0x0) [0099.865] OpenThemeData () returned 0x9d0000 [0099.866] GetSystemMetrics (nIndex=32) returned 4 [0099.866] GetSystemMetrics (nIndex=33) returned 4 [0099.866] CloseThemeData () returned 0x0 [0099.866] capGetDriverDescriptionA () returned 0x0 [0099.867] GetLastError () returned 0x0 [0099.867] SetLastError (dwErrCode=0x0) [0099.867] OpenThemeData () returned 0x9e0000 [0099.867] GetSystemMetrics (nIndex=32) returned 4 [0099.867] GetSystemMetrics (nIndex=33) returned 4 [0099.867] CloseThemeData () returned 0x0 [0099.868] capGetDriverDescriptionA () returned 0x0 [0100.308] GetLastError () returned 0x0 [0100.308] SetLastError (dwErrCode=0x0) [0100.308] OpenThemeData () returned 0x9f0000 [0100.309] GetSystemMetrics (nIndex=32) returned 4 [0100.309] GetSystemMetrics (nIndex=33) returned 4 [0100.309] CloseThemeData () returned 0x0 [0100.310] capGetDriverDescriptionA () returned 0x0 [0100.310] GetLastError () returned 0x0 [0100.310] SetLastError (dwErrCode=0x0) [0100.310] OpenThemeData () returned 0xa00000 [0100.311] GetSystemMetrics (nIndex=32) returned 4 [0100.311] GetSystemMetrics (nIndex=33) returned 4 [0100.311] CloseThemeData () returned 0x0 [0100.311] capGetDriverDescriptionA () returned 0x0 [0100.312] GetLastError () returned 0x0 [0100.312] SetLastError (dwErrCode=0x0) [0100.312] OpenThemeData () returned 0xa10000 [0100.312] GetSystemMetrics (nIndex=32) returned 4 [0100.312] GetSystemMetrics (nIndex=33) returned 4 [0100.312] CloseThemeData () returned 0x0 [0100.313] capGetDriverDescriptionA () returned 0x0 [0100.313] GetLastError () returned 0x0 [0100.313] SetLastError (dwErrCode=0x0) [0100.313] OpenThemeData () returned 0xa20000 [0100.314] GetSystemMetrics (nIndex=32) returned 4 [0100.314] GetSystemMetrics (nIndex=33) returned 4 [0100.314] CloseThemeData () returned 0x0 [0100.314] capGetDriverDescriptionA () returned 0x0 [0100.315] GetLastError () returned 0x0 [0100.315] SetLastError (dwErrCode=0x0) [0100.315] OpenThemeData () returned 0xa30000 [0100.315] GetSystemMetrics (nIndex=32) returned 4 [0100.315] GetSystemMetrics (nIndex=33) returned 4 [0100.315] CloseThemeData () returned 0x0 [0100.316] capGetDriverDescriptionA () returned 0x0 [0100.316] GetLastError () returned 0x0 [0100.317] SetLastError (dwErrCode=0x0) [0100.317] OpenThemeData () returned 0xa40000 [0100.317] GetSystemMetrics (nIndex=32) returned 4 [0100.317] GetSystemMetrics (nIndex=33) returned 4 [0100.317] CloseThemeData () returned 0x0 [0100.317] capGetDriverDescriptionA () returned 0x0 [0100.318] GetLastError () returned 0x0 [0100.318] SetLastError (dwErrCode=0x0) [0100.318] OpenThemeData () returned 0xa50000 [0100.318] GetSystemMetrics (nIndex=32) returned 4 [0100.319] GetSystemMetrics (nIndex=33) returned 4 [0100.319] CloseThemeData () returned 0x0 [0100.319] capGetDriverDescriptionA () returned 0x0 [0100.319] GetLastError () returned 0x0 [0100.320] SetLastError (dwErrCode=0x0) [0100.320] OpenThemeData () returned 0xa60000 [0100.320] GetSystemMetrics (nIndex=32) returned 4 [0100.320] GetSystemMetrics (nIndex=33) returned 4 [0100.320] CloseThemeData () returned 0x0 [0100.321] capGetDriverDescriptionA () returned 0x0 [0100.322] GetLastError () returned 0x0 [0100.322] SetLastError (dwErrCode=0x0) [0100.322] OpenThemeData () returned 0xa70000 [0100.322] GetSystemMetrics (nIndex=32) returned 4 [0100.322] GetSystemMetrics (nIndex=33) returned 4 [0100.322] CloseThemeData () returned 0x0 [0100.322] capGetDriverDescriptionA () returned 0x0 [0100.323] GetLastError () returned 0x0 [0100.323] SetLastError (dwErrCode=0x0) [0100.323] OpenThemeData () returned 0xa80000 [0100.324] GetSystemMetrics (nIndex=32) returned 4 [0100.324] GetSystemMetrics (nIndex=33) returned 4 [0100.324] CloseThemeData () returned 0x0 [0100.324] capGetDriverDescriptionA () returned 0x0 [0100.325] GetLastError () returned 0x0 [0100.325] SetLastError (dwErrCode=0x0) [0100.325] OpenThemeData () returned 0xa90000 [0100.325] GetSystemMetrics (nIndex=32) returned 4 [0100.325] GetSystemMetrics (nIndex=33) returned 4 [0100.325] CloseThemeData () returned 0x0 [0100.326] capGetDriverDescriptionA () returned 0x0 [0100.326] GetLastError () returned 0x0 [0100.326] SetLastError (dwErrCode=0x0) [0100.326] OpenThemeData () returned 0xaa0000 [0100.327] GetSystemMetrics (nIndex=32) returned 4 [0100.327] GetSystemMetrics (nIndex=33) returned 4 [0100.327] CloseThemeData () returned 0x0 [0100.327] capGetDriverDescriptionA () returned 0x0 [0100.328] GetLastError () returned 0x0 [0100.328] SetLastError (dwErrCode=0x0) [0100.328] OpenThemeData () returned 0xab0000 [0100.328] GetSystemMetrics (nIndex=32) returned 4 [0100.328] GetSystemMetrics (nIndex=33) returned 4 [0100.328] CloseThemeData () returned 0x0 [0100.329] capGetDriverDescriptionA () returned 0x0 [0100.329] GetLastError () returned 0x0 [0100.329] SetLastError (dwErrCode=0x0) [0100.329] OpenThemeData () returned 0xac0000 [0100.330] GetSystemMetrics (nIndex=32) returned 4 [0100.330] GetSystemMetrics (nIndex=33) returned 4 [0100.330] CloseThemeData () returned 0x0 [0100.330] capGetDriverDescriptionA () returned 0x0 [0100.331] GetLastError () returned 0x0 [0100.331] SetLastError (dwErrCode=0x0) [0100.331] OpenThemeData () returned 0xad0000 [0100.331] GetSystemMetrics (nIndex=32) returned 4 [0100.331] GetSystemMetrics (nIndex=33) returned 4 [0100.331] CloseThemeData () returned 0x0 [0100.332] capGetDriverDescriptionA () returned 0x0 [0100.332] GetLastError () returned 0x0 [0100.332] SetLastError (dwErrCode=0x0) [0100.332] OpenThemeData () returned 0xae0000 [0100.333] GetSystemMetrics (nIndex=32) returned 4 [0100.333] GetSystemMetrics (nIndex=33) returned 4 [0100.333] CloseThemeData () returned 0x0 [0100.333] capGetDriverDescriptionA () returned 0x0 [0100.334] GetLastError () returned 0x0 [0100.334] SetLastError (dwErrCode=0x0) [0100.334] OpenThemeData () returned 0xaf0000 [0100.334] GetSystemMetrics (nIndex=32) returned 4 [0100.334] GetSystemMetrics (nIndex=33) returned 4 [0100.334] CloseThemeData () returned 0x0 [0100.335] capGetDriverDescriptionA () returned 0x0 [0100.336] GetLastError () returned 0x0 [0100.336] SetLastError (dwErrCode=0x0) [0100.336] OpenThemeData () returned 0xb00000 [0100.336] GetSystemMetrics (nIndex=32) returned 4 [0100.336] GetSystemMetrics (nIndex=33) returned 4 [0100.336] CloseThemeData () returned 0x0 [0100.336] capGetDriverDescriptionA () returned 0x0 [0100.337] GetLastError () returned 0x0 [0100.337] SetLastError (dwErrCode=0x0) [0100.337] OpenThemeData () returned 0xb10000 [0100.338] GetSystemMetrics (nIndex=32) returned 4 [0100.338] GetSystemMetrics (nIndex=33) returned 4 [0100.338] CloseThemeData () returned 0x0 [0100.338] capGetDriverDescriptionA () returned 0x0 [0100.339] GetLastError () returned 0x0 [0100.339] SetLastError (dwErrCode=0x0) [0100.339] OpenThemeData () returned 0xb20000 [0100.339] GetSystemMetrics (nIndex=32) returned 4 [0100.339] GetSystemMetrics (nIndex=33) returned 4 [0100.339] CloseThemeData () returned 0x0 [0100.340] capGetDriverDescriptionA () returned 0x0 [0100.341] GetLastError () returned 0x0 [0100.341] SetLastError (dwErrCode=0x0) [0100.341] OpenThemeData () returned 0xb30000 [0100.341] GetSystemMetrics (nIndex=32) returned 4 [0100.341] GetSystemMetrics (nIndex=33) returned 4 [0100.341] CloseThemeData () returned 0x0 [0100.341] capGetDriverDescriptionA () returned 0x0 [0100.342] GetLastError () returned 0x0 [0100.342] SetLastError (dwErrCode=0x0) [0100.342] OpenThemeData () returned 0xb40000 [0100.343] GetSystemMetrics (nIndex=32) returned 4 [0100.343] GetSystemMetrics (nIndex=33) returned 4 [0100.343] CloseThemeData () returned 0x0 [0100.343] capGetDriverDescriptionA () returned 0x0 [0100.344] GetLastError () returned 0x0 [0100.344] SetLastError (dwErrCode=0x0) [0100.344] OpenThemeData () returned 0xb50000 [0100.344] GetSystemMetrics (nIndex=32) returned 4 [0100.344] GetSystemMetrics (nIndex=33) returned 4 [0100.344] CloseThemeData () returned 0x0 [0100.510] capGetDriverDescriptionA () returned 0x0 [0100.511] GetLastError () returned 0x0 [0100.511] SetLastError (dwErrCode=0x0) [0100.511] OpenThemeData () returned 0xb60000 [0100.511] GetSystemMetrics (nIndex=32) returned 4 [0100.512] GetSystemMetrics (nIndex=33) returned 4 [0100.512] CloseThemeData () returned 0x0 [0100.512] capGetDriverDescriptionA () returned 0x0 [0100.513] GetLastError () returned 0x0 [0100.513] SetLastError (dwErrCode=0x0) [0100.513] OpenThemeData () returned 0xb70000 [0100.513] GetSystemMetrics (nIndex=32) returned 4 [0100.513] GetSystemMetrics (nIndex=33) returned 4 [0100.513] CloseThemeData () returned 0x0 [0100.513] capGetDriverDescriptionA () returned 0x0 [0100.514] GetLastError () returned 0x0 [0100.514] SetLastError (dwErrCode=0x0) [0100.514] OpenThemeData () returned 0xb80000 [0100.515] GetSystemMetrics (nIndex=32) returned 4 [0100.515] GetSystemMetrics (nIndex=33) returned 4 [0100.515] CloseThemeData () returned 0x0 [0100.515] capGetDriverDescriptionA () returned 0x0 [0100.516] GetLastError () returned 0x0 [0100.516] SetLastError (dwErrCode=0x0) [0100.516] OpenThemeData () returned 0xb90000 [0100.516] GetSystemMetrics (nIndex=32) returned 4 [0100.516] GetSystemMetrics (nIndex=33) returned 4 [0100.516] CloseThemeData () returned 0x0 [0100.517] capGetDriverDescriptionA () returned 0x0 [0100.518] GetLastError () returned 0x0 [0100.518] SetLastError (dwErrCode=0x0) [0100.518] OpenThemeData () returned 0xba0000 [0100.519] GetSystemMetrics (nIndex=32) returned 4 [0100.519] GetSystemMetrics (nIndex=33) returned 4 [0100.519] CloseThemeData () returned 0x0 [0100.519] capGetDriverDescriptionA () returned 0x0 [0100.520] GetLastError () returned 0x0 [0100.520] SetLastError (dwErrCode=0x0) [0100.520] OpenThemeData () returned 0xbb0000 [0100.520] GetSystemMetrics (nIndex=32) returned 4 [0100.520] GetSystemMetrics (nIndex=33) returned 4 [0100.520] CloseThemeData () returned 0x0 [0100.521] capGetDriverDescriptionA () returned 0x0 [0100.521] GetLastError () returned 0x0 [0100.521] SetLastError (dwErrCode=0x0) [0100.521] OpenThemeData () returned 0xbc0000 [0100.522] GetSystemMetrics (nIndex=32) returned 4 [0100.522] GetSystemMetrics (nIndex=33) returned 4 [0100.522] CloseThemeData () returned 0x0 [0100.522] capGetDriverDescriptionA () returned 0x0 [0100.523] GetLastError () returned 0x0 [0100.523] SetLastError (dwErrCode=0x0) [0100.523] OpenThemeData () returned 0xbd0000 [0100.523] GetSystemMetrics (nIndex=32) returned 4 [0100.523] GetSystemMetrics (nIndex=33) returned 4 [0100.523] CloseThemeData () returned 0x0 [0100.524] capGetDriverDescriptionA () returned 0x0 [0100.524] GetLastError () returned 0x0 [0100.525] SetLastError (dwErrCode=0x0) [0100.525] OpenThemeData () returned 0xbe0000 [0100.525] GetSystemMetrics (nIndex=32) returned 4 [0100.525] GetSystemMetrics (nIndex=33) returned 4 [0100.525] CloseThemeData () returned 0x0 [0100.526] capGetDriverDescriptionA () returned 0x0 [0100.526] GetLastError () returned 0x0 [0100.526] SetLastError (dwErrCode=0x0) [0100.526] OpenThemeData () returned 0xbf0000 [0100.527] GetSystemMetrics (nIndex=32) returned 4 [0100.527] GetSystemMetrics (nIndex=33) returned 4 [0100.527] CloseThemeData () returned 0x0 [0100.527] capGetDriverDescriptionA () returned 0x0 [0100.528] GetLastError () returned 0x0 [0100.528] SetLastError (dwErrCode=0x0) [0100.528] OpenThemeData () returned 0xc00000 [0100.528] GetSystemMetrics (nIndex=32) returned 4 [0100.528] GetSystemMetrics (nIndex=33) returned 4 [0100.528] CloseThemeData () returned 0x0 [0100.528] capGetDriverDescriptionA () returned 0x0 [0100.529] GetLastError () returned 0x0 [0100.529] SetLastError (dwErrCode=0x0) [0100.529] OpenThemeData () returned 0xc10000 [0100.530] GetSystemMetrics (nIndex=32) returned 4 [0100.530] GetSystemMetrics (nIndex=33) returned 4 [0100.530] CloseThemeData () returned 0x0 [0100.530] capGetDriverDescriptionA () returned 0x0 [0100.531] GetLastError () returned 0x0 [0100.531] SetLastError (dwErrCode=0x0) [0100.531] OpenThemeData () returned 0xc20000 [0100.531] GetSystemMetrics (nIndex=32) returned 4 [0100.531] GetSystemMetrics (nIndex=33) returned 4 [0100.531] CloseThemeData () returned 0x0 [0100.532] capGetDriverDescriptionA () returned 0x0 [0100.532] GetLastError () returned 0x0 [0100.532] SetLastError (dwErrCode=0x0) [0100.532] OpenThemeData () returned 0xc30000 [0100.533] GetSystemMetrics (nIndex=32) returned 4 [0100.533] GetSystemMetrics (nIndex=33) returned 4 [0100.533] CloseThemeData () returned 0x0 [0100.533] capGetDriverDescriptionA () returned 0x0 [0100.534] GetLastError () returned 0x0 [0100.534] SetLastError (dwErrCode=0x0) [0100.534] OpenThemeData () returned 0xc40000 [0100.534] GetSystemMetrics (nIndex=32) returned 4 [0100.534] GetSystemMetrics (nIndex=33) returned 4 [0100.534] CloseThemeData () returned 0x0 [0100.535] capGetDriverDescriptionA () returned 0x0 [0100.535] GetLastError () returned 0x0 [0100.535] SetLastError (dwErrCode=0x0) [0100.535] OpenThemeData () returned 0xc50000 [0100.536] GetSystemMetrics (nIndex=32) returned 4 [0100.536] GetSystemMetrics (nIndex=33) returned 4 [0100.536] CloseThemeData () returned 0x0 [0100.536] capGetDriverDescriptionA () returned 0x0 [0100.537] GetLastError () returned 0x0 [0100.537] SetLastError (dwErrCode=0x0) [0100.537] OpenThemeData () returned 0xc60000 [0100.537] GetSystemMetrics (nIndex=32) returned 4 [0100.537] GetSystemMetrics (nIndex=33) returned 4 [0100.537] CloseThemeData () returned 0x0 [0100.538] capGetDriverDescriptionA () returned 0x0 [0100.538] GetLastError () returned 0x0 [0100.538] SetLastError (dwErrCode=0x0) [0100.538] OpenThemeData () returned 0xc70000 [0100.539] GetSystemMetrics (nIndex=32) returned 4 [0100.539] GetSystemMetrics (nIndex=33) returned 4 [0100.539] CloseThemeData () returned 0x0 [0100.539] capGetDriverDescriptionA () returned 0x0 [0100.540] GetLastError () returned 0x0 [0100.540] SetLastError (dwErrCode=0x0) [0100.540] OpenThemeData () returned 0xc80000 [0100.541] GetSystemMetrics (nIndex=32) returned 4 [0100.541] GetSystemMetrics (nIndex=33) returned 4 [0100.541] CloseThemeData () returned 0x0 [0100.541] capGetDriverDescriptionA () returned 0x0 [0100.542] GetLastError () returned 0x0 [0100.542] SetLastError (dwErrCode=0x0) [0100.542] OpenThemeData () returned 0xc90000 [0100.542] GetSystemMetrics (nIndex=32) returned 4 [0100.542] GetSystemMetrics (nIndex=33) returned 4 [0100.542] CloseThemeData () returned 0x0 [0100.542] capGetDriverDescriptionA () returned 0x0 [0100.543] GetLastError () returned 0x0 [0100.543] SetLastError (dwErrCode=0x0) [0100.543] OpenThemeData () returned 0xca0000 [0100.544] GetSystemMetrics (nIndex=32) returned 4 [0100.544] GetSystemMetrics (nIndex=33) returned 4 [0100.544] CloseThemeData () returned 0x0 [0100.792] capGetDriverDescriptionA () returned 0x0 [0100.794] GetLastError () returned 0x0 [0100.794] SetLastError (dwErrCode=0x0) [0100.794] OpenThemeData () returned 0xcb0000 [0100.795] GetSystemMetrics (nIndex=32) returned 4 [0100.795] GetSystemMetrics (nIndex=33) returned 4 [0100.795] CloseThemeData () returned 0x0 [0100.795] capGetDriverDescriptionA () returned 0x0 [0100.797] GetLastError () returned 0x0 [0100.797] SetLastError (dwErrCode=0x0) [0100.797] OpenThemeData () returned 0xcc0000 [0100.797] GetSystemMetrics (nIndex=32) returned 4 [0100.797] GetSystemMetrics (nIndex=33) returned 4 [0100.797] CloseThemeData () returned 0x0 [0100.798] capGetDriverDescriptionA () returned 0x0 [0100.798] GetLastError () returned 0x0 [0100.798] SetLastError (dwErrCode=0x0) [0100.798] OpenThemeData () returned 0xcd0000 [0100.799] GetSystemMetrics (nIndex=32) returned 4 [0100.799] GetSystemMetrics (nIndex=33) returned 4 [0100.799] CloseThemeData () returned 0x0 [0100.800] capGetDriverDescriptionA () returned 0x0 [0100.800] GetLastError () returned 0x0 [0100.800] SetLastError (dwErrCode=0x0) [0100.800] OpenThemeData () returned 0xce0000 [0100.801] GetSystemMetrics (nIndex=32) returned 4 [0100.801] GetSystemMetrics (nIndex=33) returned 4 [0100.801] CloseThemeData () returned 0x0 [0100.801] capGetDriverDescriptionA () returned 0x0 [0100.802] GetLastError () returned 0x0 [0100.802] SetLastError (dwErrCode=0x0) [0100.802] OpenThemeData () returned 0xcf0000 [0100.802] GetSystemMetrics (nIndex=32) returned 4 [0100.802] GetSystemMetrics (nIndex=33) returned 4 [0100.802] CloseThemeData () returned 0x0 [0100.802] capGetDriverDescriptionA () returned 0x0 [0100.803] GetLastError () returned 0x0 [0100.803] SetLastError (dwErrCode=0x0) [0100.803] OpenThemeData () returned 0xd00000 [0100.804] GetSystemMetrics (nIndex=32) returned 4 [0100.804] GetSystemMetrics (nIndex=33) returned 4 [0100.804] CloseThemeData () returned 0x0 [0100.804] capGetDriverDescriptionA () returned 0x0 [0100.805] GetLastError () returned 0x0 [0100.805] SetLastError (dwErrCode=0x0) [0100.805] OpenThemeData () returned 0xd10000 [0100.805] GetSystemMetrics (nIndex=32) returned 4 [0100.805] GetSystemMetrics (nIndex=33) returned 4 [0100.805] CloseThemeData () returned 0x0 [0100.806] capGetDriverDescriptionA () returned 0x0 [0100.807] GetLastError () returned 0x0 [0100.807] SetLastError (dwErrCode=0x0) [0100.807] OpenThemeData () returned 0xd20000 [0100.807] GetSystemMetrics (nIndex=32) returned 4 [0100.807] GetSystemMetrics (nIndex=33) returned 4 [0100.807] CloseThemeData () returned 0x0 [0100.808] capGetDriverDescriptionA () returned 0x0 [0100.808] GetLastError () returned 0x0 [0100.808] SetLastError (dwErrCode=0x0) [0100.808] OpenThemeData () returned 0xd30000 [0100.809] GetSystemMetrics (nIndex=32) returned 4 [0100.809] GetSystemMetrics (nIndex=33) returned 4 [0100.809] CloseThemeData () returned 0x0 [0100.809] capGetDriverDescriptionA () returned 0x0 [0100.810] GetLastError () returned 0x0 [0100.810] SetLastError (dwErrCode=0x0) [0100.810] OpenThemeData () returned 0xd40000 [0100.810] GetSystemMetrics (nIndex=32) returned 4 [0100.810] GetSystemMetrics (nIndex=33) returned 4 [0100.810] CloseThemeData () returned 0x0 [0100.811] capGetDriverDescriptionA () returned 0x0 [0100.811] GetLastError () returned 0x0 [0100.811] SetLastError (dwErrCode=0x0) [0100.811] OpenThemeData () returned 0xd50000 [0100.812] GetSystemMetrics (nIndex=32) returned 4 [0100.812] GetSystemMetrics (nIndex=33) returned 4 [0100.812] CloseThemeData () returned 0x0 [0100.812] capGetDriverDescriptionA () returned 0x0 [0100.813] GetLastError () returned 0x0 [0100.813] SetLastError (dwErrCode=0x0) [0100.813] OpenThemeData () returned 0xd60000 [0100.813] GetSystemMetrics (nIndex=32) returned 4 [0100.813] GetSystemMetrics (nIndex=33) returned 4 [0100.813] CloseThemeData () returned 0x0 [0100.814] capGetDriverDescriptionA () returned 0x0 [0100.814] GetLastError () returned 0x0 [0100.814] SetLastError (dwErrCode=0x0) [0100.814] OpenThemeData () returned 0xd70000 [0100.815] GetSystemMetrics (nIndex=32) returned 4 [0100.815] GetSystemMetrics (nIndex=33) returned 4 [0100.815] CloseThemeData () returned 0x0 [0100.815] capGetDriverDescriptionA () returned 0x0 [0100.815] GetLastError () returned 0x0 [0100.816] SetLastError (dwErrCode=0x0) [0100.816] OpenThemeData () returned 0xd80000 [0100.816] GetSystemMetrics (nIndex=32) returned 4 [0100.816] GetSystemMetrics (nIndex=33) returned 4 [0100.816] CloseThemeData () returned 0x0 [0100.816] capGetDriverDescriptionA () returned 0x0 [0100.817] GetLastError () returned 0x0 [0100.817] SetLastError (dwErrCode=0x0) [0100.817] OpenThemeData () returned 0xd90000 [0100.817] GetSystemMetrics (nIndex=32) returned 4 [0100.817] GetSystemMetrics (nIndex=33) returned 4 [0100.817] CloseThemeData () returned 0x0 [0100.819] capGetDriverDescriptionA () returned 0x0 [0100.819] GetLastError () returned 0x0 [0100.819] SetLastError (dwErrCode=0x0) [0100.819] OpenThemeData () returned 0xda0000 [0100.820] GetSystemMetrics (nIndex=32) returned 4 [0100.820] GetSystemMetrics (nIndex=33) returned 4 [0100.820] CloseThemeData () returned 0x0 [0100.820] capGetDriverDescriptionA () returned 0x0 [0100.821] GetLastError () returned 0x0 [0100.821] SetLastError (dwErrCode=0x0) [0100.821] OpenThemeData () returned 0xdb0000 [0100.822] GetSystemMetrics (nIndex=32) returned 4 [0100.822] GetSystemMetrics (nIndex=33) returned 4 [0100.822] CloseThemeData () returned 0x0 [0100.822] capGetDriverDescriptionA () returned 0x0 [0100.823] GetLastError () returned 0x0 [0100.823] SetLastError (dwErrCode=0x0) [0100.823] OpenThemeData () returned 0xdc0000 [0100.824] GetSystemMetrics (nIndex=32) returned 4 [0100.824] GetSystemMetrics (nIndex=33) returned 4 [0100.824] CloseThemeData () returned 0x0 [0100.824] capGetDriverDescriptionA () returned 0x0 [0100.825] GetLastError () returned 0x0 [0100.825] SetLastError (dwErrCode=0x0) [0100.825] OpenThemeData () returned 0xdd0000 [0100.825] GetSystemMetrics (nIndex=32) returned 4 [0100.825] GetSystemMetrics (nIndex=33) returned 4 [0100.825] CloseThemeData () returned 0x0 [0100.826] capGetDriverDescriptionA () returned 0x0 [0100.826] GetLastError () returned 0x0 [0100.826] SetLastError (dwErrCode=0x0) [0100.826] OpenThemeData () returned 0xde0000 [0100.827] GetSystemMetrics (nIndex=32) returned 4 [0100.827] GetSystemMetrics (nIndex=33) returned 4 [0100.827] CloseThemeData () returned 0x0 [0100.827] capGetDriverDescriptionA () returned 0x0 [0100.827] GetLastError () returned 0x0 [0100.828] SetLastError (dwErrCode=0x0) [0100.828] OpenThemeData () returned 0xdf0000 [0100.828] GetSystemMetrics (nIndex=32) returned 4 [0100.828] GetSystemMetrics (nIndex=33) returned 4 [0100.828] CloseThemeData () returned 0x0 [0101.200] capGetDriverDescriptionA () returned 0x0 [0101.201] GetLastError () returned 0x0 [0101.201] SetLastError (dwErrCode=0x0) [0101.201] OpenThemeData () returned 0xe00000 [0101.202] GetSystemMetrics (nIndex=32) returned 4 [0101.202] GetSystemMetrics (nIndex=33) returned 4 [0101.202] CloseThemeData () returned 0x0 [0101.203] capGetDriverDescriptionA () returned 0x0 [0101.203] GetLastError () returned 0x0 [0101.203] SetLastError (dwErrCode=0x0) [0101.203] OpenThemeData () returned 0xe10000 [0101.204] GetSystemMetrics (nIndex=32) returned 4 [0101.204] GetSystemMetrics (nIndex=33) returned 4 [0101.204] CloseThemeData () returned 0x0 [0101.204] capGetDriverDescriptionA () returned 0x0 [0101.205] GetLastError () returned 0x0 [0101.205] SetLastError (dwErrCode=0x0) [0101.205] OpenThemeData () returned 0xe20000 [0101.205] GetSystemMetrics (nIndex=32) returned 4 [0101.205] GetSystemMetrics (nIndex=33) returned 4 [0101.205] CloseThemeData () returned 0x0 [0101.206] capGetDriverDescriptionA () returned 0x0 [0101.206] GetLastError () returned 0x0 [0101.206] SetLastError (dwErrCode=0x0) [0101.206] OpenThemeData () returned 0xe30000 [0101.207] GetSystemMetrics (nIndex=32) returned 4 [0101.207] GetSystemMetrics (nIndex=33) returned 4 [0101.207] CloseThemeData () returned 0x0 [0101.207] capGetDriverDescriptionA () returned 0x0 [0101.208] GetLastError () returned 0x0 [0101.208] SetLastError (dwErrCode=0x0) [0101.208] OpenThemeData () returned 0xe40000 [0101.208] GetSystemMetrics (nIndex=32) returned 4 [0101.208] GetSystemMetrics (nIndex=33) returned 4 [0101.208] CloseThemeData () returned 0x0 [0101.209] capGetDriverDescriptionA () returned 0x0 [0101.209] GetLastError () returned 0x0 [0101.209] SetLastError (dwErrCode=0x0) [0101.209] OpenThemeData () returned 0xe50000 [0101.210] GetSystemMetrics (nIndex=32) returned 4 [0101.210] GetSystemMetrics (nIndex=33) returned 4 [0101.210] CloseThemeData () returned 0x0 [0101.210] capGetDriverDescriptionA () returned 0x0 [0101.211] GetLastError () returned 0x0 [0101.211] SetLastError (dwErrCode=0x0) [0101.211] OpenThemeData () returned 0xe60000 [0101.211] GetSystemMetrics (nIndex=32) returned 4 [0101.211] GetSystemMetrics (nIndex=33) returned 4 [0101.211] CloseThemeData () returned 0x0 [0101.212] capGetDriverDescriptionA () returned 0x0 [0101.212] GetLastError () returned 0x0 [0101.212] SetLastError (dwErrCode=0x0) [0101.212] OpenThemeData () returned 0xe70000 [0101.213] GetSystemMetrics (nIndex=32) returned 4 [0101.213] GetSystemMetrics (nIndex=33) returned 4 [0101.213] CloseThemeData () returned 0x0 [0101.213] capGetDriverDescriptionA () returned 0x0 [0101.214] GetLastError () returned 0x0 [0101.214] SetLastError (dwErrCode=0x0) [0101.214] OpenThemeData () returned 0xe80000 [0101.214] GetSystemMetrics (nIndex=32) returned 4 [0101.215] GetSystemMetrics (nIndex=33) returned 4 [0101.215] CloseThemeData () returned 0x0 [0101.215] capGetDriverDescriptionA () returned 0x0 [0101.216] GetLastError () returned 0x0 [0101.216] SetLastError (dwErrCode=0x0) [0101.216] OpenThemeData () returned 0xe90000 [0101.216] GetSystemMetrics (nIndex=32) returned 4 [0101.216] GetSystemMetrics (nIndex=33) returned 4 [0101.216] CloseThemeData () returned 0x0 [0101.217] capGetDriverDescriptionA () returned 0x0 [0101.217] GetLastError () returned 0x0 [0101.217] SetLastError (dwErrCode=0x0) [0101.217] OpenThemeData () returned 0xea0000 [0101.218] GetSystemMetrics (nIndex=32) returned 4 [0101.218] GetSystemMetrics (nIndex=33) returned 4 [0101.218] CloseThemeData () returned 0x0 [0101.218] capGetDriverDescriptionA () returned 0x0 [0101.219] GetLastError () returned 0x0 [0101.219] SetLastError (dwErrCode=0x0) [0101.219] OpenThemeData () returned 0xeb0000 [0101.219] GetSystemMetrics (nIndex=32) returned 4 [0101.219] GetSystemMetrics (nIndex=33) returned 4 [0101.219] CloseThemeData () returned 0x0 [0101.220] capGetDriverDescriptionA () returned 0x0 [0101.220] GetLastError () returned 0x0 [0101.220] SetLastError (dwErrCode=0x0) [0101.220] OpenThemeData () returned 0xec0000 [0101.221] GetSystemMetrics (nIndex=32) returned 4 [0101.221] GetSystemMetrics (nIndex=33) returned 4 [0101.221] CloseThemeData () returned 0x0 [0101.221] capGetDriverDescriptionA () returned 0x0 [0101.222] GetLastError () returned 0x0 [0101.222] SetLastError (dwErrCode=0x0) [0101.222] OpenThemeData () returned 0xed0000 [0101.222] GetSystemMetrics (nIndex=32) returned 4 [0101.222] GetSystemMetrics (nIndex=33) returned 4 [0101.222] CloseThemeData () returned 0x0 [0101.223] capGetDriverDescriptionA () returned 0x0 [0101.223] GetLastError () returned 0x0 [0101.223] SetLastError (dwErrCode=0x0) [0101.223] OpenThemeData () returned 0xee0000 [0101.224] GetSystemMetrics (nIndex=32) returned 4 [0101.224] GetSystemMetrics (nIndex=33) returned 4 [0101.224] CloseThemeData () returned 0x0 [0101.224] capGetDriverDescriptionA () returned 0x0 [0101.225] GetLastError () returned 0x0 [0101.225] SetLastError (dwErrCode=0x0) [0101.225] OpenThemeData () returned 0xef0000 [0101.225] GetSystemMetrics (nIndex=32) returned 4 [0101.225] GetSystemMetrics (nIndex=33) returned 4 [0101.225] CloseThemeData () returned 0x0 [0101.226] capGetDriverDescriptionA () returned 0x0 [0101.226] GetLastError () returned 0x0 [0101.226] SetLastError (dwErrCode=0x0) [0101.226] OpenThemeData () returned 0xf00000 [0101.227] GetSystemMetrics (nIndex=32) returned 4 [0101.227] GetSystemMetrics (nIndex=33) returned 4 [0101.227] CloseThemeData () returned 0x0 [0101.227] capGetDriverDescriptionA () returned 0x0 [0101.228] GetLastError () returned 0x0 [0101.228] SetLastError (dwErrCode=0x0) [0101.228] OpenThemeData () returned 0xf10000 [0101.229] GetSystemMetrics (nIndex=32) returned 4 [0101.229] GetSystemMetrics (nIndex=33) returned 4 [0101.229] CloseThemeData () returned 0x0 [0101.229] capGetDriverDescriptionA () returned 0x0 [0101.230] GetLastError () returned 0x0 [0101.230] SetLastError (dwErrCode=0x0) [0101.230] OpenThemeData () returned 0xf20000 [0101.230] GetSystemMetrics (nIndex=32) returned 4 [0101.230] GetSystemMetrics (nIndex=33) returned 4 [0101.230] CloseThemeData () returned 0x0 [0101.231] capGetDriverDescriptionA () returned 0x0 [0101.231] GetLastError () returned 0x0 [0101.231] SetLastError (dwErrCode=0x0) [0101.231] OpenThemeData () returned 0xf30000 [0101.232] GetSystemMetrics (nIndex=32) returned 4 [0101.232] GetSystemMetrics (nIndex=33) returned 4 [0101.232] CloseThemeData () returned 0x0 [0101.232] capGetDriverDescriptionA () returned 0x0 [0101.233] GetLastError () returned 0x0 [0101.233] SetLastError (dwErrCode=0x0) [0101.233] OpenThemeData () returned 0xf40000 [0101.233] GetSystemMetrics (nIndex=32) returned 4 [0101.233] GetSystemMetrics (nIndex=33) returned 4 [0101.233] CloseThemeData () returned 0x0 [0101.234] capGetDriverDescriptionA () returned 0x0 [0101.234] GetLastError () returned 0x0 [0101.234] SetLastError (dwErrCode=0x0) [0101.234] OpenThemeData () returned 0xf50000 [0101.235] GetSystemMetrics (nIndex=32) returned 4 [0101.235] GetSystemMetrics (nIndex=33) returned 4 [0101.235] CloseThemeData () returned 0x0 [0101.235] capGetDriverDescriptionA () returned 0x0 [0101.236] GetLastError () returned 0x0 [0101.236] SetLastError (dwErrCode=0x0) [0101.236] OpenThemeData () returned 0xf60000 [0101.236] GetSystemMetrics (nIndex=32) returned 4 [0101.236] GetSystemMetrics (nIndex=33) returned 4 [0101.236] CloseThemeData () returned 0x0 [0101.237] capGetDriverDescriptionA () returned 0x0 [0101.237] GetLastError () returned 0x0 [0101.237] SetLastError (dwErrCode=0x0) [0101.237] OpenThemeData () returned 0xf70000 [0101.238] GetSystemMetrics (nIndex=32) returned 4 [0101.238] GetSystemMetrics (nIndex=33) returned 4 [0101.238] CloseThemeData () returned 0x0 [0101.238] capGetDriverDescriptionA () returned 0x0 [0101.239] GetLastError () returned 0x0 [0101.239] SetLastError (dwErrCode=0x0) [0101.239] OpenThemeData () returned 0xf80000 [0101.239] GetSystemMetrics (nIndex=32) returned 4 [0101.239] GetSystemMetrics (nIndex=33) returned 4 [0101.239] CloseThemeData () returned 0x0 [0101.240] capGetDriverDescriptionA () returned 0x0 [0101.240] GetLastError () returned 0x0 [0101.240] SetLastError (dwErrCode=0x0) [0101.240] OpenThemeData () returned 0xf90000 [0101.241] GetSystemMetrics (nIndex=32) returned 4 [0101.241] GetSystemMetrics (nIndex=33) returned 4 [0101.241] CloseThemeData () returned 0x0 [0101.242] capGetDriverDescriptionA () returned 0x0 [0101.243] GetLastError () returned 0x0 [0101.243] SetLastError (dwErrCode=0x0) [0101.243] OpenThemeData () returned 0xfa0000 [0101.400] GetSystemMetrics (nIndex=32) returned 4 [0101.400] GetSystemMetrics (nIndex=33) returned 4 [0101.400] CloseThemeData () returned 0x0 [0101.401] capGetDriverDescriptionA () returned 0x0 [0101.401] GetLastError () returned 0x0 [0101.401] SetLastError (dwErrCode=0x0) [0101.401] OpenThemeData () returned 0xfb0000 [0101.402] GetSystemMetrics (nIndex=32) returned 4 [0101.402] GetSystemMetrics (nIndex=33) returned 4 [0101.402] CloseThemeData () returned 0x0 [0101.402] capGetDriverDescriptionA () returned 0x0 [0101.403] GetLastError () returned 0x0 [0101.403] SetLastError (dwErrCode=0x0) [0101.403] OpenThemeData () returned 0xfc0000 [0101.403] GetSystemMetrics (nIndex=32) returned 4 [0101.403] GetSystemMetrics (nIndex=33) returned 4 [0101.403] CloseThemeData () returned 0x0 [0101.404] capGetDriverDescriptionA () returned 0x0 [0101.404] GetLastError () returned 0x0 [0101.404] SetLastError (dwErrCode=0x0) [0101.404] OpenThemeData () returned 0xfd0000 [0101.405] GetSystemMetrics (nIndex=32) returned 4 [0101.405] GetSystemMetrics (nIndex=33) returned 4 [0101.405] CloseThemeData () returned 0x0 [0101.405] capGetDriverDescriptionA () returned 0x0 [0101.406] GetLastError () returned 0x0 [0101.406] SetLastError (dwErrCode=0x0) [0101.406] OpenThemeData () returned 0xfe0000 [0101.406] GetSystemMetrics (nIndex=32) returned 4 [0101.406] GetSystemMetrics (nIndex=33) returned 4 [0101.406] CloseThemeData () returned 0x0 [0101.407] capGetDriverDescriptionA () returned 0x0 [0101.407] GetLastError () returned 0x0 [0101.407] SetLastError (dwErrCode=0x0) [0101.407] OpenThemeData () returned 0xff0000 [0101.408] GetSystemMetrics (nIndex=32) returned 4 [0101.408] GetSystemMetrics (nIndex=33) returned 4 [0101.408] CloseThemeData () returned 0x0 [0101.408] capGetDriverDescriptionA () returned 0x0 [0101.409] GetLastError () returned 0x0 [0101.409] SetLastError (dwErrCode=0x0) [0101.409] OpenThemeData () returned 0x1000000 [0101.409] GetSystemMetrics (nIndex=32) returned 4 [0101.409] GetSystemMetrics (nIndex=33) returned 4 [0101.409] CloseThemeData () returned 0x0 [0101.410] capGetDriverDescriptionA () returned 0x0 [0101.410] GetLastError () returned 0x0 [0101.410] SetLastError (dwErrCode=0x0) [0101.410] OpenThemeData () returned 0x1010000 [0101.411] GetSystemMetrics (nIndex=32) returned 4 [0101.411] GetSystemMetrics (nIndex=33) returned 4 [0101.411] CloseThemeData () returned 0x0 [0101.411] capGetDriverDescriptionA () returned 0x0 [0101.412] GetLastError () returned 0x0 [0101.412] SetLastError (dwErrCode=0x0) [0101.412] OpenThemeData () returned 0x1020000 [0101.412] GetSystemMetrics (nIndex=32) returned 4 [0101.412] GetSystemMetrics (nIndex=33) returned 4 [0101.412] CloseThemeData () returned 0x0 [0101.413] capGetDriverDescriptionA () returned 0x0 [0101.413] GetLastError () returned 0x0 [0101.413] SetLastError (dwErrCode=0x0) [0101.413] OpenThemeData () returned 0x1030000 [0101.414] GetSystemMetrics (nIndex=32) returned 4 [0101.414] GetSystemMetrics (nIndex=33) returned 4 [0101.414] CloseThemeData () returned 0x0 [0101.414] capGetDriverDescriptionA () returned 0x0 [0101.415] GetLastError () returned 0x0 [0101.415] SetLastError (dwErrCode=0x0) [0101.415] OpenThemeData () returned 0x1040000 [0101.416] GetSystemMetrics (nIndex=32) returned 4 [0101.416] GetSystemMetrics (nIndex=33) returned 4 [0101.416] CloseThemeData () returned 0x0 [0101.416] capGetDriverDescriptionA () returned 0x0 [0101.417] GetLastError () returned 0x0 [0101.417] SetLastError (dwErrCode=0x0) [0101.417] OpenThemeData () returned 0x1050000 [0101.417] GetSystemMetrics (nIndex=32) returned 4 [0101.417] GetSystemMetrics (nIndex=33) returned 4 [0101.417] CloseThemeData () returned 0x0 [0101.418] capGetDriverDescriptionA () returned 0x0 [0101.418] GetLastError () returned 0x0 [0101.418] SetLastError (dwErrCode=0x0) [0101.418] OpenThemeData () returned 0x1060000 [0101.419] GetSystemMetrics (nIndex=32) returned 4 [0101.419] GetSystemMetrics (nIndex=33) returned 4 [0101.419] CloseThemeData () returned 0x0 [0101.419] capGetDriverDescriptionA () returned 0x0 [0101.420] GetLastError () returned 0x0 [0101.420] SetLastError (dwErrCode=0x0) [0101.420] OpenThemeData () returned 0x1070000 [0101.420] GetSystemMetrics (nIndex=32) returned 4 [0101.420] GetSystemMetrics (nIndex=33) returned 4 [0101.420] CloseThemeData () returned 0x0 [0101.421] capGetDriverDescriptionA () returned 0x0 [0101.421] GetLastError () returned 0x0 [0101.421] SetLastError (dwErrCode=0x0) [0101.421] OpenThemeData () returned 0x1080000 [0101.422] GetSystemMetrics (nIndex=32) returned 4 [0101.422] GetSystemMetrics (nIndex=33) returned 4 [0101.422] CloseThemeData () returned 0x0 [0101.422] capGetDriverDescriptionA () returned 0x0 [0101.423] GetLastError () returned 0x0 [0101.423] SetLastError (dwErrCode=0x0) [0101.423] OpenThemeData () returned 0x1090000 [0101.423] GetSystemMetrics (nIndex=32) returned 4 [0101.423] GetSystemMetrics (nIndex=33) returned 4 [0101.423] CloseThemeData () returned 0x0 [0101.424] capGetDriverDescriptionA () returned 0x0 [0101.424] GetLastError () returned 0x0 [0101.424] SetLastError (dwErrCode=0x0) [0101.424] OpenThemeData () returned 0x10a0000 [0101.425] GetSystemMetrics (nIndex=32) returned 4 [0101.425] GetSystemMetrics (nIndex=33) returned 4 [0101.425] CloseThemeData () returned 0x0 [0101.425] capGetDriverDescriptionA () returned 0x0 [0101.426] GetLastError () returned 0x0 [0101.426] SetLastError (dwErrCode=0x0) [0101.426] OpenThemeData () returned 0x10b0000 [0101.427] GetSystemMetrics (nIndex=32) returned 4 [0101.427] GetSystemMetrics (nIndex=33) returned 4 [0101.427] CloseThemeData () returned 0x0 [0101.427] capGetDriverDescriptionA () returned 0x0 [0101.428] GetLastError () returned 0x0 [0101.428] SetLastError (dwErrCode=0x0) [0101.428] OpenThemeData () returned 0x10c0000 [0101.428] GetSystemMetrics (nIndex=32) returned 4 [0101.428] GetSystemMetrics (nIndex=33) returned 4 [0101.428] CloseThemeData () returned 0x0 [0101.429] capGetDriverDescriptionA () returned 0x0 [0101.429] GetLastError () returned 0x0 [0101.429] SetLastError (dwErrCode=0x0) [0101.429] OpenThemeData () returned 0x10d0000 [0101.430] GetSystemMetrics (nIndex=32) returned 4 [0101.430] GetSystemMetrics (nIndex=33) returned 4 [0101.430] CloseThemeData () returned 0x0 [0101.430] capGetDriverDescriptionA () returned 0x0 [0101.431] GetLastError () returned 0x0 [0101.431] SetLastError (dwErrCode=0x0) [0101.431] OpenThemeData () returned 0x10e0000 [0101.431] GetSystemMetrics (nIndex=32) returned 4 [0101.431] GetSystemMetrics (nIndex=33) returned 4 [0101.431] CloseThemeData () returned 0x0 [0101.432] capGetDriverDescriptionA () returned 0x0 [0101.432] GetLastError () returned 0x0 [0101.432] SetLastError (dwErrCode=0x0) [0101.432] OpenThemeData () returned 0x10f0000 [0101.433] GetSystemMetrics (nIndex=32) returned 4 [0101.433] GetSystemMetrics (nIndex=33) returned 4 [0101.433] CloseThemeData () returned 0x0 [0101.433] capGetDriverDescriptionA () returned 0x0 [0101.434] GetLastError () returned 0x0 [0101.434] SetLastError (dwErrCode=0x0) [0101.434] OpenThemeData () returned 0x1100000 [0101.434] GetSystemMetrics (nIndex=32) returned 4 [0101.434] GetSystemMetrics (nIndex=33) returned 4 [0101.435] CloseThemeData () returned 0x0 [0101.435] capGetDriverDescriptionA () returned 0x0 [0101.436] GetLastError () returned 0x0 [0101.436] SetLastError (dwErrCode=0x0) [0101.436] OpenThemeData () returned 0x1110000 [0101.436] GetSystemMetrics (nIndex=32) returned 4 [0101.436] GetSystemMetrics (nIndex=33) returned 4 [0101.436] CloseThemeData () returned 0x0 [0101.437] capGetDriverDescriptionA () returned 0x0 [0101.437] GetLastError () returned 0x0 [0101.437] SetLastError (dwErrCode=0x0) [0101.437] OpenThemeData () returned 0x1120000 [0101.438] GetSystemMetrics (nIndex=32) returned 4 [0101.438] GetSystemMetrics (nIndex=33) returned 4 [0101.438] CloseThemeData () returned 0x0 [0101.438] capGetDriverDescriptionA () returned 0x0 [0101.439] GetLastError () returned 0x0 [0101.439] SetLastError (dwErrCode=0x0) [0101.439] OpenThemeData () returned 0x1130000 [0101.439] GetSystemMetrics (nIndex=32) returned 4 [0101.439] GetSystemMetrics (nIndex=33) returned 4 [0101.439] CloseThemeData () returned 0x0 [0101.440] capGetDriverDescriptionA () returned 0x0 [0101.440] GetLastError () returned 0x0 [0101.440] SetLastError (dwErrCode=0x0) [0101.440] OpenThemeData () returned 0x1140000 [0101.441] GetSystemMetrics (nIndex=32) returned 4 [0101.441] GetSystemMetrics (nIndex=33) returned 4 [0101.441] CloseThemeData () returned 0x0 [0101.441] capGetDriverDescriptionA () returned 0x0 [0101.442] GetLastError () returned 0x0 [0101.442] SetLastError (dwErrCode=0x0) [0101.442] OpenThemeData () returned 0x1150000 [0101.442] GetSystemMetrics (nIndex=32) returned 4 [0101.442] GetSystemMetrics (nIndex=33) returned 4 [0101.442] CloseThemeData () returned 0x0 [0101.443] capGetDriverDescriptionA () returned 0x0 [0101.443] GetLastError () returned 0x0 [0101.443] SetLastError (dwErrCode=0x0) [0101.443] OpenThemeData () returned 0x1160000 [0101.444] GetSystemMetrics (nIndex=32) returned 4 [0101.444] GetSystemMetrics (nIndex=33) returned 4 [0101.444] CloseThemeData () returned 0x0 [0101.444] capGetDriverDescriptionA () returned 0x0 [0101.445] GetLastError () returned 0x0 [0101.445] SetLastError (dwErrCode=0x0) [0101.445] OpenThemeData () returned 0x1170000 [0101.445] GetSystemMetrics (nIndex=32) returned 4 [0101.445] GetSystemMetrics (nIndex=33) returned 4 [0101.445] CloseThemeData () returned 0x0 [0101.446] capGetDriverDescriptionA () returned 0x0 [0101.556] GetLastError () returned 0x0 [0101.557] SetLastError (dwErrCode=0x0) [0101.557] OpenThemeData () returned 0x1180000 [0101.557] GetSystemMetrics (nIndex=32) returned 4 [0101.557] GetSystemMetrics (nIndex=33) returned 4 [0101.557] CloseThemeData () returned 0x0 [0101.558] capGetDriverDescriptionA () returned 0x0 [0101.558] GetLastError () returned 0x0 [0101.558] SetLastError (dwErrCode=0x0) [0101.558] OpenThemeData () returned 0x1190000 [0101.559] GetSystemMetrics (nIndex=32) returned 4 [0101.559] GetSystemMetrics (nIndex=33) returned 4 [0101.559] CloseThemeData () returned 0x0 [0101.560] capGetDriverDescriptionA () returned 0x0 [0101.561] GetLastError () returned 0x0 [0101.561] SetLastError (dwErrCode=0x0) [0101.561] OpenThemeData () returned 0x11a0000 [0101.561] GetSystemMetrics (nIndex=32) returned 4 [0101.561] GetSystemMetrics (nIndex=33) returned 4 [0101.561] CloseThemeData () returned 0x0 [0101.562] capGetDriverDescriptionA () returned 0x0 [0101.562] GetLastError () returned 0x0 [0101.562] SetLastError (dwErrCode=0x0) [0101.562] OpenThemeData () returned 0x11b0000 [0101.563] GetSystemMetrics (nIndex=32) returned 4 [0101.563] GetSystemMetrics (nIndex=33) returned 4 [0101.563] CloseThemeData () returned 0x0 [0101.563] capGetDriverDescriptionA () returned 0x0 [0101.564] GetLastError () returned 0x0 [0101.564] SetLastError (dwErrCode=0x0) [0101.564] OpenThemeData () returned 0x11c0000 [0101.564] GetSystemMetrics (nIndex=32) returned 4 [0101.564] GetSystemMetrics (nIndex=33) returned 4 [0101.564] CloseThemeData () returned 0x0 [0101.565] capGetDriverDescriptionA () returned 0x0 [0101.565] GetLastError () returned 0x0 [0101.565] SetLastError (dwErrCode=0x0) [0101.565] OpenThemeData () returned 0x11d0000 [0101.566] GetSystemMetrics (nIndex=32) returned 4 [0101.566] GetSystemMetrics (nIndex=33) returned 4 [0101.566] CloseThemeData () returned 0x0 [0101.566] capGetDriverDescriptionA () returned 0x0 [0101.567] GetLastError () returned 0x0 [0101.567] SetLastError (dwErrCode=0x0) [0101.567] OpenThemeData () returned 0x11e0000 [0101.567] GetSystemMetrics (nIndex=32) returned 4 [0101.568] GetSystemMetrics (nIndex=33) returned 4 [0101.568] CloseThemeData () returned 0x0 [0101.568] capGetDriverDescriptionA () returned 0x0 [0101.569] GetLastError () returned 0x0 [0101.569] SetLastError (dwErrCode=0x0) [0101.569] OpenThemeData () returned 0x11f0000 [0101.569] GetSystemMetrics (nIndex=32) returned 4 [0101.569] GetSystemMetrics (nIndex=33) returned 4 [0101.569] CloseThemeData () returned 0x0 [0101.569] capGetDriverDescriptionA () returned 0x0 [0101.570] GetLastError () returned 0x0 [0101.570] SetLastError (dwErrCode=0x0) [0101.570] OpenThemeData () returned 0x1200000 [0101.570] GetSystemMetrics (nIndex=32) returned 4 [0101.570] GetSystemMetrics (nIndex=33) returned 4 [0101.571] CloseThemeData () returned 0x0 [0101.571] capGetDriverDescriptionA () returned 0x0 [0101.572] GetLastError () returned 0x0 [0101.572] SetLastError (dwErrCode=0x0) [0101.572] OpenThemeData () returned 0x1210000 [0101.573] GetSystemMetrics (nIndex=32) returned 4 [0101.573] GetSystemMetrics (nIndex=33) returned 4 [0101.573] CloseThemeData () returned 0x0 [0101.573] capGetDriverDescriptionA () returned 0x0 [0101.574] GetLastError () returned 0x0 [0101.574] SetLastError (dwErrCode=0x0) [0101.574] OpenThemeData () returned 0x1220000 [0101.574] GetSystemMetrics (nIndex=32) returned 4 [0101.574] GetSystemMetrics (nIndex=33) returned 4 [0101.574] CloseThemeData () returned 0x0 [0101.575] capGetDriverDescriptionA () returned 0x0 [0101.575] GetLastError () returned 0x0 [0101.575] SetLastError (dwErrCode=0x0) [0101.575] OpenThemeData () returned 0x1230000 [0101.576] GetSystemMetrics (nIndex=32) returned 4 [0101.576] GetSystemMetrics (nIndex=33) returned 4 [0101.576] CloseThemeData () returned 0x0 [0101.576] capGetDriverDescriptionA () returned 0x0 [0101.577] GetLastError () returned 0x0 [0101.577] SetLastError (dwErrCode=0x0) [0101.577] OpenThemeData () returned 0x1240000 [0101.577] GetSystemMetrics (nIndex=32) returned 4 [0101.577] GetSystemMetrics (nIndex=33) returned 4 [0101.577] CloseThemeData () returned 0x0 [0101.578] capGetDriverDescriptionA () returned 0x0 [0101.578] GetLastError () returned 0x0 [0101.578] SetLastError (dwErrCode=0x0) [0101.578] OpenThemeData () returned 0x1250000 [0101.579] GetSystemMetrics (nIndex=32) returned 4 [0101.579] GetSystemMetrics (nIndex=33) returned 4 [0101.579] CloseThemeData () returned 0x0 [0101.579] capGetDriverDescriptionA () returned 0x0 [0101.580] GetLastError () returned 0x0 [0101.580] SetLastError (dwErrCode=0x0) [0101.580] OpenThemeData () returned 0x1260000 [0101.580] GetSystemMetrics (nIndex=32) returned 4 [0101.580] GetSystemMetrics (nIndex=33) returned 4 [0101.580] CloseThemeData () returned 0x0 [0101.581] capGetDriverDescriptionA () returned 0x0 [0101.581] GetLastError () returned 0x0 [0101.581] SetLastError (dwErrCode=0x0) [0101.581] OpenThemeData () returned 0x1270000 [0101.582] GetSystemMetrics (nIndex=32) returned 4 [0101.582] GetSystemMetrics (nIndex=33) returned 4 [0101.582] CloseThemeData () returned 0x0 [0101.582] capGetDriverDescriptionA () returned 0x0 [0101.583] GetLastError () returned 0x0 [0101.583] SetLastError (dwErrCode=0x0) [0101.583] OpenThemeData () returned 0x1280000 [0101.583] GetSystemMetrics (nIndex=32) returned 4 [0101.583] GetSystemMetrics (nIndex=33) returned 4 [0101.583] CloseThemeData () returned 0x0 [0101.584] capGetDriverDescriptionA () returned 0x0 [0101.584] GetLastError () returned 0x0 [0101.584] SetLastError (dwErrCode=0x0) [0101.584] OpenThemeData () returned 0x1290000 [0101.585] GetSystemMetrics (nIndex=32) returned 4 [0101.585] GetSystemMetrics (nIndex=33) returned 4 [0101.585] CloseThemeData () returned 0x0 [0101.585] capGetDriverDescriptionA () returned 0x0 [0101.586] GetLastError () returned 0x0 [0101.586] SetLastError (dwErrCode=0x0) [0101.586] OpenThemeData () returned 0x12a0000 [0101.586] GetSystemMetrics (nIndex=32) returned 4 [0101.586] GetSystemMetrics (nIndex=33) returned 4 [0101.586] CloseThemeData () returned 0x0 [0101.587] lstrlenA (lpString="\x92\x07") returned 2 [0101.587] lstrlenA (lpString="\x92\x07") returned 2 [0101.587] lstrlenA (lpString="\x92\x07") returned 2 [0101.587] lstrlenA (lpString="\x92\x07") returned 2 [0101.587] lstrlenA (lpString="\x92\x07") returned 2 [0101.587] lstrlenA (lpString="\x92\x07") returned 2 [0101.587] capGetDriverDescriptionA () returned 0x0 [0101.588] GetLastError () returned 0x0 [0101.588] SetLastError (dwErrCode=0x0) [0101.588] OpenThemeData () returned 0x12b0000 [0101.588] GetSystemMetrics (nIndex=32) returned 4 [0101.588] GetSystemMetrics (nIndex=33) returned 4 [0101.588] CloseThemeData () returned 0x0 [0101.589] lstrlenA (lpString="\x92\x07") returned 2 [0101.589] lstrlenA (lpString="\x92\x07") returned 2 [0101.589] lstrlenA (lpString="\x92\x07") returned 2 [0101.589] lstrlenA (lpString="\x92\x07") returned 2 [0101.589] lstrlenA (lpString="\x92\x07") returned 2 [0101.589] lstrlenA (lpString="\x92\x07") returned 2 [0101.589] capGetDriverDescriptionA () returned 0x0 [0101.589] GetLastError () returned 0x0 [0101.589] SetLastError (dwErrCode=0x0) [0101.589] OpenThemeData () returned 0x12c0000 [0101.590] GetSystemMetrics (nIndex=32) returned 4 [0101.590] GetSystemMetrics (nIndex=33) returned 4 [0101.590] CloseThemeData () returned 0x0 [0101.590] lstrlenA (lpString="\x92\x07") returned 2 [0101.590] lstrlenA (lpString="\x92\x07") returned 2 [0101.590] lstrlenA (lpString="\x92\x07") returned 2 [0101.590] lstrlenA (lpString="\x92\x07") returned 2 [0101.590] lstrlenA (lpString="\x92\x07") returned 2 [0101.590] lstrlenA (lpString="\x92\x07") returned 2 [0101.590] capGetDriverDescriptionA () returned 0x0 [0101.591] GetLastError () returned 0x0 [0101.591] SetLastError (dwErrCode=0x0) [0101.591] OpenThemeData () returned 0x12d0000 [0101.592] GetSystemMetrics (nIndex=32) returned 4 [0101.592] GetSystemMetrics (nIndex=33) returned 4 [0101.592] CloseThemeData () returned 0x0 [0101.592] lstrlenA (lpString="\x92\x07") returned 2 [0101.592] lstrlenA (lpString="\x92\x07") returned 2 [0101.592] lstrlenA (lpString="\x92\x07") returned 2 [0101.592] lstrlenA (lpString="\x92\x07") returned 2 [0101.592] lstrlenA (lpString="\x92\x07") returned 2 [0101.592] lstrlenA (lpString="\x92\x07") returned 2 [0101.592] capGetDriverDescriptionA () returned 0x0 [0101.593] GetLastError () returned 0x0 [0101.593] SetLastError (dwErrCode=0x0) [0101.593] OpenThemeData () returned 0x12e0000 [0101.593] GetSystemMetrics (nIndex=32) returned 4 [0101.593] GetSystemMetrics (nIndex=33) returned 4 [0101.593] CloseThemeData () returned 0x0 [0101.594] lstrlenA (lpString="\x92\x07") returned 2 [0101.594] lstrlenA (lpString="\x92\x07") returned 2 [0101.594] lstrlenA (lpString="\x92\x07") returned 2 [0101.594] lstrlenA (lpString="\x92\x07") returned 2 [0101.594] lstrlenA (lpString="\x92\x07") returned 2 [0101.594] lstrlenA (lpString="\x92\x07") returned 2 [0101.594] capGetDriverDescriptionA () returned 0x0 [0101.594] GetLastError () returned 0x0 [0101.594] SetLastError (dwErrCode=0x0) [0101.594] OpenThemeData () returned 0x12f0000 [0101.595] GetSystemMetrics (nIndex=32) returned 4 [0101.595] GetSystemMetrics (nIndex=33) returned 4 [0101.595] CloseThemeData () returned 0x0 [0101.595] lstrlenA (lpString="\x92\x07") returned 2 [0101.595] lstrlenA (lpString="\x92\x07") returned 2 [0101.595] lstrlenA (lpString="\x92\x07") returned 2 [0101.595] lstrlenA (lpString="\x92\x07") returned 2 [0101.595] lstrlenA (lpString="\x92\x07") returned 2 [0101.595] lstrlenA (lpString="\x92\x07") returned 2 [0101.595] capGetDriverDescriptionA () returned 0x0 [0101.596] GetLastError () returned 0x0 [0101.596] SetLastError (dwErrCode=0x0) [0101.596] OpenThemeData () returned 0x1300000 [0101.596] GetSystemMetrics (nIndex=32) returned 4 [0101.597] GetSystemMetrics (nIndex=33) returned 4 [0101.597] CloseThemeData () returned 0x0 [0101.597] lstrlenA (lpString="\x92\x07") returned 2 [0101.597] lstrlenA (lpString="\x92\x07") returned 2 [0101.597] lstrlenA (lpString="\x92\x07") returned 2 [0101.597] lstrlenA (lpString="\x92\x07") returned 2 [0101.597] lstrlenA (lpString="\x92\x07") returned 2 [0101.597] lstrlenA (lpString="\x92\x07") returned 2 [0101.597] capGetDriverDescriptionA () returned 0x0 [0101.598] GetLastError () returned 0x0 [0101.598] SetLastError (dwErrCode=0x0) [0101.598] OpenThemeData () returned 0x1310000 [0101.598] GetSystemMetrics (nIndex=32) returned 4 [0101.598] GetSystemMetrics (nIndex=33) returned 4 [0101.598] CloseThemeData () returned 0x0 [0101.599] lstrlenA (lpString="\x92\x07") returned 2 [0101.599] lstrlenA (lpString="\x92\x07") returned 2 [0101.599] lstrlenA (lpString="\x92\x07") returned 2 [0101.599] lstrlenA (lpString="\x92\x07") returned 2 [0101.599] lstrlenA (lpString="\x92\x07") returned 2 [0101.599] lstrlenA (lpString="\x92\x07") returned 2 [0101.599] capGetDriverDescriptionA () returned 0x0 [0101.599] GetLastError () returned 0x0 [0101.599] SetLastError (dwErrCode=0x0) [0101.599] OpenThemeData () returned 0x1320000 [0101.600] GetSystemMetrics (nIndex=32) returned 4 [0101.600] GetSystemMetrics (nIndex=33) returned 4 [0101.600] CloseThemeData () returned 0x0 [0101.600] lstrlenA (lpString="\x92\x07") returned 2 [0101.600] lstrlenA (lpString="\x92\x07") returned 2 [0101.600] lstrlenA (lpString="\x92\x07") returned 2 [0101.600] lstrlenA (lpString="\x92\x07") returned 2 [0101.600] lstrlenA (lpString="\x92\x07") returned 2 [0101.600] lstrlenA (lpString="\x92\x07") returned 2 [0101.600] capGetDriverDescriptionA () returned 0x0 [0101.601] GetLastError () returned 0x0 [0101.601] SetLastError (dwErrCode=0x0) [0101.601] OpenThemeData () returned 0x1330000 [0101.601] GetSystemMetrics (nIndex=32) returned 4 [0101.602] GetSystemMetrics (nIndex=33) returned 4 [0101.602] CloseThemeData () returned 0x0 [0101.602] lstrlenA (lpString="\x92\x07") returned 2 [0101.602] lstrlenA (lpString="\x92\x07") returned 2 [0101.602] lstrlenA (lpString="\x92\x07") returned 2 [0101.602] lstrlenA (lpString="\x92\x07") returned 2 [0101.602] lstrlenA (lpString="\x92\x07") returned 2 [0101.602] lstrlenA (lpString="\x92\x07") returned 2 [0101.602] capGetDriverDescriptionA () returned 0x0 [0101.660] GetLastError () returned 0x0 [0101.660] SetLastError (dwErrCode=0x0) [0101.660] OpenThemeData () returned 0x1340000 [0101.660] GetSystemMetrics (nIndex=32) returned 4 [0101.660] GetSystemMetrics (nIndex=33) returned 4 [0101.660] CloseThemeData () returned 0x0 [0101.661] lstrlenA (lpString="\x92\x07") returned 2 [0101.661] lstrlenA (lpString="\x92\x07") returned 2 [0101.661] lstrlenA (lpString="\x92\x07") returned 2 [0101.661] lstrlenA (lpString="\x92\x07") returned 2 [0101.661] lstrlenA (lpString="\x92\x07") returned 2 [0101.661] lstrlenA (lpString="\x92\x07") returned 2 [0101.661] capGetDriverDescriptionA () returned 0x0 [0101.661] GetLastError () returned 0x0 [0101.661] SetLastError (dwErrCode=0x0) [0101.661] OpenThemeData () returned 0x1350000 [0101.662] GetSystemMetrics (nIndex=32) returned 4 [0101.662] GetSystemMetrics (nIndex=33) returned 4 [0101.662] CloseThemeData () returned 0x0 [0101.662] lstrlenA (lpString="\x92\x07") returned 2 [0101.662] lstrlenA (lpString="\x92\x07") returned 2 [0101.662] lstrlenA (lpString="\x92\x07") returned 2 [0101.662] lstrlenA (lpString="\x92\x07") returned 2 [0101.662] lstrlenA (lpString="\x92\x07") returned 2 [0101.662] lstrlenA (lpString="\x92\x07") returned 2 [0101.662] capGetDriverDescriptionA () returned 0x0 [0101.663] GetLastError () returned 0x0 [0101.663] SetLastError (dwErrCode=0x0) [0101.663] OpenThemeData () returned 0x1360000 [0101.664] GetSystemMetrics (nIndex=32) returned 4 [0101.664] GetSystemMetrics (nIndex=33) returned 4 [0101.664] CloseThemeData () returned 0x0 [0101.664] lstrlenA (lpString="\x92\x07") returned 2 [0101.664] lstrlenA (lpString="\x92\x07") returned 2 [0101.664] lstrlenA (lpString="\x92\x07") returned 2 [0101.664] lstrlenA (lpString="\x92\x07") returned 2 [0101.664] lstrlenA (lpString="\x92\x07") returned 2 [0101.664] lstrlenA (lpString="\x92\x07") returned 2 [0101.664] capGetDriverDescriptionA () returned 0x0 [0101.665] GetLastError () returned 0x0 [0101.665] SetLastError (dwErrCode=0x0) [0101.665] OpenThemeData () returned 0x1370000 [0101.665] GetSystemMetrics (nIndex=32) returned 4 [0101.665] GetSystemMetrics (nIndex=33) returned 4 [0101.666] CloseThemeData () returned 0x0 [0101.666] lstrlenA (lpString="\x92\x07") returned 2 [0101.666] lstrlenA (lpString="\x92\x07") returned 2 [0101.666] lstrlenA (lpString="\x92\x07") returned 2 [0101.666] lstrlenA (lpString="\x92\x07") returned 2 [0101.666] lstrlenA (lpString="\x92\x07") returned 2 [0101.666] lstrlenA (lpString="\x92\x07") returned 2 [0101.666] capGetDriverDescriptionA () returned 0x0 [0101.667] GetLastError () returned 0x0 [0101.667] SetLastError (dwErrCode=0x0) [0101.667] OpenThemeData () returned 0x1380000 [0101.667] GetSystemMetrics (nIndex=32) returned 4 [0101.667] GetSystemMetrics (nIndex=33) returned 4 [0101.667] CloseThemeData () returned 0x0 [0101.668] lstrlenA (lpString="\x92\x07") returned 2 [0101.668] lstrlenA (lpString="\x92\x07") returned 2 [0101.668] lstrlenA (lpString="\x92\x07") returned 2 [0101.668] lstrlenA (lpString="\x92\x07") returned 2 [0101.668] lstrlenA (lpString="\x92\x07") returned 2 [0101.668] lstrlenA (lpString="\x92\x07") returned 2 [0101.668] capGetDriverDescriptionA () returned 0x0 [0101.668] GetLastError () returned 0x0 [0101.668] SetLastError (dwErrCode=0x0) [0101.668] OpenThemeData () returned 0x1390000 [0101.669] GetSystemMetrics (nIndex=32) returned 4 [0101.669] GetSystemMetrics (nIndex=33) returned 4 [0101.669] CloseThemeData () returned 0x0 [0101.669] lstrlenA (lpString="\x92\x07") returned 2 [0101.669] lstrlenA (lpString="\x92\x07") returned 2 [0101.669] lstrlenA (lpString="\x92\x07") returned 2 [0101.669] lstrlenA (lpString="\x92\x07") returned 2 [0101.669] lstrlenA (lpString="\x92\x07") returned 2 [0101.669] lstrlenA (lpString="\x92\x07") returned 2 [0101.669] capGetDriverDescriptionA () returned 0x0 [0101.670] GetLastError () returned 0x0 [0101.670] SetLastError (dwErrCode=0x0) [0101.670] OpenThemeData () returned 0x13a0000 [0101.670] GetSystemMetrics (nIndex=32) returned 4 [0101.670] GetSystemMetrics (nIndex=33) returned 4 [0101.670] CloseThemeData () returned 0x0 [0101.671] lstrlenA (lpString="\x92\x07") returned 2 [0101.671] lstrlenA (lpString="\x92\x07") returned 2 [0101.671] lstrlenA (lpString="\x92\x07") returned 2 [0101.671] lstrlenA (lpString="\x92\x07") returned 2 [0101.671] lstrlenA (lpString="\x92\x07") returned 2 [0101.671] lstrlenA (lpString="\x92\x07") returned 2 [0101.671] capGetDriverDescriptionA () returned 0x0 [0101.672] GetLastError () returned 0x0 [0101.672] SetLastError (dwErrCode=0x0) [0101.672] OpenThemeData () returned 0x13b0000 [0101.672] GetSystemMetrics (nIndex=32) returned 4 [0101.672] GetSystemMetrics (nIndex=33) returned 4 [0101.672] CloseThemeData () returned 0x0 [0101.672] lstrlenA (lpString="\x92\x07") returned 2 [0101.672] lstrlenA (lpString="\x92\x07") returned 2 [0101.673] lstrlenA (lpString="\x92\x07") returned 2 [0101.673] lstrlenA (lpString="\x92\x07") returned 2 [0101.673] lstrlenA (lpString="\x92\x07") returned 2 [0101.673] lstrlenA (lpString="\x92\x07") returned 2 [0101.673] capGetDriverDescriptionA () returned 0x0 [0101.673] GetLastError () returned 0x0 [0101.673] SetLastError (dwErrCode=0x0) [0101.673] OpenThemeData () returned 0x13c0000 [0101.674] GetSystemMetrics (nIndex=32) returned 4 [0101.674] GetSystemMetrics (nIndex=33) returned 4 [0101.674] CloseThemeData () returned 0x0 [0101.674] lstrlenA (lpString="\x92\x07") returned 2 [0101.674] lstrlenA (lpString="\x92\x07") returned 2 [0101.674] lstrlenA (lpString="\x92\x07") returned 2 [0101.674] lstrlenA (lpString="\x92\x07") returned 2 [0101.674] lstrlenA (lpString="\x92\x07") returned 2 [0101.674] lstrlenA (lpString="\x92\x07") returned 2 [0101.674] capGetDriverDescriptionA () returned 0x0 [0101.675] GetLastError () returned 0x0 [0101.675] SetLastError (dwErrCode=0x0) [0101.675] OpenThemeData () returned 0x13d0000 [0101.675] GetSystemMetrics (nIndex=32) returned 4 [0101.675] GetSystemMetrics (nIndex=33) returned 4 [0101.675] CloseThemeData () returned 0x0 [0101.676] lstrlenA (lpString="\x92\x07") returned 2 [0101.676] lstrlenA (lpString="\x92\x07") returned 2 [0101.676] lstrlenA (lpString="\x92\x07") returned 2 [0101.676] lstrlenA (lpString="\x92\x07") returned 2 [0101.676] lstrlenA (lpString="\x92\x07") returned 2 [0101.676] lstrlenA (lpString="\x92\x07") returned 2 [0101.676] capGetDriverDescriptionA () returned 0x0 [0101.677] GetLastError () returned 0x0 [0101.677] SetLastError (dwErrCode=0x0) [0101.677] OpenThemeData () returned 0x13e0000 [0101.677] GetSystemMetrics (nIndex=32) returned 4 [0101.677] GetSystemMetrics (nIndex=33) returned 4 [0101.677] CloseThemeData () returned 0x0 [0101.677] lstrlenA (lpString="\x92\x07") returned 2 [0101.677] lstrlenA (lpString="\x92\x07") returned 2 [0101.677] lstrlenA (lpString="\x92\x07") returned 2 [0101.677] lstrlenA (lpString="\x92\x07") returned 2 [0101.678] lstrlenA (lpString="\x92\x07") returned 2 [0101.678] lstrlenA (lpString="\x92\x07") returned 2 [0101.678] capGetDriverDescriptionA () returned 0x0 [0101.678] GetLastError () returned 0x0 [0101.678] SetLastError (dwErrCode=0x0) [0101.678] OpenThemeData () returned 0x13f0000 [0101.679] GetSystemMetrics (nIndex=32) returned 4 [0101.679] GetSystemMetrics (nIndex=33) returned 4 [0101.679] CloseThemeData () returned 0x0 [0101.679] lstrlenA (lpString="\x92\x07") returned 2 [0101.679] lstrlenA (lpString="\x92\x07") returned 2 [0101.679] lstrlenA (lpString="\x92\x07") returned 2 [0101.679] lstrlenA (lpString="\x92\x07") returned 2 [0101.679] lstrlenA (lpString="\x92\x07") returned 2 [0101.679] lstrlenA (lpString="\x92\x07") returned 2 [0101.679] capGetDriverDescriptionA () returned 0x0 [0101.680] GetLastError () returned 0x0 [0101.680] SetLastError (dwErrCode=0x0) [0101.680] OpenThemeData () returned 0x1400000 [0101.680] GetSystemMetrics (nIndex=32) returned 4 [0101.680] GetSystemMetrics (nIndex=33) returned 4 [0101.680] CloseThemeData () returned 0x0 [0101.681] lstrlenA (lpString="\x92\x07") returned 2 [0101.681] lstrlenA (lpString="\x92\x07") returned 2 [0101.681] lstrlenA (lpString="\x92\x07") returned 2 [0101.681] lstrlenA (lpString="\x92\x07") returned 2 [0101.681] lstrlenA (lpString="\x92\x07") returned 2 [0101.681] lstrlenA (lpString="\x92\x07") returned 2 [0101.681] capGetDriverDescriptionA () returned 0x0 [0101.682] GetLastError () returned 0x0 [0101.682] SetLastError (dwErrCode=0x0) [0101.682] OpenThemeData () returned 0x1410000 [0101.682] GetSystemMetrics (nIndex=32) returned 4 [0101.682] GetSystemMetrics (nIndex=33) returned 4 [0101.682] CloseThemeData () returned 0x0 [0101.682] lstrlenA (lpString="\x92\x07") returned 2 [0101.682] lstrlenA (lpString="\x92\x07") returned 2 [0101.682] lstrlenA (lpString="\x92\x07") returned 2 [0101.682] lstrlenA (lpString="\x92\x07") returned 2 [0101.683] lstrlenA (lpString="\x92\x07") returned 2 [0101.683] lstrlenA (lpString="\x92\x07") returned 2 [0101.683] capGetDriverDescriptionA () returned 0x0 [0101.683] GetLastError () returned 0x0 [0101.683] SetLastError (dwErrCode=0x0) [0101.683] OpenThemeData () returned 0x1420000 [0101.684] GetSystemMetrics (nIndex=32) returned 4 [0101.684] GetSystemMetrics (nIndex=33) returned 4 [0101.684] CloseThemeData () returned 0x0 [0101.684] lstrlenA (lpString="\x92\x07") returned 2 [0101.684] lstrlenA (lpString="\x92\x07") returned 2 [0101.684] lstrlenA (lpString="\x92\x07") returned 2 [0101.684] lstrlenA (lpString="\x92\x07") returned 2 [0101.684] lstrlenA (lpString="\x92\x07") returned 2 [0101.684] lstrlenA (lpString="\x92\x07") returned 2 [0101.684] capGetDriverDescriptionA () returned 0x0 [0101.685] GetLastError () returned 0x0 [0101.685] SetLastError (dwErrCode=0x0) [0101.685] OpenThemeData () returned 0x1430000 [0101.685] GetSystemMetrics (nIndex=32) returned 4 [0101.685] GetSystemMetrics (nIndex=33) returned 4 [0101.685] CloseThemeData () returned 0x0 [0101.686] lstrlenA (lpString="\x92\x07") returned 2 [0101.686] lstrlenA (lpString="\x92\x07") returned 2 [0101.686] lstrlenA (lpString="\x92\x07") returned 2 [0101.686] lstrlenA (lpString="\x92\x07") returned 2 [0101.686] lstrlenA (lpString="\x92\x07") returned 2 [0101.686] lstrlenA (lpString="\x92\x07") returned 2 [0101.686] capGetDriverDescriptionA () returned 0x0 [0101.686] GetLastError () returned 0x0 [0101.686] SetLastError (dwErrCode=0x0) [0101.686] OpenThemeData () returned 0x1440000 [0101.687] GetSystemMetrics (nIndex=32) returned 4 [0101.687] GetSystemMetrics (nIndex=33) returned 4 [0101.687] CloseThemeData () returned 0x0 [0101.687] lstrlenA (lpString="\x92\x07") returned 2 [0101.687] lstrlenA (lpString="\x92\x07") returned 2 [0101.687] lstrlenA (lpString="\x92\x07") returned 2 [0101.687] lstrlenA (lpString="\x92\x07") returned 2 [0101.687] lstrlenA (lpString="\x92\x07") returned 2 [0101.687] lstrlenA (lpString="\x92\x07") returned 2 [0101.687] capGetDriverDescriptionA () returned 0x0 [0101.688] GetLastError () returned 0x0 [0101.688] SetLastError (dwErrCode=0x0) [0101.688] OpenThemeData () returned 0x1450000 [0101.689] GetSystemMetrics (nIndex=32) returned 4 [0101.689] GetSystemMetrics (nIndex=33) returned 4 [0101.689] CloseThemeData () returned 0x0 [0101.689] lstrlenA (lpString="\x92\x07") returned 2 [0101.689] lstrlenA (lpString="\x92\x07") returned 2 [0101.689] lstrlenA (lpString="\x92\x07") returned 2 [0101.689] lstrlenA (lpString="\x92\x07") returned 2 [0101.689] lstrlenA (lpString="\x92\x07") returned 2 [0101.689] lstrlenA (lpString="\x92\x07") returned 2 [0101.689] capGetDriverDescriptionA () returned 0x0 [0101.690] GetLastError () returned 0x0 [0101.690] SetLastError (dwErrCode=0x0) [0101.690] OpenThemeData () returned 0x1460000 [0101.690] GetSystemMetrics (nIndex=32) returned 4 [0101.690] GetSystemMetrics (nIndex=33) returned 4 [0101.690] CloseThemeData () returned 0x0 [0101.690] lstrlenA (lpString="\x92\x07") returned 2 [0101.690] lstrlenA (lpString="\x92\x07") returned 2 [0101.690] lstrlenA (lpString="\x92\x07") returned 2 [0101.691] lstrlenA (lpString="\x92\x07") returned 2 [0101.691] lstrlenA (lpString="\x92\x07") returned 2 [0101.691] lstrlenA (lpString="\x92\x07") returned 2 [0101.691] capGetDriverDescriptionA () returned 0x0 [0101.691] GetLastError () returned 0x0 [0101.691] SetLastError (dwErrCode=0x0) [0101.691] OpenThemeData () returned 0x1470000 [0101.692] GetSystemMetrics (nIndex=32) returned 4 [0101.692] GetSystemMetrics (nIndex=33) returned 4 [0101.692] CloseThemeData () returned 0x0 [0101.692] lstrlenA (lpString="\x92\x07") returned 2 [0101.692] lstrlenA (lpString="\x92\x07") returned 2 [0101.692] lstrlenA (lpString="\x92\x07") returned 2 [0101.692] lstrlenA (lpString="\x92\x07") returned 2 [0101.692] lstrlenA (lpString="\x92\x07") returned 2 [0101.692] lstrlenA (lpString="\x92\x07") returned 2 [0101.692] capGetDriverDescriptionA () returned 0x0 [0101.693] GetLastError () returned 0x0 [0101.693] SetLastError (dwErrCode=0x0) [0101.693] OpenThemeData () returned 0x1480000 [0101.693] GetSystemMetrics (nIndex=32) returned 4 [0101.693] GetSystemMetrics (nIndex=33) returned 4 [0101.693] CloseThemeData () returned 0x0 [0101.694] lstrlenA (lpString="\x92\x07") returned 2 [0101.694] lstrlenA (lpString="\x92\x07") returned 2 [0101.694] lstrlenA (lpString="\x92\x07") returned 2 [0101.694] lstrlenA (lpString="\x92\x07") returned 2 [0101.694] lstrlenA (lpString="\x92\x07") returned 2 [0101.694] lstrlenA (lpString="\x92\x07") returned 2 [0101.694] capGetDriverDescriptionA () returned 0x0 [0101.694] GetLastError () returned 0x0 [0101.694] SetLastError (dwErrCode=0x0) [0101.694] OpenThemeData () returned 0x1490000 [0101.695] GetSystemMetrics (nIndex=32) returned 4 [0101.695] GetSystemMetrics (nIndex=33) returned 4 [0101.695] CloseThemeData () returned 0x0 [0101.695] lstrlenA (lpString="\x92\x07") returned 2 [0101.695] lstrlenA (lpString="\x92\x07") returned 2 [0101.695] lstrlenA (lpString="\x92\x07") returned 2 [0101.695] lstrlenA (lpString="\x92\x07") returned 2 [0101.695] lstrlenA (lpString="\x92\x07") returned 2 [0101.695] lstrlenA (lpString="\x92\x07") returned 2 [0101.695] capGetDriverDescriptionA () returned 0x0 [0101.696] GetLastError () returned 0x0 [0101.696] SetLastError (dwErrCode=0x0) [0101.763] OpenThemeData () returned 0x14a0000 [0101.763] GetSystemMetrics (nIndex=32) returned 4 [0101.763] GetSystemMetrics (nIndex=33) returned 4 [0101.763] CloseThemeData () returned 0x0 [0101.764] lstrlenA (lpString="\x92\x07") returned 2 [0101.764] lstrlenA (lpString="\x92\x07") returned 2 [0101.764] lstrlenA (lpString="\x92\x07") returned 2 [0101.764] lstrlenA (lpString="\x92\x07") returned 2 [0101.764] lstrlenA (lpString="\x92\x07") returned 2 [0101.764] lstrlenA (lpString="\x92\x07") returned 2 [0101.764] capGetDriverDescriptionA () returned 0x0 [0101.765] GetLastError () returned 0x0 [0101.765] SetLastError (dwErrCode=0x0) [0101.765] OpenThemeData () returned 0x14b0000 [0101.765] GetSystemMetrics (nIndex=32) returned 4 [0101.766] GetSystemMetrics (nIndex=33) returned 4 [0101.766] CloseThemeData () returned 0x0 [0101.766] lstrlenA (lpString="\x92\x07") returned 2 [0101.766] lstrlenA (lpString="\x92\x07") returned 2 [0101.766] lstrlenA (lpString="\x92\x07") returned 2 [0101.766] lstrlenA (lpString="\x92\x07") returned 2 [0101.766] lstrlenA (lpString="\x92\x07") returned 2 [0101.766] lstrlenA (lpString="\x92\x07") returned 2 [0101.766] capGetDriverDescriptionA () returned 0x0 [0101.767] GetLastError () returned 0x0 [0101.767] SetLastError (dwErrCode=0x0) [0101.767] OpenThemeData () returned 0x14c0000 [0101.767] GetSystemMetrics (nIndex=32) returned 4 [0101.767] GetSystemMetrics (nIndex=33) returned 4 [0101.767] CloseThemeData () returned 0x0 [0101.767] lstrlenA (lpString="\x92\x07") returned 2 [0101.767] lstrlenA (lpString="\x92\x07") returned 2 [0101.768] lstrlenA (lpString="\x92\x07") returned 2 [0101.768] lstrlenA (lpString="\x92\x07") returned 2 [0101.768] lstrlenA (lpString="\x92\x07") returned 2 [0101.768] lstrlenA (lpString="\x92\x07") returned 2 [0101.768] capGetDriverDescriptionA () returned 0x0 [0101.768] GetLastError () returned 0x0 [0101.768] SetLastError (dwErrCode=0x0) [0101.768] OpenThemeData () returned 0x14d0000 [0101.769] GetSystemMetrics (nIndex=32) returned 4 [0101.769] GetSystemMetrics (nIndex=33) returned 4 [0101.769] CloseThemeData () returned 0x0 [0101.769] lstrlenA (lpString="\x92\x07") returned 2 [0101.769] lstrlenA (lpString="\x92\x07") returned 2 [0101.769] lstrlenA (lpString="\x92\x07") returned 2 [0101.769] lstrlenA (lpString="\x92\x07") returned 2 [0101.769] lstrlenA (lpString="\x92\x07") returned 2 [0101.769] lstrlenA (lpString="\x92\x07") returned 2 [0101.769] capGetDriverDescriptionA () returned 0x0 [0101.770] GetLastError () returned 0x0 [0101.770] SetLastError (dwErrCode=0x0) [0101.770] OpenThemeData () returned 0x14e0000 [0101.770] GetSystemMetrics (nIndex=32) returned 4 [0101.770] GetSystemMetrics (nIndex=33) returned 4 [0101.770] CloseThemeData () returned 0x0 [0101.771] lstrlenA (lpString="\x92\x07") returned 2 [0101.771] lstrlenA (lpString="\x92\x07") returned 2 [0101.771] lstrlenA (lpString="\x92\x07") returned 2 [0101.771] lstrlenA (lpString="\x92\x07") returned 2 [0101.771] lstrlenA (lpString="\x92\x07") returned 2 [0101.771] lstrlenA (lpString="\x92\x07") returned 2 [0101.771] capGetDriverDescriptionA () returned 0x0 [0101.772] GetLastError () returned 0x0 [0101.772] SetLastError (dwErrCode=0x0) [0101.772] OpenThemeData () returned 0x14f0000 [0101.772] GetSystemMetrics (nIndex=32) returned 4 [0101.772] GetSystemMetrics (nIndex=33) returned 4 [0101.772] CloseThemeData () returned 0x0 [0101.772] lstrlenA (lpString="\x92\x07") returned 2 [0101.772] lstrlenA (lpString="\x92\x07") returned 2 [0101.772] lstrlenA (lpString="\x92\x07") returned 2 [0101.772] lstrlenA (lpString="\x92\x07") returned 2 [0101.772] lstrlenA (lpString="\x92\x07") returned 2 [0101.773] lstrlenA (lpString="\x92\x07") returned 2 [0101.773] capGetDriverDescriptionA () returned 0x0 [0101.773] GetLastError () returned 0x0 [0101.773] SetLastError (dwErrCode=0x0) [0101.773] OpenThemeData () returned 0x1500000 [0101.774] GetSystemMetrics (nIndex=32) returned 4 [0101.774] GetSystemMetrics (nIndex=33) returned 4 [0101.774] CloseThemeData () returned 0x0 [0101.774] lstrlenA (lpString="\x92\x07") returned 2 [0101.774] lstrlenA (lpString="\x92\x07") returned 2 [0101.774] lstrlenA (lpString="\x92\x07") returned 2 [0101.774] lstrlenA (lpString="\x92\x07") returned 2 [0101.774] lstrlenA (lpString="\x92\x07") returned 2 [0101.774] lstrlenA (lpString="\x92\x07") returned 2 [0101.774] capGetDriverDescriptionA () returned 0x0 [0101.775] GetLastError () returned 0x0 [0101.775] SetLastError (dwErrCode=0x0) [0101.775] OpenThemeData () returned 0x1510000 [0101.775] GetSystemMetrics (nIndex=32) returned 4 [0101.775] GetSystemMetrics (nIndex=33) returned 4 [0101.775] CloseThemeData () returned 0x0 [0101.776] lstrlenA (lpString="\x92\x07") returned 2 [0101.776] lstrlenA (lpString="\x92\x07") returned 2 [0101.776] lstrlenA (lpString="\x92\x07") returned 2 [0101.776] lstrlenA (lpString="\x92\x07") returned 2 [0101.776] lstrlenA (lpString="\x92\x07") returned 2 [0101.776] lstrlenA (lpString="\x92\x07") returned 2 [0101.776] capGetDriverDescriptionA () returned 0x0 [0101.776] GetLastError () returned 0x0 [0101.777] SetLastError (dwErrCode=0x0) [0101.777] OpenThemeData () returned 0x1520000 [0101.777] GetSystemMetrics (nIndex=32) returned 4 [0101.777] GetSystemMetrics (nIndex=33) returned 4 [0101.777] CloseThemeData () returned 0x0 [0101.777] lstrlenA (lpString="\x92\x07") returned 2 [0101.777] lstrlenA (lpString="\x92\x07") returned 2 [0101.777] lstrlenA (lpString="\x92\x07") returned 2 [0101.777] lstrlenA (lpString="\x92\x07") returned 2 [0101.777] lstrlenA (lpString="\x92\x07") returned 2 [0101.777] lstrlenA (lpString="\x92\x07") returned 2 [0101.778] capGetDriverDescriptionA () returned 0x0 [0101.778] GetLastError () returned 0x0 [0101.778] SetLastError (dwErrCode=0x0) [0101.778] OpenThemeData () returned 0x1530000 [0101.779] GetSystemMetrics (nIndex=32) returned 4 [0101.779] GetSystemMetrics (nIndex=33) returned 4 [0101.779] CloseThemeData () returned 0x0 [0101.779] lstrlenA (lpString="\x92\x07") returned 2 [0101.779] lstrlenA (lpString="\x92\x07") returned 2 [0101.779] lstrlenA (lpString="\x92\x07") returned 2 [0101.779] lstrlenA (lpString="\x92\x07") returned 2 [0101.779] lstrlenA (lpString="\x92\x07") returned 2 [0101.779] lstrlenA (lpString="\x92\x07") returned 2 [0101.779] capGetDriverDescriptionA () returned 0x0 [0101.780] GetLastError () returned 0x0 [0101.780] SetLastError (dwErrCode=0x0) [0101.780] OpenThemeData () returned 0x1540000 [0101.780] GetSystemMetrics (nIndex=32) returned 4 [0101.780] GetSystemMetrics (nIndex=33) returned 4 [0101.780] CloseThemeData () returned 0x0 [0101.781] lstrlenA (lpString="\x92\x07") returned 2 [0101.781] lstrlenA (lpString="\x92\x07") returned 2 [0101.781] lstrlenA (lpString="\x92\x07") returned 2 [0101.781] lstrlenA (lpString="\x92\x07") returned 2 [0101.781] lstrlenA (lpString="\x92\x07") returned 2 [0101.781] lstrlenA (lpString="\x92\x07") returned 2 [0101.781] capGetDriverDescriptionA () returned 0x0 [0101.781] GetLastError () returned 0x0 [0101.781] SetLastError (dwErrCode=0x0) [0101.781] OpenThemeData () returned 0x1550000 [0101.782] GetSystemMetrics (nIndex=32) returned 4 [0101.782] GetSystemMetrics (nIndex=33) returned 4 [0101.782] CloseThemeData () returned 0x0 [0101.782] lstrlenA (lpString="\x92\x07") returned 2 [0101.782] lstrlenA (lpString="\x92\x07") returned 2 [0101.782] lstrlenA (lpString="\x92\x07") returned 2 [0101.782] lstrlenA (lpString="\x92\x07") returned 2 [0101.782] lstrlenA (lpString="\x92\x07") returned 2 [0101.782] lstrlenA (lpString="\x92\x07") returned 2 [0101.782] capGetDriverDescriptionA () returned 0x0 [0101.783] GetLastError () returned 0x0 [0101.783] SetLastError (dwErrCode=0x0) [0101.783] OpenThemeData () returned 0x1560000 [0101.783] GetSystemMetrics (nIndex=32) returned 4 [0101.783] GetSystemMetrics (nIndex=33) returned 4 [0101.783] CloseThemeData () returned 0x0 [0101.784] lstrlenA (lpString="\x92\x07") returned 2 [0101.784] lstrlenA (lpString="\x92\x07") returned 2 [0101.784] lstrlenA (lpString="\x92\x07") returned 2 [0101.784] lstrlenA (lpString="\x92\x07") returned 2 [0101.784] lstrlenA (lpString="\x92\x07") returned 2 [0101.784] lstrlenA (lpString="\x92\x07") returned 2 [0101.784] capGetDriverDescriptionA () returned 0x0 [0101.785] GetLastError () returned 0x0 [0101.785] SetLastError (dwErrCode=0x0) [0101.785] OpenThemeData () returned 0x1570000 [0101.785] GetSystemMetrics (nIndex=32) returned 4 [0101.785] GetSystemMetrics (nIndex=33) returned 4 [0101.785] CloseThemeData () returned 0x0 [0101.785] lstrlenA (lpString="\x92\x07") returned 2 [0101.785] lstrlenA (lpString="\x92\x07") returned 2 [0101.785] lstrlenA (lpString="\x92\x07") returned 2 [0101.785] lstrlenA (lpString="\x92\x07") returned 2 [0101.785] lstrlenA (lpString="\x92\x07") returned 2 [0101.785] lstrlenA (lpString="\x92\x07") returned 2 [0101.786] capGetDriverDescriptionA () returned 0x0 [0101.786] GetLastError () returned 0x0 [0101.786] SetLastError (dwErrCode=0x0) [0101.786] OpenThemeData () returned 0x1580000 [0101.787] GetSystemMetrics (nIndex=32) returned 4 [0101.787] GetSystemMetrics (nIndex=33) returned 4 [0101.787] CloseThemeData () returned 0x0 [0101.787] lstrlenA (lpString="\x92\x07") returned 2 [0101.787] lstrlenA (lpString="\x92\x07") returned 2 [0101.787] lstrlenA (lpString="\x92\x07") returned 2 [0101.787] lstrlenA (lpString="\x92\x07") returned 2 [0101.787] lstrlenA (lpString="\x92\x07") returned 2 [0101.787] lstrlenA (lpString="\x92\x07") returned 2 [0101.787] capGetDriverDescriptionA () returned 0x0 [0101.788] GetLastError () returned 0x0 [0101.788] SetLastError (dwErrCode=0x0) [0101.788] OpenThemeData () returned 0x1590000 [0101.788] GetSystemMetrics (nIndex=32) returned 4 [0101.788] GetSystemMetrics (nIndex=33) returned 4 [0101.788] CloseThemeData () returned 0x0 [0101.789] lstrlenA (lpString="\x92\x07") returned 2 [0101.789] lstrlenA (lpString="\x92\x07") returned 2 [0101.789] lstrlenA (lpString="\x92\x07") returned 2 [0101.789] lstrlenA (lpString="\x92\x07") returned 2 [0101.789] lstrlenA (lpString="\x92\x07") returned 2 [0101.789] lstrlenA (lpString="\x92\x07") returned 2 [0101.789] capGetDriverDescriptionA () returned 0x0 [0101.789] GetLastError () returned 0x0 [0101.789] SetLastError (dwErrCode=0x0) [0101.789] OpenThemeData () returned 0x15a0000 [0101.790] GetSystemMetrics (nIndex=32) returned 4 [0101.790] GetSystemMetrics (nIndex=33) returned 4 [0101.790] CloseThemeData () returned 0x0 [0101.791] lstrlenA (lpString="\x92\x07") returned 2 [0101.791] lstrlenA (lpString="\x92\x07") returned 2 [0101.791] lstrlenA (lpString="\x92\x07") returned 2 [0101.791] lstrlenA (lpString="\x92\x07") returned 2 [0101.791] lstrlenA (lpString="\x92\x07") returned 2 [0101.791] lstrlenA (lpString="\x92\x07") returned 2 [0101.793] capGetDriverDescriptionA () returned 0x0 [0101.793] GetLastError () returned 0x0 [0101.793] SetLastError (dwErrCode=0x0) [0101.793] OpenThemeData () returned 0x15b0000 [0101.794] GetSystemMetrics (nIndex=32) returned 4 [0101.794] GetSystemMetrics (nIndex=33) returned 4 [0101.794] CloseThemeData () returned 0x0 [0101.794] lstrlenA (lpString="\x92\x07") returned 2 [0101.794] lstrlenA (lpString="\x92\x07") returned 2 [0101.794] lstrlenA (lpString="\x92\x07") returned 2 [0101.794] lstrlenA (lpString="\x92\x07") returned 2 [0101.794] lstrlenA (lpString="\x92\x07") returned 2 [0101.794] lstrlenA (lpString="\x92\x07") returned 2 [0101.794] capGetDriverDescriptionA () returned 0x0 [0101.795] GetLastError () returned 0x0 [0101.795] SetLastError (dwErrCode=0x0) [0101.795] OpenThemeData () returned 0x15c0000 [0101.795] GetSystemMetrics (nIndex=32) returned 4 [0101.795] GetSystemMetrics (nIndex=33) returned 4 [0101.795] CloseThemeData () returned 0x0 [0101.796] lstrlenA (lpString="\x92\x07") returned 2 [0101.796] lstrlenA (lpString="\x92\x07") returned 2 [0101.796] lstrlenA (lpString="\x92\x07") returned 2 [0101.796] lstrlenA (lpString="\x92\x07") returned 2 [0101.796] lstrlenA (lpString="\x92\x07") returned 2 [0101.796] lstrlenA (lpString="\x92\x07") returned 2 [0101.796] capGetDriverDescriptionA () returned 0x0 [0101.797] GetLastError () returned 0x0 [0101.797] SetLastError (dwErrCode=0x0) [0101.797] OpenThemeData () returned 0x15d0000 [0101.797] GetSystemMetrics (nIndex=32) returned 4 [0101.797] GetSystemMetrics (nIndex=33) returned 4 [0101.797] CloseThemeData () returned 0x0 [0101.797] lstrlenA (lpString="\x92\x07") returned 2 [0101.797] lstrlenA (lpString="\x92\x07") returned 2 [0101.797] lstrlenA (lpString="\x92\x07") returned 2 [0101.797] lstrlenA (lpString="\x92\x07") returned 2 [0101.797] lstrlenA (lpString="\x92\x07") returned 2 [0101.798] lstrlenA (lpString="\x92\x07") returned 2 [0101.798] capGetDriverDescriptionA () returned 0x0 [0101.798] GetLastError () returned 0x0 [0101.798] SetLastError (dwErrCode=0x0) [0101.798] OpenThemeData () returned 0x15e0000 [0101.799] GetSystemMetrics (nIndex=32) returned 4 [0101.799] GetSystemMetrics (nIndex=33) returned 4 [0101.799] CloseThemeData () returned 0x0 [0101.799] lstrlenA (lpString="\x92\x07") returned 2 [0101.799] lstrlenA (lpString="\x92\x07") returned 2 [0101.799] lstrlenA (lpString="\x92\x07") returned 2 [0101.799] lstrlenA (lpString="\x92\x07") returned 2 [0101.799] lstrlenA (lpString="\x92\x07") returned 2 [0101.799] lstrlenA (lpString="\x92\x07") returned 2 [0101.799] capGetDriverDescriptionA () returned 0x0 [0101.800] GetLastError () returned 0x0 [0101.800] SetLastError (dwErrCode=0x0) [0101.800] OpenThemeData () returned 0x15f0000 [0101.800] GetSystemMetrics (nIndex=32) returned 4 [0101.800] GetSystemMetrics (nIndex=33) returned 4 [0101.800] CloseThemeData () returned 0x0 [0101.801] lstrlenA (lpString="\x92\x07") returned 2 [0101.801] lstrlenA (lpString="\x92\x07") returned 2 [0101.801] lstrlenA (lpString="\x92\x07") returned 2 [0101.801] lstrlenA (lpString="\x92\x07") returned 2 [0101.801] lstrlenA (lpString="\x92\x07") returned 2 [0101.801] lstrlenA (lpString="\x92\x07") returned 2 [0101.801] capGetDriverDescriptionA () returned 0x0 [0101.801] GetLastError () returned 0x0 [0101.801] SetLastError (dwErrCode=0x0) [0101.801] OpenThemeData () returned 0x1600000 [0101.802] GetSystemMetrics (nIndex=32) returned 4 [0101.802] GetSystemMetrics (nIndex=33) returned 4 [0101.802] CloseThemeData () returned 0x0 [0101.802] lstrlenA (lpString="\x92\x07") returned 2 [0101.802] lstrlenA (lpString="\x92\x07") returned 2 [0101.802] lstrlenA (lpString="\x92\x07") returned 2 [0101.802] lstrlenA (lpString="\x92\x07") returned 2 [0101.802] lstrlenA (lpString="\x92\x07") returned 2 [0101.802] lstrlenA (lpString="\x92\x07") returned 2 [0101.802] capGetDriverDescriptionA () returned 0x0 [0101.803] GetLastError () returned 0x0 [0101.803] SetLastError (dwErrCode=0x0) [0101.803] OpenThemeData () returned 0x1610000 [0101.803] GetSystemMetrics (nIndex=32) returned 4 [0101.803] GetSystemMetrics (nIndex=33) returned 4 [0101.803] CloseThemeData () returned 0x0 [0101.804] lstrlenA (lpString="\x92\x07") returned 2 [0101.804] lstrlenA (lpString="\x92\x07") returned 2 [0101.804] lstrlenA (lpString="\x92\x07") returned 2 [0101.804] lstrlenA (lpString="\x92\x07") returned 2 [0101.804] lstrlenA (lpString="\x92\x07") returned 2 [0101.804] lstrlenA (lpString="\x92\x07") returned 2 [0101.804] capGetDriverDescriptionA () returned 0x0 [0101.804] GetLastError () returned 0x0 [0101.804] SetLastError (dwErrCode=0x0) [0101.804] OpenThemeData () returned 0x1620000 [0101.805] GetSystemMetrics (nIndex=32) returned 4 [0101.805] GetSystemMetrics (nIndex=33) returned 4 [0101.805] CloseThemeData () returned 0x0 [0101.805] lstrlenA (lpString="\x92\x07") returned 2 [0101.805] lstrlenA (lpString="\x92\x07") returned 2 [0101.805] lstrlenA (lpString="\x92\x07") returned 2 [0101.805] lstrlenA (lpString="\x92\x07") returned 2 [0101.805] lstrlenA (lpString="\x92\x07") returned 2 [0101.805] lstrlenA (lpString="\x92\x07") returned 2 [0101.805] capGetDriverDescriptionA () returned 0x0 [0101.858] GetLastError () returned 0x0 [0101.858] SetLastError (dwErrCode=0x0) [0101.858] OpenThemeData () returned 0x1630000 [0101.858] GetSystemMetrics (nIndex=32) returned 4 [0101.858] GetSystemMetrics (nIndex=33) returned 4 [0101.858] CloseThemeData () returned 0x0 [0101.859] lstrlenA (lpString="\x92\x07") returned 2 [0101.859] lstrlenA (lpString="\x92\x07") returned 2 [0101.859] lstrlenA (lpString="\x92\x07") returned 2 [0101.859] lstrlenA (lpString="\x92\x07") returned 2 [0101.859] lstrlenA (lpString="\x92\x07") returned 2 [0101.859] lstrlenA (lpString="\x92\x07") returned 2 [0101.859] capGetDriverDescriptionA () returned 0x0 [0101.859] GetLastError () returned 0x0 [0101.860] SetLastError (dwErrCode=0x0) [0101.860] OpenThemeData () returned 0x1640000 [0101.860] GetSystemMetrics (nIndex=32) returned 4 [0101.860] GetSystemMetrics (nIndex=33) returned 4 [0101.860] CloseThemeData () returned 0x0 [0101.860] lstrlenA (lpString="\x92\x07") returned 2 [0101.860] lstrlenA (lpString="\x92\x07") returned 2 [0101.860] lstrlenA (lpString="\x92\x07") returned 2 [0101.860] lstrlenA (lpString="\x92\x07") returned 2 [0101.860] lstrlenA (lpString="\x92\x07") returned 2 [0101.860] lstrlenA (lpString="\x92\x07") returned 2 [0101.860] capGetDriverDescriptionA () returned 0x0 [0101.861] GetLastError () returned 0x0 [0101.861] SetLastError (dwErrCode=0x0) [0101.861] OpenThemeData () returned 0x1650000 [0101.862] GetSystemMetrics (nIndex=32) returned 4 [0101.862] GetSystemMetrics (nIndex=33) returned 4 [0101.862] CloseThemeData () returned 0x0 [0101.862] lstrlenA (lpString="\x92\x07") returned 2 [0101.862] lstrlenA (lpString="\x92\x07") returned 2 [0101.862] lstrlenA (lpString="\x92\x07") returned 2 [0101.862] lstrlenA (lpString="\x92\x07") returned 2 [0101.862] lstrlenA (lpString="\x92\x07") returned 2 [0101.862] lstrlenA (lpString="\x92\x07") returned 2 [0101.862] capGetDriverDescriptionA () returned 0x0 [0101.863] GetLastError () returned 0x0 [0101.863] SetLastError (dwErrCode=0x0) [0101.863] OpenThemeData () returned 0x1660000 [0101.863] GetSystemMetrics (nIndex=32) returned 4 [0101.863] GetSystemMetrics (nIndex=33) returned 4 [0101.863] CloseThemeData () returned 0x0 [0101.864] lstrlenA (lpString="\x92\x07") returned 2 [0101.864] lstrlenA (lpString="\x92\x07") returned 2 [0101.864] lstrlenA (lpString="\x92\x07") returned 2 [0101.864] lstrlenA (lpString="\x92\x07") returned 2 [0101.864] lstrlenA (lpString="\x92\x07") returned 2 [0101.864] lstrlenA (lpString="\x92\x07") returned 2 [0101.864] capGetDriverDescriptionA () returned 0x0 [0101.864] GetLastError () returned 0x0 [0101.864] SetLastError (dwErrCode=0x0) [0101.864] OpenThemeData () returned 0x1670000 [0101.865] GetSystemMetrics (nIndex=32) returned 4 [0101.865] GetSystemMetrics (nIndex=33) returned 4 [0101.865] CloseThemeData () returned 0x0 [0101.865] lstrlenA (lpString="\x92\x07") returned 2 [0101.865] lstrlenA (lpString="\x92\x07") returned 2 [0101.865] lstrlenA (lpString="\x92\x07") returned 2 [0101.865] lstrlenA (lpString="\x92\x07") returned 2 [0101.865] lstrlenA (lpString="\x92\x07") returned 2 [0101.865] lstrlenA (lpString="\x92\x07") returned 2 [0101.865] capGetDriverDescriptionA () returned 0x0 [0101.866] GetLastError () returned 0x0 [0101.866] SetLastError (dwErrCode=0x0) [0101.866] OpenThemeData () returned 0x1680000 [0101.866] GetSystemMetrics (nIndex=32) returned 4 [0101.866] GetSystemMetrics (nIndex=33) returned 4 [0101.866] CloseThemeData () returned 0x0 [0101.867] lstrlenA (lpString="\x92\x07") returned 2 [0101.867] lstrlenA (lpString="\x92\x07") returned 2 [0101.867] lstrlenA (lpString="\x92\x07") returned 2 [0101.867] lstrlenA (lpString="\x92\x07") returned 2 [0101.867] lstrlenA (lpString="\x92\x07") returned 2 [0101.867] lstrlenA (lpString="\x92\x07") returned 2 [0101.867] capGetDriverDescriptionA () returned 0x0 [0101.867] GetLastError () returned 0x0 [0101.867] SetLastError (dwErrCode=0x0) [0101.867] OpenThemeData () returned 0x1690000 [0101.868] GetSystemMetrics (nIndex=32) returned 4 [0101.868] GetSystemMetrics (nIndex=33) returned 4 [0101.868] CloseThemeData () returned 0x0 [0101.869] lstrlenA (lpString="\x92\x07") returned 2 [0101.869] lstrlenA (lpString="\x92\x07") returned 2 [0101.869] lstrlenA (lpString="\x92\x07") returned 2 [0101.869] lstrlenA (lpString="\x92\x07") returned 2 [0101.869] lstrlenA (lpString="\x92\x07") returned 2 [0101.869] lstrlenA (lpString="\x92\x07") returned 2 [0101.869] capGetDriverDescriptionA () returned 0x0 [0101.869] GetLastError () returned 0x0 [0101.869] SetLastError (dwErrCode=0x0) [0101.869] OpenThemeData () returned 0x16a0000 [0101.870] GetSystemMetrics (nIndex=32) returned 4 [0101.870] GetSystemMetrics (nIndex=33) returned 4 [0101.870] CloseThemeData () returned 0x0 [0101.870] lstrlenA (lpString="\x92\x07") returned 2 [0101.870] lstrlenA (lpString="\x92\x07") returned 2 [0101.870] lstrlenA (lpString="\x92\x07") returned 2 [0101.870] lstrlenA (lpString="\x92\x07") returned 2 [0101.870] lstrlenA (lpString="\x92\x07") returned 2 [0101.870] lstrlenA (lpString="\x92\x07") returned 2 [0101.870] capGetDriverDescriptionA () returned 0x0 [0101.871] GetLastError () returned 0x0 [0101.871] SetLastError (dwErrCode=0x0) [0101.871] OpenThemeData () returned 0x16b0000 [0101.871] GetSystemMetrics (nIndex=32) returned 4 [0101.871] GetSystemMetrics (nIndex=33) returned 4 [0101.871] CloseThemeData () returned 0x0 [0101.872] lstrlenA (lpString="\x92\x07") returned 2 [0101.872] lstrlenA (lpString="\x92\x07") returned 2 [0101.872] lstrlenA (lpString="\x92\x07") returned 2 [0101.872] lstrlenA (lpString="\x92\x07") returned 2 [0101.872] lstrlenA (lpString="\x92\x07") returned 2 [0101.872] lstrlenA (lpString="\x92\x07") returned 2 [0101.872] capGetDriverDescriptionA () returned 0x0 [0101.872] GetLastError () returned 0x0 [0101.873] SetLastError (dwErrCode=0x0) [0101.873] OpenThemeData () returned 0x16c0000 [0101.873] GetSystemMetrics (nIndex=32) returned 4 [0101.873] GetSystemMetrics (nIndex=33) returned 4 [0101.873] CloseThemeData () returned 0x0 [0101.873] lstrlenA (lpString="\x92\x07") returned 2 [0101.873] lstrlenA (lpString="\x92\x07") returned 2 [0101.873] lstrlenA (lpString="\x92\x07") returned 2 [0101.873] lstrlenA (lpString="\x92\x07") returned 2 [0101.873] lstrlenA (lpString="\x92\x07") returned 2 [0101.873] lstrlenA (lpString="\x92\x07") returned 2 [0101.873] capGetDriverDescriptionA () returned 0x0 [0101.874] GetLastError () returned 0x0 [0101.874] SetLastError (dwErrCode=0x0) [0101.874] OpenThemeData () returned 0x16d0000 [0101.875] GetSystemMetrics (nIndex=32) returned 4 [0101.875] GetSystemMetrics (nIndex=33) returned 4 [0101.875] CloseThemeData () returned 0x0 [0101.875] lstrlenA (lpString="\x92\x07") returned 2 [0101.875] lstrlenA (lpString="\x92\x07") returned 2 [0101.875] lstrlenA (lpString="\x92\x07") returned 2 [0101.875] lstrlenA (lpString="\x92\x07") returned 2 [0101.875] lstrlenA (lpString="\x92\x07") returned 2 [0101.875] lstrlenA (lpString="\x92\x07") returned 2 [0101.875] capGetDriverDescriptionA () returned 0x0 [0101.876] GetLastError () returned 0x0 [0101.876] SetLastError (dwErrCode=0x0) [0101.876] OpenThemeData () returned 0x16e0000 [0101.876] GetSystemMetrics (nIndex=32) returned 4 [0101.876] GetSystemMetrics (nIndex=33) returned 4 [0101.876] CloseThemeData () returned 0x0 [0101.876] lstrlenA (lpString="\x92\x07") returned 2 [0101.877] lstrlenA (lpString="\x92\x07") returned 2 [0101.877] lstrlenA (lpString="\x92\x07") returned 2 [0101.877] lstrlenA (lpString="\x92\x07") returned 2 [0101.877] lstrlenA (lpString="\x92\x07") returned 2 [0101.877] lstrlenA (lpString="\x92\x07") returned 2 [0101.877] capGetDriverDescriptionA () returned 0x0 [0101.877] GetLastError () returned 0x0 [0101.877] SetLastError (dwErrCode=0x0) [0101.877] OpenThemeData () returned 0x16f0000 [0101.878] GetSystemMetrics (nIndex=32) returned 4 [0101.878] GetSystemMetrics (nIndex=33) returned 4 [0101.878] CloseThemeData () returned 0x0 [0101.878] lstrlenA (lpString="\x92\x07") returned 2 [0101.878] lstrlenA (lpString="\x92\x07") returned 2 [0101.878] lstrlenA (lpString="\x92\x07") returned 2 [0101.878] lstrlenA (lpString="\x92\x07") returned 2 [0101.878] lstrlenA (lpString="\x92\x07") returned 2 [0101.878] lstrlenA (lpString="\x92\x07") returned 2 [0101.878] capGetDriverDescriptionA () returned 0x0 [0101.879] GetLastError () returned 0x0 [0101.879] SetLastError (dwErrCode=0x0) [0101.879] OpenThemeData () returned 0x1700000 [0101.879] GetSystemMetrics (nIndex=32) returned 4 [0101.879] GetSystemMetrics (nIndex=33) returned 4 [0101.879] CloseThemeData () returned 0x0 [0101.880] lstrlenA (lpString="\x92\x07") returned 2 [0101.880] lstrlenA (lpString="\x92\x07") returned 2 [0101.880] lstrlenA (lpString="\x92\x07") returned 2 [0101.880] lstrlenA (lpString="\x92\x07") returned 2 [0101.880] lstrlenA (lpString="\x92\x07") returned 2 [0101.880] lstrlenA (lpString="\x92\x07") returned 2 [0101.880] capGetDriverDescriptionA () returned 0x0 [0101.880] GetLastError () returned 0x0 [0101.880] SetLastError (dwErrCode=0x0) [0101.880] OpenThemeData () returned 0x1710000 [0101.881] GetSystemMetrics (nIndex=32) returned 4 [0101.881] GetSystemMetrics (nIndex=33) returned 4 [0101.881] CloseThemeData () returned 0x0 [0101.881] lstrlenA (lpString="\x92\x07") returned 2 [0101.881] lstrlenA (lpString="\x92\x07") returned 2 [0101.881] lstrlenA (lpString="\x92\x07") returned 2 [0101.881] lstrlenA (lpString="\x92\x07") returned 2 [0101.881] lstrlenA (lpString="\x92\x07") returned 2 [0101.881] lstrlenA (lpString="\x92\x07") returned 2 [0101.881] capGetDriverDescriptionA () returned 0x0 [0101.882] GetLastError () returned 0x0 [0101.882] SetLastError (dwErrCode=0x0) [0101.882] OpenThemeData () returned 0x1720000 [0101.882] GetSystemMetrics (nIndex=32) returned 4 [0101.882] GetSystemMetrics (nIndex=33) returned 4 [0101.882] CloseThemeData () returned 0x0 [0101.883] lstrlenA (lpString="\x92\x07") returned 2 [0101.883] lstrlenA (lpString="\x92\x07") returned 2 [0101.883] lstrlenA (lpString="\x92\x07") returned 2 [0101.883] lstrlenA (lpString="\x92\x07") returned 2 [0101.883] lstrlenA (lpString="\x92\x07") returned 2 [0101.883] lstrlenA (lpString="\x92\x07") returned 2 [0101.883] capGetDriverDescriptionA () returned 0x0 [0101.883] GetLastError () returned 0x0 [0101.884] SetLastError (dwErrCode=0x0) [0101.884] OpenThemeData () returned 0x1730000 [0101.884] GetSystemMetrics (nIndex=32) returned 4 [0101.884] GetSystemMetrics (nIndex=33) returned 4 [0101.884] CloseThemeData () returned 0x0 [0101.884] lstrlenA (lpString="\x92\x07") returned 2 [0101.884] lstrlenA (lpString="\x92\x07") returned 2 [0101.884] lstrlenA (lpString="\x92\x07") returned 2 [0101.884] lstrlenA (lpString="\x92\x07") returned 2 [0101.884] lstrlenA (lpString="\x92\x07") returned 2 [0101.884] lstrlenA (lpString="\x92\x07") returned 2 [0101.885] capGetDriverDescriptionA () returned 0x0 [0101.885] GetLastError () returned 0x0 [0101.885] SetLastError (dwErrCode=0x0) [0101.885] OpenThemeData () returned 0x1740000 [0101.886] GetSystemMetrics (nIndex=32) returned 4 [0101.886] GetSystemMetrics (nIndex=33) returned 4 [0101.886] CloseThemeData () returned 0x0 [0101.886] lstrlenA (lpString="\x92\x07") returned 2 [0101.886] lstrlenA (lpString="\x92\x07") returned 2 [0101.886] lstrlenA (lpString="\x92\x07") returned 2 [0101.886] lstrlenA (lpString="\x92\x07") returned 2 [0101.886] lstrlenA (lpString="\x92\x07") returned 2 [0101.886] lstrlenA (lpString="\x92\x07") returned 2 [0101.886] capGetDriverDescriptionA () returned 0x0 [0101.887] GetLastError () returned 0x0 [0101.887] SetLastError (dwErrCode=0x0) [0101.887] OpenThemeData () returned 0x1750000 [0101.887] GetSystemMetrics (nIndex=32) returned 4 [0101.887] GetSystemMetrics (nIndex=33) returned 4 [0101.887] CloseThemeData () returned 0x0 [0101.888] lstrlenA (lpString="\x92\x07") returned 2 [0101.888] lstrlenA (lpString="\x92\x07") returned 2 [0101.888] lstrlenA (lpString="\x92\x07") returned 2 [0101.888] lstrlenA (lpString="\x92\x07") returned 2 [0101.888] lstrlenA (lpString="\x92\x07") returned 2 [0101.888] lstrlenA (lpString="\x92\x07") returned 2 [0101.888] capGetDriverDescriptionA () returned 0x0 [0101.888] GetLastError () returned 0x0 [0101.888] SetLastError (dwErrCode=0x0) [0101.888] OpenThemeData () returned 0x1760000 [0101.889] GetSystemMetrics (nIndex=32) returned 4 [0101.889] GetSystemMetrics (nIndex=33) returned 4 [0101.889] CloseThemeData () returned 0x0 [0101.889] lstrlenA (lpString="\x92\x07") returned 2 [0101.889] lstrlenA (lpString="\x92\x07") returned 2 [0101.889] lstrlenA (lpString="\x92\x07") returned 2 [0101.889] lstrlenA (lpString="\x92\x07") returned 2 [0101.889] lstrlenA (lpString="\x92\x07") returned 2 [0101.889] lstrlenA (lpString="\x92\x07") returned 2 [0101.889] capGetDriverDescriptionA () returned 0x0 [0101.890] GetLastError () returned 0x0 [0101.890] SetLastError (dwErrCode=0x0) [0101.890] OpenThemeData () returned 0x1770000 [0101.890] GetSystemMetrics (nIndex=32) returned 4 [0101.891] GetSystemMetrics (nIndex=33) returned 4 [0101.891] CloseThemeData () returned 0x0 [0101.891] lstrlenA (lpString="\x92\x07") returned 2 [0101.891] lstrlenA (lpString="\x92\x07") returned 2 [0101.891] lstrlenA (lpString="\x92\x07") returned 2 [0101.891] lstrlenA (lpString="\x92\x07") returned 2 [0101.891] lstrlenA (lpString="\x92\x07") returned 2 [0101.891] lstrlenA (lpString="\x92\x07") returned 2 [0101.891] capGetDriverDescriptionA () returned 0x0 [0101.892] GetLastError () returned 0x0 [0101.892] SetLastError (dwErrCode=0x0) [0101.892] OpenThemeData () returned 0x1780000 [0101.892] GetSystemMetrics (nIndex=32) returned 4 [0101.892] GetSystemMetrics (nIndex=33) returned 4 [0101.892] CloseThemeData () returned 0x0 [0101.893] lstrlenA (lpString="\x92\x07") returned 2 [0101.893] lstrlenA (lpString="\x92\x07") returned 2 [0101.893] lstrlenA (lpString="\x92\x07") returned 2 [0101.893] lstrlenA (lpString="\x92\x07") returned 2 [0101.893] lstrlenA (lpString="\x92\x07") returned 2 [0101.893] lstrlenA (lpString="\x92\x07") returned 2 [0101.893] capGetDriverDescriptionA () returned 0x0 [0101.893] GetLastError () returned 0x0 [0101.893] SetLastError (dwErrCode=0x0) [0101.893] OpenThemeData () returned 0x1790000 [0101.894] GetSystemMetrics (nIndex=32) returned 4 [0101.894] GetSystemMetrics (nIndex=33) returned 4 [0101.894] CloseThemeData () returned 0x0 [0101.894] lstrlenA (lpString="\x92\x07") returned 2 [0101.894] lstrlenA (lpString="\x92\x07") returned 2 [0101.894] lstrlenA (lpString="\x92\x07") returned 2 [0101.894] lstrlenA (lpString="\x92\x07") returned 2 [0101.894] lstrlenA (lpString="\x92\x07") returned 2 [0101.894] lstrlenA (lpString="\x92\x07") returned 2 [0101.894] capGetDriverDescriptionA () returned 0x0 [0101.895] GetLastError () returned 0x0 [0101.895] SetLastError (dwErrCode=0x0) [0101.895] OpenThemeData () returned 0x17a0000 [0101.896] GetSystemMetrics (nIndex=32) returned 4 [0101.896] GetSystemMetrics (nIndex=33) returned 4 [0101.896] CloseThemeData () returned 0x0 [0101.896] lstrlenA (lpString="\x92\x07") returned 2 [0101.896] lstrlenA (lpString="\x92\x07") returned 2 [0101.896] lstrlenA (lpString="\x92\x07") returned 2 [0101.896] lstrlenA (lpString="\x92\x07") returned 2 [0101.896] lstrlenA (lpString="\x92\x07") returned 2 [0101.896] lstrlenA (lpString="\x92\x07") returned 2 [0101.896] capGetDriverDescriptionA () returned 0x0 [0101.897] GetLastError () returned 0x0 [0101.897] SetLastError (dwErrCode=0x0) [0101.897] OpenThemeData () returned 0x17b0000 [0101.897] GetSystemMetrics (nIndex=32) returned 4 [0101.897] GetSystemMetrics (nIndex=33) returned 4 [0101.897] CloseThemeData () returned 0x0 [0101.898] lstrlenA (lpString="\x92\x07") returned 2 [0101.898] lstrlenA (lpString="\x92\x07") returned 2 [0101.898] lstrlenA (lpString="\x92\x07") returned 2 [0101.898] lstrlenA (lpString="\x92\x07") returned 2 [0101.898] lstrlenA (lpString="\x92\x07") returned 2 [0101.898] lstrlenA (lpString="\x92\x07") returned 2 [0101.898] capGetDriverDescriptionA () returned 0x0 [0101.898] GetLastError () returned 0x0 [0101.898] SetLastError (dwErrCode=0x0) [0101.898] OpenThemeData () returned 0x17c0000 [0101.899] GetSystemMetrics (nIndex=32) returned 4 [0101.899] GetSystemMetrics (nIndex=33) returned 4 [0101.899] CloseThemeData () returned 0x0 [0102.081] lstrlenA (lpString="\x92\x07") returned 2 [0102.081] lstrlenA (lpString="\x92\x07") returned 2 [0102.081] lstrlenA (lpString="\x92\x07") returned 2 [0102.081] lstrlenA (lpString="\x92\x07") returned 2 [0102.081] lstrlenA (lpString="\x92\x07") returned 2 [0102.081] lstrlenA (lpString="\x92\x07") returned 2 [0102.081] capGetDriverDescriptionA () returned 0x0 [0102.081] GetLastError () returned 0x0 [0102.081] SetLastError (dwErrCode=0x0) [0102.081] OpenThemeData () returned 0x17d0000 [0102.082] GetSystemMetrics (nIndex=32) returned 4 [0102.082] GetSystemMetrics (nIndex=33) returned 4 [0102.082] CloseThemeData () returned 0x0 [0102.082] lstrlenA (lpString="\x92\x07") returned 2 [0102.082] lstrlenA (lpString="\x92\x07") returned 2 [0102.082] lstrlenA (lpString="\x92\x07") returned 2 [0102.082] lstrlenA (lpString="\x92\x07") returned 2 [0102.082] lstrlenA (lpString="\x92\x07") returned 2 [0102.082] lstrlenA (lpString="\x92\x07") returned 2 [0102.083] capGetDriverDescriptionA () returned 0x0 [0102.083] GetLastError () returned 0x0 [0102.083] SetLastError (dwErrCode=0x0) [0102.083] OpenThemeData () returned 0x17e0000 [0102.084] GetSystemMetrics (nIndex=32) returned 4 [0102.084] GetSystemMetrics (nIndex=33) returned 4 [0102.084] CloseThemeData () returned 0x0 [0102.084] lstrlenA (lpString="\x92\x07") returned 2 [0102.084] lstrlenA (lpString="\x92\x07") returned 2 [0102.084] lstrlenA (lpString="\x92\x07") returned 2 [0102.084] lstrlenA (lpString="\x92\x07") returned 2 [0102.084] lstrlenA (lpString="\x92\x07") returned 2 [0102.084] lstrlenA (lpString="\x92\x07") returned 2 [0102.084] capGetDriverDescriptionA () returned 0x0 [0102.085] GetLastError () returned 0x0 [0102.085] SetLastError (dwErrCode=0x0) [0102.085] OpenThemeData () returned 0x17f0000 [0102.085] GetSystemMetrics (nIndex=32) returned 4 [0102.085] GetSystemMetrics (nIndex=33) returned 4 [0102.085] CloseThemeData () returned 0x0 [0102.086] lstrlenA (lpString="\x92\x07") returned 2 [0102.086] lstrlenA (lpString="\x92\x07") returned 2 [0102.086] lstrlenA (lpString="\x92\x07") returned 2 [0102.086] lstrlenA (lpString="\x92\x07") returned 2 [0102.086] lstrlenA (lpString="\x92\x07") returned 2 [0102.086] lstrlenA (lpString="\x92\x07") returned 2 [0102.086] capGetDriverDescriptionA () returned 0x0 [0102.086] GetLastError () returned 0x0 [0102.086] SetLastError (dwErrCode=0x0) [0102.086] OpenThemeData () returned 0x1800000 [0102.087] GetSystemMetrics (nIndex=32) returned 4 [0102.087] GetSystemMetrics (nIndex=33) returned 4 [0102.087] CloseThemeData () returned 0x0 [0102.087] lstrlenA (lpString="\x92\x07") returned 2 [0102.087] lstrlenA (lpString="\x92\x07") returned 2 [0102.087] lstrlenA (lpString="\x92\x07") returned 2 [0102.087] lstrlenA (lpString="\x92\x07") returned 2 [0102.087] lstrlenA (lpString="\x92\x07") returned 2 [0102.087] lstrlenA (lpString="\x92\x07") returned 2 [0102.087] capGetDriverDescriptionA () returned 0x0 [0102.088] GetLastError () returned 0x0 [0102.088] SetLastError (dwErrCode=0x0) [0102.088] OpenThemeData () returned 0x1810000 [0102.088] GetSystemMetrics (nIndex=32) returned 4 [0102.088] GetSystemMetrics (nIndex=33) returned 4 [0102.089] CloseThemeData () returned 0x0 [0102.089] lstrlenA (lpString="\x92\x07") returned 2 [0102.089] lstrlenA (lpString="\x92\x07") returned 2 [0102.089] lstrlenA (lpString="\x92\x07") returned 2 [0102.089] lstrlenA (lpString="\x92\x07") returned 2 [0102.089] lstrlenA (lpString="\x92\x07") returned 2 [0102.089] lstrlenA (lpString="\x92\x07") returned 2 [0102.089] capGetDriverDescriptionA () returned 0x0 [0102.090] GetLastError () returned 0x0 [0102.090] SetLastError (dwErrCode=0x0) [0102.090] OpenThemeData () returned 0x1820000 [0102.090] GetSystemMetrics (nIndex=32) returned 4 [0102.090] GetSystemMetrics (nIndex=33) returned 4 [0102.090] CloseThemeData () returned 0x0 [0102.090] lstrlenA (lpString="\x92\x07") returned 2 [0102.090] lstrlenA (lpString="\x92\x07") returned 2 [0102.090] lstrlenA (lpString="\x92\x07") returned 2 [0102.090] lstrlenA (lpString="\x92\x07") returned 2 [0102.090] lstrlenA (lpString="\x92\x07") returned 2 [0102.090] lstrlenA (lpString="\x92\x07") returned 2 [0102.091] capGetDriverDescriptionA () returned 0x0 [0102.091] GetLastError () returned 0x0 [0102.091] SetLastError (dwErrCode=0x0) [0102.091] OpenThemeData () returned 0x1830000 [0102.092] GetSystemMetrics (nIndex=32) returned 4 [0102.092] GetSystemMetrics (nIndex=33) returned 4 [0102.092] CloseThemeData () returned 0x0 [0102.092] lstrlenA (lpString="\x92\x07") returned 2 [0102.092] lstrlenA (lpString="\x92\x07") returned 2 [0102.092] lstrlenA (lpString="\x92\x07") returned 2 [0102.092] lstrlenA (lpString="\x92\x07") returned 2 [0102.092] lstrlenA (lpString="\x92\x07") returned 2 [0102.092] lstrlenA (lpString="\x92\x07") returned 2 [0102.092] capGetDriverDescriptionA () returned 0x0 [0102.093] GetLastError () returned 0x0 [0102.093] SetLastError (dwErrCode=0x0) [0102.093] OpenThemeData () returned 0x1840000 [0102.093] GetSystemMetrics (nIndex=32) returned 4 [0102.093] GetSystemMetrics (nIndex=33) returned 4 [0102.093] CloseThemeData () returned 0x0 [0102.093] lstrlenA (lpString="\x92\x07") returned 2 [0102.093] lstrlenA (lpString="\x92\x07") returned 2 [0102.093] lstrlenA (lpString="\x92\x07") returned 2 [0102.093] lstrlenA (lpString="\x92\x07") returned 2 [0102.093] lstrlenA (lpString="\x92\x07") returned 2 [0102.093] lstrlenA (lpString="\x92\x07") returned 2 [0102.093] capGetDriverDescriptionA () returned 0x0 [0102.096] GetLastError () returned 0x0 [0102.096] SetLastError (dwErrCode=0x0) [0102.096] OpenThemeData () returned 0x1850000 [0102.096] GetSystemMetrics (nIndex=32) returned 4 [0102.096] GetSystemMetrics (nIndex=33) returned 4 [0102.096] CloseThemeData () returned 0x0 [0102.097] lstrlenA (lpString="\x92\x07") returned 2 [0102.097] lstrlenA (lpString="\x92\x07") returned 2 [0102.097] lstrlenA (lpString="\x92\x07") returned 2 [0102.097] lstrlenA (lpString="\x92\x07") returned 2 [0102.097] lstrlenA (lpString="\x92\x07") returned 2 [0102.097] lstrlenA (lpString="\x92\x07") returned 2 [0102.097] capGetDriverDescriptionA () returned 0x0 [0102.097] GetLastError () returned 0x0 [0102.097] SetLastError (dwErrCode=0x0) [0102.097] OpenThemeData () returned 0x1860000 [0102.098] GetSystemMetrics (nIndex=32) returned 4 [0102.098] GetSystemMetrics (nIndex=33) returned 4 [0102.098] CloseThemeData () returned 0x0 [0102.098] lstrlenA (lpString="\x92\x07") returned 2 [0102.098] lstrlenA (lpString="\x92\x07") returned 2 [0102.098] lstrlenA (lpString="\x92\x07") returned 2 [0102.098] lstrlenA (lpString="\x92\x07") returned 2 [0102.098] lstrlenA (lpString="\x92\x07") returned 2 [0102.098] lstrlenA (lpString="\x92\x07") returned 2 [0102.098] capGetDriverDescriptionA () returned 0x0 [0102.099] GetLastError () returned 0x0 [0102.099] SetLastError (dwErrCode=0x0) [0102.099] OpenThemeData () returned 0x1870000 [0102.100] GetSystemMetrics (nIndex=32) returned 4 [0102.100] GetSystemMetrics (nIndex=33) returned 4 [0102.100] CloseThemeData () returned 0x0 [0102.100] lstrlenA (lpString="\x92\x07") returned 2 [0102.100] lstrlenA (lpString="\x92\x07") returned 2 [0102.100] lstrlenA (lpString="\x92\x07") returned 2 [0102.100] lstrlenA (lpString="\x92\x07") returned 2 [0102.100] lstrlenA (lpString="\x92\x07") returned 2 [0102.100] lstrlenA (lpString="\x92\x07") returned 2 [0102.100] capGetDriverDescriptionA () returned 0x0 [0102.101] GetLastError () returned 0x0 [0102.101] SetLastError (dwErrCode=0x0) [0102.101] OpenThemeData () returned 0x1880000 [0102.101] GetSystemMetrics (nIndex=32) returned 4 [0102.101] GetSystemMetrics (nIndex=33) returned 4 [0102.101] CloseThemeData () returned 0x0 [0102.102] lstrlenA (lpString="\x92\x07") returned 2 [0102.102] lstrlenA (lpString="\x92\x07") returned 2 [0102.102] lstrlenA (lpString="\x92\x07") returned 2 [0102.102] lstrlenA (lpString="\x92\x07") returned 2 [0102.102] lstrlenA (lpString="\x92\x07") returned 2 [0102.102] lstrlenA (lpString="\x92\x07") returned 2 [0102.102] capGetDriverDescriptionA () returned 0x0 [0102.103] GetLastError () returned 0x0 [0102.103] SetLastError (dwErrCode=0x0) [0102.103] OpenThemeData () returned 0x1890000 [0102.103] GetSystemMetrics (nIndex=32) returned 4 [0102.103] GetSystemMetrics (nIndex=33) returned 4 [0102.103] CloseThemeData () returned 0x0 [0102.104] lstrlenA (lpString="\x92\x07") returned 2 [0102.104] lstrlenA (lpString="\x92\x07") returned 2 [0102.104] lstrlenA (lpString="\x92\x07") returned 2 [0102.104] lstrlenA (lpString="\x92\x07") returned 2 [0102.104] lstrlenA (lpString="\x92\x07") returned 2 [0102.104] lstrlenA (lpString="\x92\x07") returned 2 [0102.105] capGetDriverDescriptionA () returned 0x0 [0102.106] GetLastError () returned 0x0 [0102.106] SetLastError (dwErrCode=0x0) [0102.106] OpenThemeData () returned 0x18a0000 [0102.107] GetSystemMetrics (nIndex=32) returned 4 [0102.107] GetSystemMetrics (nIndex=33) returned 4 [0102.107] CloseThemeData () returned 0x0 [0102.107] lstrlenA (lpString="\x92\x07") returned 2 [0102.107] lstrlenA (lpString="\x92\x07") returned 2 [0102.107] lstrlenA (lpString="\x92\x07") returned 2 [0102.107] lstrlenA (lpString="\x92\x07") returned 2 [0102.107] lstrlenA (lpString="\x92\x07") returned 2 [0102.107] lstrlenA (lpString="\x92\x07") returned 2 [0102.107] capGetDriverDescriptionA () returned 0x0 [0102.108] GetLastError () returned 0x0 [0102.108] SetLastError (dwErrCode=0x0) [0102.108] OpenThemeData () returned 0x18b0000 [0102.108] GetSystemMetrics (nIndex=32) returned 4 [0102.108] GetSystemMetrics (nIndex=33) returned 4 [0102.109] CloseThemeData () returned 0x0 [0102.109] lstrlenA (lpString="\x92\x07") returned 2 [0102.109] lstrlenA (lpString="\x92\x07") returned 2 [0102.109] lstrlenA (lpString="\x92\x07") returned 2 [0102.109] lstrlenA (lpString="\x92\x07") returned 2 [0102.109] lstrlenA (lpString="\x92\x07") returned 2 [0102.109] lstrlenA (lpString="\x92\x07") returned 2 [0102.109] capGetDriverDescriptionA () returned 0x0 [0102.110] GetLastError () returned 0x0 [0102.110] SetLastError (dwErrCode=0x0) [0102.110] OpenThemeData () returned 0x18c0000 [0102.110] GetSystemMetrics (nIndex=32) returned 4 [0102.110] GetSystemMetrics (nIndex=33) returned 4 [0102.110] CloseThemeData () returned 0x0 [0102.111] lstrlenA (lpString="\x92\x07") returned 2 [0102.111] lstrlenA (lpString="\x92\x07") returned 2 [0102.111] lstrlenA (lpString="\x92\x07") returned 2 [0102.111] lstrlenA (lpString="\x92\x07") returned 2 [0102.111] lstrlenA (lpString="\x92\x07") returned 2 [0102.111] lstrlenA (lpString="\x92\x07") returned 2 [0102.111] capGetDriverDescriptionA () returned 0x0 [0102.112] GetLastError () returned 0x0 [0102.112] SetLastError (dwErrCode=0x0) [0102.112] OpenThemeData () returned 0x18d0000 [0102.112] GetSystemMetrics (nIndex=32) returned 4 [0102.112] GetSystemMetrics (nIndex=33) returned 4 [0102.112] CloseThemeData () returned 0x0 [0102.113] lstrlenA (lpString="\x92\x07") returned 2 [0102.113] lstrlenA (lpString="\x92\x07") returned 2 [0102.113] lstrlenA (lpString="\x92\x07") returned 2 [0102.113] lstrlenA (lpString="\x92\x07") returned 2 [0102.113] lstrlenA (lpString="\x92\x07") returned 2 [0102.113] lstrlenA (lpString="\x92\x07") returned 2 [0102.113] capGetDriverDescriptionA () returned 0x0 [0102.113] GetLastError () returned 0x0 [0102.114] SetLastError (dwErrCode=0x0) [0102.114] OpenThemeData () returned 0x18e0000 [0102.114] GetSystemMetrics (nIndex=32) returned 4 [0102.114] GetSystemMetrics (nIndex=33) returned 4 [0102.114] CloseThemeData () returned 0x0 [0102.227] lstrlenA (lpString="\x92\x07") returned 2 [0102.227] lstrlenA (lpString="\x92\x07") returned 2 [0102.228] lstrlenA (lpString="\x92\x07") returned 2 [0102.228] lstrlenA (lpString="\x92\x07") returned 2 [0102.228] lstrlenA (lpString="\x92\x07") returned 2 [0102.228] lstrlenA (lpString="\x92\x07") returned 2 [0102.228] capGetDriverDescriptionA () returned 0x0 [0102.228] GetLastError () returned 0x0 [0102.228] SetLastError (dwErrCode=0x0) [0102.228] OpenThemeData () returned 0x18f0000 [0102.229] GetSystemMetrics (nIndex=32) returned 4 [0102.229] GetSystemMetrics (nIndex=33) returned 4 [0102.229] CloseThemeData () returned 0x0 [0102.229] lstrlenA (lpString="\x92\x07") returned 2 [0102.229] lstrlenA (lpString="\x92\x07") returned 2 [0102.229] lstrlenA (lpString="\x92\x07") returned 2 [0102.229] lstrlenA (lpString="\x92\x07") returned 2 [0102.229] lstrlenA (lpString="\x92\x07") returned 2 [0102.229] lstrlenA (lpString="\x92\x07") returned 2 [0102.229] capGetDriverDescriptionA () returned 0x0 [0102.230] GetLastError () returned 0x0 [0102.230] SetLastError (dwErrCode=0x0) [0102.230] OpenThemeData () returned 0x1900000 [0102.231] GetSystemMetrics (nIndex=32) returned 4 [0102.231] GetSystemMetrics (nIndex=33) returned 4 [0102.231] CloseThemeData () returned 0x0 [0102.231] lstrlenA (lpString="\x92\x07") returned 2 [0102.231] lstrlenA (lpString="\x92\x07") returned 2 [0102.231] lstrlenA (lpString="\x92\x07") returned 2 [0102.231] lstrlenA (lpString="\x92\x07") returned 2 [0102.231] lstrlenA (lpString="\x92\x07") returned 2 [0102.231] lstrlenA (lpString="\x92\x07") returned 2 [0102.231] capGetDriverDescriptionA () returned 0x0 [0102.232] GetLastError () returned 0x0 [0102.232] SetLastError (dwErrCode=0x0) [0102.232] OpenThemeData () returned 0x1910000 [0102.232] GetSystemMetrics (nIndex=32) returned 4 [0102.232] GetSystemMetrics (nIndex=33) returned 4 [0102.232] CloseThemeData () returned 0x0 [0102.233] lstrlenA (lpString="\x92\x07") returned 2 [0102.233] lstrlenA (lpString="\x92\x07") returned 2 [0102.233] lstrlenA (lpString="\x92\x07") returned 2 [0102.233] lstrlenA (lpString="\x92\x07") returned 2 [0102.233] lstrlenA (lpString="\x92\x07") returned 2 [0102.233] lstrlenA (lpString="\x92\x07") returned 2 [0102.233] capGetDriverDescriptionA () returned 0x0 [0102.233] GetLastError () returned 0x0 [0102.234] SetLastError (dwErrCode=0x0) [0102.234] OpenThemeData () returned 0x1920000 [0102.234] GetSystemMetrics (nIndex=32) returned 4 [0102.234] GetSystemMetrics (nIndex=33) returned 4 [0102.234] CloseThemeData () returned 0x0 [0102.234] lstrlenA (lpString="\x92\x07") returned 2 [0102.234] lstrlenA (lpString="\x92\x07") returned 2 [0102.234] lstrlenA (lpString="\x92\x07") returned 2 [0102.234] lstrlenA (lpString="\x92\x07") returned 2 [0102.235] lstrlenA (lpString="\x92\x07") returned 2 [0102.235] lstrlenA (lpString="\x92\x07") returned 2 [0102.235] capGetDriverDescriptionA () returned 0x0 [0102.235] GetLastError () returned 0x0 [0102.235] SetLastError (dwErrCode=0x0) [0102.235] OpenThemeData () returned 0x1930000 [0102.236] GetSystemMetrics (nIndex=32) returned 4 [0102.236] GetSystemMetrics (nIndex=33) returned 4 [0102.236] CloseThemeData () returned 0x0 [0102.236] lstrlenA (lpString="\x92\x07") returned 2 [0102.236] lstrlenA (lpString="\x92\x07") returned 2 [0102.236] lstrlenA (lpString="\x92\x07") returned 2 [0102.236] lstrlenA (lpString="\x92\x07") returned 2 [0102.236] lstrlenA (lpString="\x92\x07") returned 2 [0102.236] lstrlenA (lpString="\x92\x07") returned 2 [0102.236] capGetDriverDescriptionA () returned 0x0 [0102.237] GetLastError () returned 0x0 [0102.237] SetLastError (dwErrCode=0x0) [0102.237] OpenThemeData () returned 0x1940000 [0102.237] GetSystemMetrics (nIndex=32) returned 4 [0102.237] GetSystemMetrics (nIndex=33) returned 4 [0102.237] CloseThemeData () returned 0x0 [0102.238] lstrlenA (lpString="\x92\x07") returned 2 [0102.238] lstrlenA (lpString="\x92\x07") returned 2 [0102.238] lstrlenA (lpString="\x92\x07") returned 2 [0102.238] lstrlenA (lpString="\x92\x07") returned 2 [0102.238] lstrlenA (lpString="\x92\x07") returned 2 [0102.238] lstrlenA (lpString="\x92\x07") returned 2 [0102.238] capGetDriverDescriptionA () returned 0x0 [0102.239] GetLastError () returned 0x0 [0102.239] SetLastError (dwErrCode=0x0) [0102.239] OpenThemeData () returned 0x1950000 [0102.239] GetSystemMetrics (nIndex=32) returned 4 [0102.239] GetSystemMetrics (nIndex=33) returned 4 [0102.239] CloseThemeData () returned 0x0 [0102.240] lstrlenA (lpString="\x92\x07") returned 2 [0102.240] lstrlenA (lpString="\x92\x07") returned 2 [0102.240] lstrlenA (lpString="\x92\x07") returned 2 [0102.240] lstrlenA (lpString="\x92\x07") returned 2 [0102.240] lstrlenA (lpString="\x92\x07") returned 2 [0102.240] lstrlenA (lpString="\x92\x07") returned 2 [0102.240] capGetDriverDescriptionA () returned 0x0 [0102.240] GetLastError () returned 0x0 [0102.240] SetLastError (dwErrCode=0x0) [0102.240] OpenThemeData () returned 0x1960000 [0102.241] GetSystemMetrics (nIndex=32) returned 4 [0102.241] GetSystemMetrics (nIndex=33) returned 4 [0102.241] CloseThemeData () returned 0x0 [0102.241] lstrlenA (lpString="\x92\x07") returned 2 [0102.241] lstrlenA (lpString="\x92\x07") returned 2 [0102.241] lstrlenA (lpString="\x92\x07") returned 2 [0102.241] lstrlenA (lpString="\x92\x07") returned 2 [0102.241] lstrlenA (lpString="\x92\x07") returned 2 [0102.241] lstrlenA (lpString="\x92\x07") returned 2 [0102.241] capGetDriverDescriptionA () returned 0x0 [0102.242] GetLastError () returned 0x0 [0102.242] SetLastError (dwErrCode=0x0) [0102.242] OpenThemeData () returned 0x1970000 [0102.243] GetSystemMetrics (nIndex=32) returned 4 [0102.243] GetSystemMetrics (nIndex=33) returned 4 [0102.243] CloseThemeData () returned 0x0 [0102.243] lstrlenA (lpString="\x92\x07") returned 2 [0102.243] lstrlenA (lpString="\x92\x07") returned 2 [0102.243] lstrlenA (lpString="\x92\x07") returned 2 [0102.243] lstrlenA (lpString="\x92\x07") returned 2 [0102.243] lstrlenA (lpString="\x92\x07") returned 2 [0102.243] lstrlenA (lpString="\x92\x07") returned 2 [0102.243] capGetDriverDescriptionA () returned 0x0 [0102.244] GetLastError () returned 0x0 [0102.244] SetLastError (dwErrCode=0x0) [0102.244] OpenThemeData () returned 0x1980000 [0102.244] GetSystemMetrics (nIndex=32) returned 4 [0102.244] GetSystemMetrics (nIndex=33) returned 4 [0102.244] CloseThemeData () returned 0x0 [0102.245] lstrlenA (lpString="\x92\x07") returned 2 [0102.245] lstrlenA (lpString="\x92\x07") returned 2 [0102.245] lstrlenA (lpString="\x92\x07") returned 2 [0102.245] lstrlenA (lpString="\x92\x07") returned 2 [0102.245] lstrlenA (lpString="\x92\x07") returned 2 [0102.245] lstrlenA (lpString="\x92\x07") returned 2 [0102.245] capGetDriverDescriptionA () returned 0x0 [0102.245] GetLastError () returned 0x0 [0102.245] SetLastError (dwErrCode=0x0) [0102.246] OpenThemeData () returned 0x1990000 [0102.246] GetSystemMetrics (nIndex=32) returned 4 [0102.246] GetSystemMetrics (nIndex=33) returned 4 [0102.246] CloseThemeData () returned 0x0 [0102.246] lstrlenA (lpString="\x92\x07") returned 2 [0102.246] lstrlenA (lpString="\x92\x07") returned 2 [0102.246] lstrlenA (lpString="\x92\x07") returned 2 [0102.246] lstrlenA (lpString="\x92\x07") returned 2 [0102.246] lstrlenA (lpString="\x92\x07") returned 2 [0102.247] lstrlenA (lpString="\x92\x07") returned 2 [0102.247] capGetDriverDescriptionA () returned 0x0 [0102.247] GetLastError () returned 0x0 [0102.247] SetLastError (dwErrCode=0x0) [0102.247] OpenThemeData () returned 0x19a0000 [0102.248] GetSystemMetrics (nIndex=32) returned 4 [0102.248] GetSystemMetrics (nIndex=33) returned 4 [0102.248] CloseThemeData () returned 0x0 [0102.248] lstrlenA (lpString="\x92\x07") returned 2 [0102.248] lstrlenA (lpString="\x92\x07") returned 2 [0102.248] lstrlenA (lpString="\x92\x07") returned 2 [0102.248] lstrlenA (lpString="\x92\x07") returned 2 [0102.248] lstrlenA (lpString="\x92\x07") returned 2 [0102.248] lstrlenA (lpString="\x92\x07") returned 2 [0102.248] capGetDriverDescriptionA () returned 0x0 [0102.249] GetLastError () returned 0x0 [0102.249] SetLastError (dwErrCode=0x0) [0102.249] OpenThemeData () returned 0x19b0000 [0102.249] GetSystemMetrics (nIndex=32) returned 4 [0102.249] GetSystemMetrics (nIndex=33) returned 4 [0102.249] CloseThemeData () returned 0x0 [0102.250] lstrlenA (lpString="\x92\x07") returned 2 [0102.250] lstrlenA (lpString="\x92\x07") returned 2 [0102.250] lstrlenA (lpString="\x92\x07") returned 2 [0102.250] lstrlenA (lpString="\x92\x07") returned 2 [0102.250] lstrlenA (lpString="\x92\x07") returned 2 [0102.250] lstrlenA (lpString="\x92\x07") returned 2 [0102.251] capGetDriverDescriptionA () returned 0x0 [0102.252] GetLastError () returned 0x0 [0102.252] SetLastError (dwErrCode=0x0) [0102.252] OpenThemeData () returned 0x19c0000 [0102.252] GetSystemMetrics (nIndex=32) returned 4 [0102.253] GetSystemMetrics (nIndex=33) returned 4 [0102.253] CloseThemeData () returned 0x0 [0102.253] lstrlenA (lpString="\x92\x07") returned 2 [0102.253] lstrlenA (lpString="\x92\x07") returned 2 [0102.253] lstrlenA (lpString="\x92\x07") returned 2 [0102.253] lstrlenA (lpString="\x92\x07") returned 2 [0102.253] lstrlenA (lpString="\x92\x07") returned 2 [0102.253] lstrlenA (lpString="\x92\x07") returned 2 [0102.253] capGetDriverDescriptionA () returned 0x0 [0102.254] GetLastError () returned 0x0 [0102.254] SetLastError (dwErrCode=0x0) [0102.254] OpenThemeData () returned 0x19d0000 [0102.254] GetSystemMetrics (nIndex=32) returned 4 [0102.254] GetSystemMetrics (nIndex=33) returned 4 [0102.254] CloseThemeData () returned 0x0 [0102.255] lstrlenA (lpString="\x92\x07") returned 2 [0102.255] lstrlenA (lpString="\x92\x07") returned 2 [0102.255] lstrlenA (lpString="\x92\x07") returned 2 [0102.255] lstrlenA (lpString="\x92\x07") returned 2 [0102.255] lstrlenA (lpString="\x92\x07") returned 2 [0102.255] lstrlenA (lpString="\x92\x07") returned 2 [0102.255] capGetDriverDescriptionA () returned 0x0 [0102.255] GetLastError () returned 0x0 [0102.255] SetLastError (dwErrCode=0x0) [0102.255] OpenThemeData () returned 0x19e0000 [0102.256] GetSystemMetrics (nIndex=32) returned 4 [0102.256] GetSystemMetrics (nIndex=33) returned 4 [0102.256] CloseThemeData () returned 0x0 [0102.256] lstrlenA (lpString="\x92\x07") returned 2 [0102.256] lstrlenA (lpString="\x92\x07") returned 2 [0102.256] lstrlenA (lpString="\x92\x07") returned 2 [0102.256] lstrlenA (lpString="\x92\x07") returned 2 [0102.256] lstrlenA (lpString="\x92\x07") returned 2 [0102.256] lstrlenA (lpString="\x92\x07") returned 2 [0102.256] capGetDriverDescriptionA () returned 0x0 [0102.258] GetLastError () returned 0x0 [0102.258] SetLastError (dwErrCode=0x0) [0102.258] OpenThemeData () returned 0x19f0000 [0102.258] GetSystemMetrics (nIndex=32) returned 4 [0102.258] GetSystemMetrics (nIndex=33) returned 4 [0102.258] CloseThemeData () returned 0x0 [0102.259] lstrlenA (lpString="\x92\x07") returned 2 [0102.259] lstrlenA (lpString="\x92\x07") returned 2 [0102.259] lstrlenA (lpString="\x92\x07") returned 2 [0102.259] lstrlenA (lpString="\x92\x07") returned 2 [0102.259] lstrlenA (lpString="\x92\x07") returned 2 [0102.259] lstrlenA (lpString="\x92\x07") returned 2 [0102.259] capGetDriverDescriptionA () returned 0x0 [0102.259] GetLastError () returned 0x0 [0102.259] SetLastError (dwErrCode=0x0) [0102.259] OpenThemeData () returned 0x1a00000 [0102.260] GetSystemMetrics (nIndex=32) returned 4 [0102.260] GetSystemMetrics (nIndex=33) returned 4 [0102.260] CloseThemeData () returned 0x0 [0102.260] lstrlenA (lpString="\x92\x07") returned 2 [0102.260] lstrlenA (lpString="\x92\x07") returned 2 [0102.260] lstrlenA (lpString="\x92\x07") returned 2 [0102.260] lstrlenA (lpString="\x92\x07") returned 2 [0102.260] lstrlenA (lpString="\x92\x07") returned 2 [0102.260] lstrlenA (lpString="\x92\x07") returned 2 [0102.260] capGetDriverDescriptionA () returned 0x0 [0102.261] GetLastError () returned 0x0 [0102.261] SetLastError (dwErrCode=0x0) [0102.261] OpenThemeData () returned 0x1a10000 [0102.262] GetSystemMetrics (nIndex=32) returned 4 [0102.262] GetSystemMetrics (nIndex=33) returned 4 [0102.262] CloseThemeData () returned 0x0 [0102.262] lstrlenA (lpString="\x92\x07") returned 2 [0102.262] lstrlenA (lpString="\x92\x07") returned 2 [0102.262] lstrlenA (lpString="\x92\x07") returned 2 [0102.262] lstrlenA (lpString="\x92\x07") returned 2 [0102.262] lstrlenA (lpString="\x92\x07") returned 2 [0102.262] lstrlenA (lpString="\x92\x07") returned 2 [0102.262] capGetDriverDescriptionA () returned 0x0 [0102.263] GetLastError () returned 0x0 [0102.263] SetLastError (dwErrCode=0x0) [0102.263] OpenThemeData () returned 0x1a20000 [0102.263] GetSystemMetrics (nIndex=32) returned 4 [0102.263] GetSystemMetrics (nIndex=33) returned 4 [0102.263] CloseThemeData () returned 0x0 [0102.264] lstrlenA (lpString="\x92\x07") returned 2 [0102.264] lstrlenA (lpString="\x92\x07") returned 2 [0102.264] lstrlenA (lpString="\x92\x07") returned 2 [0102.264] lstrlenA (lpString="\x92\x07") returned 2 [0102.264] lstrlenA (lpString="\x92\x07") returned 2 [0102.264] lstrlenA (lpString="\x92\x07") returned 2 [0102.264] capGetDriverDescriptionA () returned 0x0 [0102.264] GetLastError () returned 0x0 [0102.265] SetLastError (dwErrCode=0x0) [0102.265] OpenThemeData () returned 0x1a30000 [0102.265] GetSystemMetrics (nIndex=32) returned 4 [0102.265] GetSystemMetrics (nIndex=33) returned 4 [0102.265] CloseThemeData () returned 0x0 [0102.265] lstrlenA (lpString="\x92\x07") returned 2 [0102.265] lstrlenA (lpString="\x92\x07") returned 2 [0102.266] lstrlenA (lpString="\x92\x07") returned 2 [0102.266] lstrlenA (lpString="\x92\x07") returned 2 [0102.266] lstrlenA (lpString="\x92\x07") returned 2 [0102.266] lstrlenA (lpString="\x92\x07") returned 2 [0102.266] capGetDriverDescriptionA () returned 0x0 [0102.266] GetLastError () returned 0x0 [0102.266] SetLastError (dwErrCode=0x0) [0102.266] OpenThemeData () returned 0x1a40000 [0102.267] GetSystemMetrics (nIndex=32) returned 4 [0102.267] GetSystemMetrics (nIndex=33) returned 4 [0102.267] CloseThemeData () returned 0x0 [0102.267] lstrlenA (lpString="\x92\x07") returned 2 [0102.267] lstrlenA (lpString="\x92\x07") returned 2 [0102.267] lstrlenA (lpString="\x92\x07") returned 2 [0102.267] lstrlenA (lpString="\x92\x07") returned 2 [0102.267] lstrlenA (lpString="\x92\x07") returned 2 [0102.267] lstrlenA (lpString="\x92\x07") returned 2 [0102.267] capGetDriverDescriptionA () returned 0x0 [0102.268] GetLastError () returned 0x0 [0102.268] SetLastError (dwErrCode=0x0) [0102.268] OpenThemeData () returned 0x1a50000 [0102.269] GetSystemMetrics (nIndex=32) returned 4 [0102.269] GetSystemMetrics (nIndex=33) returned 4 [0102.269] CloseThemeData () returned 0x0 [0102.269] lstrlenA (lpString="\x92\x07") returned 2 [0102.269] lstrlenA (lpString="\x92\x07") returned 2 [0102.269] lstrlenA (lpString="\x92\x07") returned 2 [0102.269] lstrlenA (lpString="\x92\x07") returned 2 [0102.269] lstrlenA (lpString="\x92\x07") returned 2 [0102.269] lstrlenA (lpString="\x92\x07") returned 2 [0102.269] capGetDriverDescriptionA () returned 0x0 [0102.270] GetLastError () returned 0x0 [0102.270] SetLastError (dwErrCode=0x0) [0102.270] OpenThemeData () returned 0x1a60000 [0102.270] GetSystemMetrics (nIndex=32) returned 4 [0102.270] GetSystemMetrics (nIndex=33) returned 4 [0102.270] CloseThemeData () returned 0x0 [0102.271] lstrlenA (lpString="\x92\x07") returned 2 [0102.271] lstrlenA (lpString="\x92\x07") returned 2 [0102.271] lstrlenA (lpString="\x92\x07") returned 2 [0102.271] lstrlenA (lpString="\x92\x07") returned 2 [0102.271] lstrlenA (lpString="\x92\x07") returned 2 [0102.271] lstrlenA (lpString="\x92\x07") returned 2 [0102.271] capGetDriverDescriptionA () returned 0x0 [0102.271] GetLastError () returned 0x0 [0102.271] SetLastError (dwErrCode=0x0) [0102.271] OpenThemeData () returned 0x1a70000 [0102.272] GetSystemMetrics (nIndex=32) returned 4 [0102.272] GetSystemMetrics (nIndex=33) returned 4 [0102.272] CloseThemeData () returned 0x0 [0102.272] lstrlenA (lpString="\x92\x07") returned 2 [0102.272] lstrlenA (lpString="\x92\x07") returned 2 [0102.272] lstrlenA (lpString="\x92\x07") returned 2 [0102.272] lstrlenA (lpString="\x92\x07") returned 2 [0102.352] lstrlenA (lpString="\x92\x07") returned 2 [0102.352] lstrlenA (lpString="\x92\x07") returned 2 [0102.352] capGetDriverDescriptionA () returned 0x0 [0102.352] GetLastError () returned 0x0 [0102.352] SetLastError (dwErrCode=0x0) [0102.353] OpenThemeData () returned 0x1a80000 [0102.353] GetSystemMetrics (nIndex=32) returned 4 [0102.353] GetSystemMetrics (nIndex=33) returned 4 [0102.353] CloseThemeData () returned 0x0 [0102.353] lstrlenA (lpString="\x92\x07") returned 2 [0102.354] lstrlenA (lpString="\x92\x07") returned 2 [0102.354] lstrlenA (lpString="\x92\x07") returned 2 [0102.354] lstrlenA (lpString="\x92\x07") returned 2 [0102.354] lstrlenA (lpString="\x92\x07") returned 2 [0102.354] lstrlenA (lpString="\x92\x07") returned 2 [0102.354] capGetDriverDescriptionA () returned 0x0 [0102.354] GetLastError () returned 0x0 [0102.354] SetLastError (dwErrCode=0x0) [0102.354] OpenThemeData () returned 0x1a90000 [0102.355] GetSystemMetrics (nIndex=32) returned 4 [0102.355] GetSystemMetrics (nIndex=33) returned 4 [0102.355] CloseThemeData () returned 0x0 [0102.355] lstrlenA (lpString="\x92\x07") returned 2 [0102.355] lstrlenA (lpString="\x92\x07") returned 2 [0102.355] lstrlenA (lpString="\x92\x07") returned 2 [0102.355] lstrlenA (lpString="\x92\x07") returned 2 [0102.355] lstrlenA (lpString="\x92\x07") returned 2 [0102.355] lstrlenA (lpString="\x92\x07") returned 2 [0102.355] capGetDriverDescriptionA () returned 0x0 [0102.356] GetLastError () returned 0x0 [0102.356] SetLastError (dwErrCode=0x0) [0102.356] OpenThemeData () returned 0x1aa0000 [0102.357] GetSystemMetrics (nIndex=32) returned 4 [0102.357] GetSystemMetrics (nIndex=33) returned 4 [0102.357] CloseThemeData () returned 0x0 [0102.357] lstrlenA (lpString="\x92\x07") returned 2 [0102.357] lstrlenA (lpString="\x92\x07") returned 2 [0102.357] lstrlenA (lpString="\x92\x07") returned 2 [0102.357] lstrlenA (lpString="\x92\x07") returned 2 [0102.357] lstrlenA (lpString="\x92\x07") returned 2 [0102.357] lstrlenA (lpString="\x92\x07") returned 2 [0102.357] capGetDriverDescriptionA () returned 0x0 [0102.358] GetLastError () returned 0x0 [0102.358] SetLastError (dwErrCode=0x0) [0102.358] OpenThemeData () returned 0x1ab0000 [0102.359] GetSystemMetrics (nIndex=32) returned 4 [0102.359] GetSystemMetrics (nIndex=33) returned 4 [0102.359] CloseThemeData () returned 0x0 [0102.359] lstrlenA (lpString="\x92\x07") returned 2 [0102.359] lstrlenA (lpString="\x92\x07") returned 2 [0102.359] lstrlenA (lpString="\x92\x07") returned 2 [0102.359] lstrlenA (lpString="\x92\x07") returned 2 [0102.359] lstrlenA (lpString="\x92\x07") returned 2 [0102.359] lstrlenA (lpString="\x92\x07") returned 2 [0102.359] capGetDriverDescriptionA () returned 0x0 [0102.360] GetLastError () returned 0x0 [0102.360] SetLastError (dwErrCode=0x0) [0102.360] OpenThemeData () returned 0x1ac0000 [0102.360] GetSystemMetrics (nIndex=32) returned 4 [0102.360] GetSystemMetrics (nIndex=33) returned 4 [0102.360] CloseThemeData () returned 0x0 [0102.361] lstrlenA (lpString="\x92\x07") returned 2 [0102.361] lstrlenA (lpString="\x92\x07") returned 2 [0102.361] lstrlenA (lpString="\x92\x07") returned 2 [0102.361] lstrlenA (lpString="\x92\x07") returned 2 [0102.361] lstrlenA (lpString="\x92\x07") returned 2 [0102.361] lstrlenA (lpString="\x92\x07") returned 2 [0102.361] capGetDriverDescriptionA () returned 0x0 [0102.361] GetLastError () returned 0x0 [0102.362] SetLastError (dwErrCode=0x0) [0102.362] OpenThemeData () returned 0x1ad0000 [0102.362] GetSystemMetrics (nIndex=32) returned 4 [0102.362] GetSystemMetrics (nIndex=33) returned 4 [0102.362] CloseThemeData () returned 0x0 [0102.362] lstrlenA (lpString="\x92\x07") returned 2 [0102.362] lstrlenA (lpString="\x92\x07") returned 2 [0102.362] lstrlenA (lpString="\x92\x07") returned 2 [0102.363] lstrlenA (lpString="\x92\x07") returned 2 [0102.363] lstrlenA (lpString="\x92\x07") returned 2 [0102.363] lstrlenA (lpString="\x92\x07") returned 2 [0102.363] capGetDriverDescriptionA () returned 0x0 [0102.363] GetLastError () returned 0x0 [0102.363] SetLastError (dwErrCode=0x0) [0102.363] OpenThemeData () returned 0x1ae0000 [0102.364] GetSystemMetrics (nIndex=32) returned 4 [0102.364] GetSystemMetrics (nIndex=33) returned 4 [0102.364] CloseThemeData () returned 0x0 [0102.364] lstrlenA (lpString="\x92\x07") returned 2 [0102.364] lstrlenA (lpString="\x92\x07") returned 2 [0102.364] lstrlenA (lpString="\x92\x07") returned 2 [0102.364] lstrlenA (lpString="\x92\x07") returned 2 [0102.364] lstrlenA (lpString="\x92\x07") returned 2 [0102.364] lstrlenA (lpString="\x92\x07") returned 2 [0102.364] capGetDriverDescriptionA () returned 0x0 [0102.365] GetLastError () returned 0x0 [0102.365] SetLastError (dwErrCode=0x0) [0102.365] OpenThemeData () returned 0x1af0000 [0102.366] GetSystemMetrics (nIndex=32) returned 4 [0102.366] GetSystemMetrics (nIndex=33) returned 4 [0102.366] CloseThemeData () returned 0x0 [0102.366] lstrlenA (lpString="\x92\x07") returned 2 [0102.366] lstrlenA (lpString="\x92\x07") returned 2 [0102.366] lstrlenA (lpString="\x92\x07") returned 2 [0102.366] lstrlenA (lpString="\x92\x07") returned 2 [0102.366] lstrlenA (lpString="\x92\x07") returned 2 [0102.366] lstrlenA (lpString="\x92\x07") returned 2 [0102.366] capGetDriverDescriptionA () returned 0x0 [0102.367] GetLastError () returned 0x0 [0102.367] SetLastError (dwErrCode=0x0) [0102.367] OpenThemeData () returned 0x1b00000 [0102.368] GetSystemMetrics (nIndex=32) returned 4 [0102.368] GetSystemMetrics (nIndex=33) returned 4 [0102.368] CloseThemeData () returned 0x0 [0102.368] lstrlenA (lpString="\x92\x07") returned 2 [0102.368] lstrlenA (lpString="\x92\x07") returned 2 [0102.368] lstrlenA (lpString="\x92\x07") returned 2 [0102.369] lstrlenA (lpString="\x92\x07") returned 2 [0102.369] lstrlenA (lpString="\x92\x07") returned 2 [0102.369] lstrlenA (lpString="\x92\x07") returned 2 [0102.369] capGetDriverDescriptionA () returned 0x0 [0102.369] GetLastError () returned 0x0 [0102.369] SetLastError (dwErrCode=0x0) [0102.369] OpenThemeData () returned 0x1b10000 [0102.370] GetSystemMetrics (nIndex=32) returned 4 [0102.370] GetSystemMetrics (nIndex=33) returned 4 [0102.370] CloseThemeData () returned 0x0 [0102.370] lstrlenA (lpString="\x92\x07") returned 2 [0102.370] lstrlenA (lpString="\x92\x07") returned 2 [0102.370] lstrlenA (lpString="\x92\x07") returned 2 [0102.370] lstrlenA (lpString="\x92\x07") returned 2 [0102.370] lstrlenA (lpString="\x92\x07") returned 2 [0102.370] lstrlenA (lpString="\x92\x07") returned 2 [0102.370] capGetDriverDescriptionA () returned 0x0 [0102.371] GetLastError () returned 0x0 [0102.371] SetLastError (dwErrCode=0x0) [0102.371] OpenThemeData () returned 0x1b20000 [0102.372] GetSystemMetrics (nIndex=32) returned 4 [0102.372] GetSystemMetrics (nIndex=33) returned 4 [0102.372] CloseThemeData () returned 0x0 [0102.372] lstrlenA (lpString="\x92\x07") returned 2 [0102.372] lstrlenA (lpString="\x92\x07") returned 2 [0102.372] lstrlenA (lpString="\x92\x07") returned 2 [0102.372] lstrlenA (lpString="\x92\x07") returned 2 [0102.372] lstrlenA (lpString="\x92\x07") returned 2 [0102.372] lstrlenA (lpString="\x92\x07") returned 2 [0102.372] capGetDriverDescriptionA () returned 0x0 [0102.373] GetLastError () returned 0x0 [0102.373] SetLastError (dwErrCode=0x0) [0102.373] OpenThemeData () returned 0x1b30000 [0102.373] GetSystemMetrics (nIndex=32) returned 4 [0102.373] GetSystemMetrics (nIndex=33) returned 4 [0102.373] CloseThemeData () returned 0x0 [0102.374] lstrlenA (lpString="\x92\x07") returned 2 [0102.374] lstrlenA (lpString="\x92\x07") returned 2 [0102.374] lstrlenA (lpString="\x92\x07") returned 2 [0102.374] lstrlenA (lpString="\x92\x07") returned 2 [0102.374] lstrlenA (lpString="\x92\x07") returned 2 [0102.374] lstrlenA (lpString="\x92\x07") returned 2 [0102.374] capGetDriverDescriptionA () returned 0x0 [0102.374] GetLastError () returned 0x0 [0102.374] SetLastError (dwErrCode=0x0) [0102.374] OpenThemeData () returned 0x1b40000 [0102.375] GetSystemMetrics (nIndex=32) returned 4 [0102.375] GetSystemMetrics (nIndex=33) returned 4 [0102.375] CloseThemeData () returned 0x0 [0102.375] lstrlenA (lpString="\x92\x07") returned 2 [0102.375] lstrlenA (lpString="\x92\x07") returned 2 [0102.375] lstrlenA (lpString="\x92\x07") returned 2 [0102.375] lstrlenA (lpString="\x92\x07") returned 2 [0102.375] lstrlenA (lpString="\x92\x07") returned 2 [0102.376] lstrlenA (lpString="\x92\x07") returned 2 [0102.376] capGetDriverDescriptionA () returned 0x0 [0102.376] GetLastError () returned 0x0 [0102.376] SetLastError (dwErrCode=0x0) [0102.376] OpenThemeData () returned 0x1b50000 [0102.377] GetSystemMetrics (nIndex=32) returned 4 [0102.377] GetSystemMetrics (nIndex=33) returned 4 [0102.377] CloseThemeData () returned 0x0 [0102.378] lstrlenA (lpString="\x92\x07") returned 2 [0102.378] lstrlenA (lpString="\x92\x07") returned 2 [0102.378] lstrlenA (lpString="\x92\x07") returned 2 [0102.378] lstrlenA (lpString="\x92\x07") returned 2 [0102.378] lstrlenA (lpString="\x92\x07") returned 2 [0102.378] lstrlenA (lpString="\x92\x07") returned 2 [0102.378] capGetDriverDescriptionA () returned 0x0 [0102.378] GetLastError () returned 0x0 [0102.378] SetLastError (dwErrCode=0x0) [0102.378] OpenThemeData () returned 0x1b60000 [0102.379] GetSystemMetrics (nIndex=32) returned 4 [0102.379] GetSystemMetrics (nIndex=33) returned 4 [0102.379] CloseThemeData () returned 0x0 [0102.379] lstrlenA (lpString="\x92\x07") returned 2 [0102.379] lstrlenA (lpString="\x92\x07") returned 2 [0102.379] lstrlenA (lpString="\x92\x07") returned 2 [0102.379] lstrlenA (lpString="\x92\x07") returned 2 [0102.379] lstrlenA (lpString="\x92\x07") returned 2 [0102.379] lstrlenA (lpString="\x92\x07") returned 2 [0102.379] capGetDriverDescriptionA () returned 0x0 [0102.380] GetLastError () returned 0x0 [0102.380] SetLastError (dwErrCode=0x0) [0102.380] OpenThemeData () returned 0x1b70000 [0102.381] GetSystemMetrics (nIndex=32) returned 4 [0102.381] GetSystemMetrics (nIndex=33) returned 4 [0102.381] CloseThemeData () returned 0x0 [0102.381] lstrlenA (lpString="\x92\x07") returned 2 [0102.381] lstrlenA (lpString="\x92\x07") returned 2 [0102.381] lstrlenA (lpString="\x92\x07") returned 2 [0102.381] capGetDriverDescriptionA () returned 0x0 [0102.382] GetLastError () returned 0x0 [0102.382] SetLastError (dwErrCode=0x0) [0102.382] OpenThemeData () returned 0x1b80000 [0102.383] GetSystemMetrics (nIndex=32) returned 4 [0102.383] GetSystemMetrics (nIndex=33) returned 4 [0102.383] CloseThemeData () returned 0x0 [0102.383] capGetDriverDescriptionA () returned 0x0 [0102.384] GetLastError () returned 0x0 [0102.384] SetLastError (dwErrCode=0x0) [0102.384] OpenThemeData () returned 0x1b90000 [0102.384] GetSystemMetrics (nIndex=32) returned 4 [0102.384] GetSystemMetrics (nIndex=33) returned 4 [0102.384] CloseThemeData () returned 0x0 [0102.385] capGetDriverDescriptionA () returned 0x0 [0102.385] GetLastError () returned 0x0 [0102.385] SetLastError (dwErrCode=0x0) [0102.385] OpenThemeData () returned 0x1ba0000 [0102.386] GetSystemMetrics (nIndex=32) returned 4 [0102.386] GetSystemMetrics (nIndex=33) returned 4 [0102.386] CloseThemeData () returned 0x0 [0102.386] capGetDriverDescriptionA () returned 0x0 [0102.387] GetLastError () returned 0x0 [0102.387] SetLastError (dwErrCode=0x0) [0102.387] OpenThemeData () returned 0x1bb0000 [0102.387] GetSystemMetrics (nIndex=32) returned 4 [0102.387] GetSystemMetrics (nIndex=33) returned 4 [0102.387] CloseThemeData () returned 0x0 [0102.388] capGetDriverDescriptionA () returned 0x0 [0102.388] GetLastError () returned 0x0 [0102.388] SetLastError (dwErrCode=0x0) [0102.388] OpenThemeData () returned 0x1bc0000 [0102.389] GetSystemMetrics (nIndex=32) returned 4 [0102.389] GetSystemMetrics (nIndex=33) returned 4 [0102.389] CloseThemeData () returned 0x0 [0102.389] capGetDriverDescriptionA () returned 0x0 [0102.390] GetLastError () returned 0x0 [0102.390] SetLastError (dwErrCode=0x0) [0102.390] OpenThemeData () returned 0x1bd0000 [0102.390] GetSystemMetrics (nIndex=32) returned 4 [0102.390] GetSystemMetrics (nIndex=33) returned 4 [0102.390] CloseThemeData () returned 0x0 [0102.391] capGetDriverDescriptionA () returned 0x0 [0102.391] GetLastError () returned 0x0 [0102.391] SetLastError (dwErrCode=0x0) [0102.391] OpenThemeData () returned 0x1be0000 [0102.392] GetSystemMetrics (nIndex=32) returned 4 [0102.392] GetSystemMetrics (nIndex=33) returned 4 [0102.392] CloseThemeData () returned 0x0 [0102.392] capGetDriverDescriptionA () returned 0x0 [0102.393] GetLastError () returned 0x0 [0102.393] SetLastError (dwErrCode=0x0) [0102.393] OpenThemeData () returned 0x1bf0000 [0102.394] GetSystemMetrics (nIndex=32) returned 4 [0102.394] GetSystemMetrics (nIndex=33) returned 4 [0102.394] CloseThemeData () returned 0x0 [0102.394] capGetDriverDescriptionA () returned 0x0 [0102.394] GetLastError () returned 0x0 [0102.395] SetLastError (dwErrCode=0x0) [0102.395] OpenThemeData () returned 0x1c00000 [0102.395] GetSystemMetrics (nIndex=32) returned 4 [0102.395] GetSystemMetrics (nIndex=33) returned 4 [0102.395] CloseThemeData () returned 0x0 [0102.395] capGetDriverDescriptionA () returned 0x0 [0102.396] GetLastError () returned 0x0 [0102.396] SetLastError (dwErrCode=0x0) [0102.396] OpenThemeData () returned 0x1c10000 [0102.397] GetSystemMetrics (nIndex=32) returned 4 [0102.397] GetSystemMetrics (nIndex=33) returned 4 [0102.397] CloseThemeData () returned 0x0 [0102.397] capGetDriverDescriptionA () returned 0x0 [0102.490] GetLastError () returned 0x0 [0102.490] SetLastError (dwErrCode=0x0) [0102.491] OpenThemeData () returned 0x1c20000 [0102.492] GetSystemMetrics (nIndex=32) returned 4 [0102.492] GetSystemMetrics (nIndex=33) returned 4 [0102.492] CloseThemeData () returned 0x0 [0102.493] lstrlenA (lpString="\x92\x07") returned 2 [0102.493] lstrlenA (lpString="\x92\x07") returned 2 [0102.493] lstrlenA (lpString="\x92\x07") returned 2 [0102.493] lstrlenA (lpString="\x92\x07") returned 2 [0102.493] lstrlenA (lpString="\x92\x07") returned 2 [0102.493] lstrlenA (lpString="\x92\x07") returned 2 [0102.493] capGetDriverDescriptionA () returned 0x0 [0102.494] GetLastError () returned 0x0 [0102.494] SetLastError (dwErrCode=0x0) [0102.494] OpenThemeData () returned 0x1c30000 [0102.494] GetSystemMetrics (nIndex=32) returned 4 [0102.494] GetSystemMetrics (nIndex=33) returned 4 [0102.494] CloseThemeData () returned 0x0 [0102.495] lstrlenA (lpString="\x92\x07") returned 2 [0102.495] lstrlenA (lpString="\x92\x07") returned 2 [0102.495] lstrlenA (lpString="\x92\x07") returned 2 [0102.495] lstrlenA (lpString="\x92\x07") returned 2 [0102.495] lstrlenA (lpString="\x92\x07") returned 2 [0102.495] lstrlenA (lpString="\x92\x07") returned 2 [0102.495] capGetDriverDescriptionA () returned 0x0 [0102.495] GetLastError () returned 0x0 [0102.496] SetLastError (dwErrCode=0x0) [0102.496] OpenThemeData () returned 0x1c40000 [0102.496] GetSystemMetrics (nIndex=32) returned 4 [0102.496] GetSystemMetrics (nIndex=33) returned 4 [0102.496] CloseThemeData () returned 0x0 [0102.496] lstrlenA (lpString="\x92\x07") returned 2 [0102.496] lstrlenA (lpString="\x92\x07") returned 2 [0102.497] lstrlenA (lpString="\x92\x07") returned 2 [0102.497] lstrlenA (lpString="\x92\x07") returned 2 [0102.497] lstrlenA (lpString="\x92\x07") returned 2 [0102.497] lstrlenA (lpString="\x92\x07") returned 2 [0102.497] capGetDriverDescriptionA () returned 0x0 [0102.497] GetLastError () returned 0x0 [0102.497] SetLastError (dwErrCode=0x0) [0102.497] OpenThemeData () returned 0x1c50000 [0102.498] GetSystemMetrics (nIndex=32) returned 4 [0102.498] GetSystemMetrics (nIndex=33) returned 4 [0102.498] CloseThemeData () returned 0x0 [0102.498] lstrlenA (lpString="\x92\x07") returned 2 [0102.498] lstrlenA (lpString="\x92\x07") returned 2 [0102.498] lstrlenA (lpString="\x92\x07") returned 2 [0102.498] lstrlenA (lpString="\x92\x07") returned 2 [0102.498] lstrlenA (lpString="\x92\x07") returned 2 [0102.498] lstrlenA (lpString="\x92\x07") returned 2 [0102.498] capGetDriverDescriptionA () returned 0x0 [0102.501] GetLastError () returned 0x0 [0102.501] SetLastError (dwErrCode=0x0) [0102.501] OpenThemeData () returned 0x1c60000 [0102.501] GetSystemMetrics (nIndex=32) returned 4 [0102.501] GetSystemMetrics (nIndex=33) returned 4 [0102.501] CloseThemeData () returned 0x0 [0102.502] lstrlenA (lpString="\x92\x07") returned 2 [0102.502] lstrlenA (lpString="\x92\x07") returned 2 [0102.502] lstrlenA (lpString="\x92\x07") returned 2 [0102.502] lstrlenA (lpString="\x92\x07") returned 2 [0102.502] lstrlenA (lpString="\x92\x07") returned 2 [0102.502] lstrlenA (lpString="\x92\x07") returned 2 [0102.502] capGetDriverDescriptionA () returned 0x0 [0102.502] GetLastError () returned 0x0 [0102.502] SetLastError (dwErrCode=0x0) [0102.502] OpenThemeData () returned 0x1c70000 [0102.503] GetSystemMetrics (nIndex=32) returned 4 [0102.503] GetSystemMetrics (nIndex=33) returned 4 [0102.503] CloseThemeData () returned 0x0 [0102.503] lstrlenA (lpString="\x92\x07") returned 2 [0102.503] lstrlenA (lpString="\x92\x07") returned 2 [0102.503] lstrlenA (lpString="\x92\x07") returned 2 [0102.503] lstrlenA (lpString="\x92\x07") returned 2 [0102.504] lstrlenA (lpString="\x92\x07") returned 2 [0102.504] lstrlenA (lpString="\x92\x07") returned 2 [0102.504] capGetDriverDescriptionA () returned 0x0 [0102.504] GetLastError () returned 0x0 [0102.504] SetLastError (dwErrCode=0x0) [0102.504] OpenThemeData () returned 0x1c80000 [0102.505] GetSystemMetrics (nIndex=32) returned 4 [0102.505] GetSystemMetrics (nIndex=33) returned 4 [0102.505] CloseThemeData () returned 0x0 [0102.505] lstrlenA (lpString="\x92\x07") returned 2 [0102.505] lstrlenA (lpString="\x92\x07") returned 2 [0102.505] lstrlenA (lpString="\x92\x07") returned 2 [0102.505] lstrlenA (lpString="\x92\x07") returned 2 [0102.505] lstrlenA (lpString="\x92\x07") returned 2 [0102.505] lstrlenA (lpString="\x92\x07") returned 2 [0102.505] capGetDriverDescriptionA () returned 0x0 [0102.506] GetLastError () returned 0x0 [0102.506] SetLastError (dwErrCode=0x0) [0102.506] OpenThemeData () returned 0x1c90000 [0102.506] GetSystemMetrics (nIndex=32) returned 4 [0102.507] GetSystemMetrics (nIndex=33) returned 4 [0102.507] CloseThemeData () returned 0x0 [0102.507] lstrlenA (lpString="\x92\x07") returned 2 [0102.507] lstrlenA (lpString="\x92\x07") returned 2 [0102.507] lstrlenA (lpString="\x92\x07") returned 2 [0102.507] lstrlenA (lpString="\x92\x07") returned 2 [0102.507] lstrlenA (lpString="\x92\x07") returned 2 [0102.507] lstrlenA (lpString="\x92\x07") returned 2 [0102.508] capGetDriverDescriptionA () returned 0x0 [0102.508] GetLastError () returned 0x0 [0102.508] SetLastError (dwErrCode=0x0) [0102.508] OpenThemeData () returned 0x1ca0000 [0102.509] GetSystemMetrics (nIndex=32) returned 4 [0102.509] GetSystemMetrics (nIndex=33) returned 4 [0102.509] CloseThemeData () returned 0x0 [0102.509] lstrlenA (lpString="\x92\x07") returned 2 [0102.509] lstrlenA (lpString="\x92\x07") returned 2 [0102.509] lstrlenA (lpString="\x92\x07") returned 2 [0102.509] lstrlenA (lpString="\x92\x07") returned 2 [0102.509] lstrlenA (lpString="\x92\x07") returned 2 [0102.510] lstrlenA (lpString="\x92\x07") returned 2 [0102.510] capGetDriverDescriptionA () returned 0x0 [0102.510] GetLastError () returned 0x0 [0102.510] SetLastError (dwErrCode=0x0) [0102.510] OpenThemeData () returned 0x1cb0000 [0102.511] GetSystemMetrics (nIndex=32) returned 4 [0102.511] GetSystemMetrics (nIndex=33) returned 4 [0102.511] CloseThemeData () returned 0x0 [0102.511] lstrlenA (lpString="\x92\x07") returned 2 [0102.511] lstrlenA (lpString="\x92\x07") returned 2 [0102.511] lstrlenA (lpString="\x92\x07") returned 2 [0102.511] lstrlenA (lpString="\x92\x07") returned 2 [0102.511] lstrlenA (lpString="\x92\x07") returned 2 [0102.511] lstrlenA (lpString="\x92\x07") returned 2 [0102.511] capGetDriverDescriptionA () returned 0x0 [0102.512] GetLastError () returned 0x0 [0102.512] SetLastError (dwErrCode=0x0) [0102.512] OpenThemeData () returned 0x1cc0000 [0102.513] GetSystemMetrics (nIndex=32) returned 4 [0102.513] GetSystemMetrics (nIndex=33) returned 4 [0102.513] CloseThemeData () returned 0x0 [0102.513] lstrlenA (lpString="\x92\x07") returned 2 [0102.513] lstrlenA (lpString="\x92\x07") returned 2 [0102.513] lstrlenA (lpString="\x92\x07") returned 2 [0102.513] lstrlenA (lpString="\x92\x07") returned 2 [0102.513] lstrlenA (lpString="\x92\x07") returned 2 [0102.513] lstrlenA (lpString="\x92\x07") returned 2 [0102.513] capGetDriverDescriptionA () returned 0x0 [0102.514] GetLastError () returned 0x0 [0102.514] SetLastError (dwErrCode=0x0) [0102.514] OpenThemeData () returned 0x1cd0000 [0102.514] GetSystemMetrics (nIndex=32) returned 4 [0102.514] GetSystemMetrics (nIndex=33) returned 4 [0102.514] CloseThemeData () returned 0x0 [0102.515] lstrlenA (lpString="\x92\x07") returned 2 [0102.515] lstrlenA (lpString="\x92\x07") returned 2 [0102.515] lstrlenA (lpString="\x92\x07") returned 2 [0102.515] lstrlenA (lpString="\x92\x07") returned 2 [0102.515] lstrlenA (lpString="\x92\x07") returned 2 [0102.515] lstrlenA (lpString="\x92\x07") returned 2 [0102.515] capGetDriverDescriptionA () returned 0x0 [0102.515] GetLastError () returned 0x0 [0102.515] SetLastError (dwErrCode=0x0) [0102.516] OpenThemeData () returned 0x1ce0000 [0102.516] GetSystemMetrics (nIndex=32) returned 4 [0102.516] GetSystemMetrics (nIndex=33) returned 4 [0102.516] CloseThemeData () returned 0x0 [0102.516] lstrlenA (lpString="\x92\x07") returned 2 [0102.516] lstrlenA (lpString="\x92\x07") returned 2 [0102.516] lstrlenA (lpString="\x92\x07") returned 2 [0102.516] lstrlenA (lpString="\x92\x07") returned 2 [0102.517] lstrlenA (lpString="\x92\x07") returned 2 [0102.517] lstrlenA (lpString="\x92\x07") returned 2 [0102.517] capGetDriverDescriptionA () returned 0x0 [0102.517] GetLastError () returned 0x0 [0102.517] SetLastError (dwErrCode=0x0) [0102.517] OpenThemeData () returned 0x1cf0000 [0102.518] GetSystemMetrics (nIndex=32) returned 4 [0102.518] GetSystemMetrics (nIndex=33) returned 4 [0102.518] CloseThemeData () returned 0x0 [0102.518] lstrlenA (lpString="\x92\x07") returned 2 [0102.518] lstrlenA (lpString="\x92\x07") returned 2 [0102.518] lstrlenA (lpString="\x92\x07") returned 2 [0102.518] lstrlenA (lpString="\x92\x07") returned 2 [0102.518] lstrlenA (lpString="\x92\x07") returned 2 [0102.518] lstrlenA (lpString="\x92\x07") returned 2 [0102.518] capGetDriverDescriptionA () returned 0x0 [0102.519] GetLastError () returned 0x0 [0102.519] SetLastError (dwErrCode=0x0) [0102.519] OpenThemeData () returned 0x1d00000 [0102.520] GetSystemMetrics (nIndex=32) returned 4 [0102.520] GetSystemMetrics (nIndex=33) returned 4 [0102.520] CloseThemeData () returned 0x0 [0102.520] lstrlenA (lpString="\x92\x07") returned 2 [0102.520] lstrlenA (lpString="\x92\x07") returned 2 [0102.520] lstrlenA (lpString="\x92\x07") returned 2 [0102.520] lstrlenA (lpString="\x92\x07") returned 2 [0102.520] lstrlenA (lpString="\x92\x07") returned 2 [0102.520] lstrlenA (lpString="\x92\x07") returned 2 [0102.520] capGetDriverDescriptionA () returned 0x0 [0102.521] GetLastError () returned 0x0 [0102.521] SetLastError (dwErrCode=0x0) [0102.521] OpenThemeData () returned 0x1d10000 [0102.521] GetSystemMetrics (nIndex=32) returned 4 [0102.521] GetSystemMetrics (nIndex=33) returned 4 [0102.521] CloseThemeData () returned 0x0 [0102.522] lstrlenA (lpString="\x92\x07") returned 2 [0102.522] lstrlenA (lpString="\x92\x07") returned 2 [0102.522] lstrlenA (lpString="\x92\x07") returned 2 [0102.522] lstrlenA (lpString="\x92\x07") returned 2 [0102.522] lstrlenA (lpString="\x92\x07") returned 2 [0102.522] lstrlenA (lpString="\x92\x07") returned 2 [0102.522] capGetDriverDescriptionA () returned 0x0 [0102.522] GetLastError () returned 0x0 [0102.522] SetLastError (dwErrCode=0x0) [0102.523] OpenThemeData () returned 0x1d20000 [0102.523] GetSystemMetrics (nIndex=32) returned 4 [0102.523] GetSystemMetrics (nIndex=33) returned 4 [0102.523] CloseThemeData () returned 0x0 [0102.524] lstrlenA (lpString="\x92\x07") returned 2 [0102.524] lstrlenA (lpString="\x92\x07") returned 2 [0102.524] lstrlenA (lpString="\x92\x07") returned 2 [0102.524] lstrlenA (lpString="\x92\x07") returned 2 [0102.524] lstrlenA (lpString="\x92\x07") returned 2 [0102.524] lstrlenA (lpString="\x92\x07") returned 2 [0102.524] capGetDriverDescriptionA () returned 0x0 [0102.524] GetLastError () returned 0x0 [0102.524] SetLastError (dwErrCode=0x0) [0102.524] OpenThemeData () returned 0x1d30000 [0102.525] GetSystemMetrics (nIndex=32) returned 4 [0102.525] GetSystemMetrics (nIndex=33) returned 4 [0102.525] CloseThemeData () returned 0x0 [0102.525] lstrlenA (lpString="\x92\x07") returned 2 [0102.525] lstrlenA (lpString="\x92\x07") returned 2 [0102.525] lstrlenA (lpString="\x92\x07") returned 2 [0102.525] lstrlenA (lpString="\x92\x07") returned 2 [0102.525] lstrlenA (lpString="\x92\x07") returned 2 [0102.525] lstrlenA (lpString="\x92\x07") returned 2 [0102.525] capGetDriverDescriptionA () returned 0x0 [0102.526] GetLastError () returned 0x0 [0102.526] SetLastError (dwErrCode=0x0) [0102.526] OpenThemeData () returned 0x1d40000 [0102.527] GetSystemMetrics (nIndex=32) returned 4 [0102.527] GetSystemMetrics (nIndex=33) returned 4 [0102.527] CloseThemeData () returned 0x0 [0102.527] lstrlenA (lpString="\x92\x07") returned 2 [0102.527] lstrlenA (lpString="\x92\x07") returned 2 [0102.527] lstrlenA (lpString="\x92\x07") returned 2 [0102.527] lstrlenA (lpString="\x92\x07") returned 2 [0102.527] lstrlenA (lpString="\x92\x07") returned 2 [0102.527] lstrlenA (lpString="\x92\x07") returned 2 [0102.527] capGetDriverDescriptionA () returned 0x0 [0102.528] GetLastError () returned 0x0 [0102.528] SetLastError (dwErrCode=0x0) [0102.528] OpenThemeData () returned 0x1d50000 [0102.528] GetSystemMetrics (nIndex=32) returned 4 [0102.528] GetSystemMetrics (nIndex=33) returned 4 [0102.528] CloseThemeData () returned 0x0 [0102.529] lstrlenA (lpString="\x92\x07") returned 2 [0102.529] lstrlenA (lpString="\x92\x07") returned 2 [0102.529] lstrlenA (lpString="\x92\x07") returned 2 [0102.529] lstrlenA (lpString="\x92\x07") returned 2 [0102.529] lstrlenA (lpString="\x92\x07") returned 2 [0102.529] lstrlenA (lpString="\x92\x07") returned 2 [0102.529] capGetDriverDescriptionA () returned 0x0 [0102.529] GetLastError () returned 0x0 [0102.529] SetLastError (dwErrCode=0x0) [0102.529] OpenThemeData () returned 0x1d60000 [0102.530] GetSystemMetrics (nIndex=32) returned 4 [0102.530] GetSystemMetrics (nIndex=33) returned 4 [0102.530] CloseThemeData () returned 0x0 [0102.530] lstrlenA (lpString="\x92\x07") returned 2 [0102.530] lstrlenA (lpString="\x92\x07") returned 2 [0102.530] lstrlenA (lpString="\x92\x07") returned 2 [0102.530] lstrlenA (lpString="\x92\x07") returned 2 [0102.530] lstrlenA (lpString="\x92\x07") returned 2 [0102.530] lstrlenA (lpString="\x92\x07") returned 2 [0102.530] capGetDriverDescriptionA () returned 0x0 [0102.531] GetLastError () returned 0x0 [0102.531] SetLastError (dwErrCode=0x0) [0102.531] OpenThemeData () returned 0x1d70000 [0102.532] GetSystemMetrics (nIndex=32) returned 4 [0102.532] GetSystemMetrics (nIndex=33) returned 4 [0102.532] CloseThemeData () returned 0x0 [0102.532] lstrlenA (lpString="\x92\x07") returned 2 [0102.532] lstrlenA (lpString="\x92\x07") returned 2 [0102.532] lstrlenA (lpString="\x92\x07") returned 2 [0102.532] lstrlenA (lpString="\x92\x07") returned 2 [0102.532] lstrlenA (lpString="\x92\x07") returned 2 [0102.532] lstrlenA (lpString="\x92\x07") returned 2 [0102.532] capGetDriverDescriptionA () returned 0x0 [0102.533] GetLastError () returned 0x0 [0102.533] SetLastError (dwErrCode=0x0) [0102.533] OpenThemeData () returned 0x1d80000 [0102.533] GetSystemMetrics (nIndex=32) returned 4 [0102.533] GetSystemMetrics (nIndex=33) returned 4 [0102.533] CloseThemeData () returned 0x0 [0102.534] lstrlenA (lpString="\x92\x07") returned 2 [0102.534] lstrlenA (lpString="\x92\x07") returned 2 [0102.534] lstrlenA (lpString="\x92\x07") returned 2 [0102.534] lstrlenA (lpString="\x92\x07") returned 2 [0102.534] lstrlenA (lpString="\x92\x07") returned 2 [0102.534] lstrlenA (lpString="\x92\x07") returned 2 [0102.534] capGetDriverDescriptionA () returned 0x0 [0102.535] GetLastError () returned 0x0 [0102.535] SetLastError (dwErrCode=0x0) [0102.535] OpenThemeData () returned 0x1d90000 [0102.535] GetSystemMetrics (nIndex=32) returned 4 [0102.535] GetSystemMetrics (nIndex=33) returned 4 [0102.535] CloseThemeData () returned 0x0 [0102.536] lstrlenA (lpString="\x92\x07") returned 2 [0102.536] lstrlenA (lpString="\x92\x07") returned 2 [0102.536] lstrlenA (lpString="\x92\x07") returned 2 [0102.536] lstrlenA (lpString="\x92\x07") returned 2 [0102.536] lstrlenA (lpString="\x92\x07") returned 2 [0102.536] lstrlenA (lpString="\x92\x07") returned 2 [0102.536] capGetDriverDescriptionA () returned 0x0 [0102.536] GetLastError () returned 0x0 [0102.536] SetLastError (dwErrCode=0x0) [0102.536] OpenThemeData () returned 0x1da0000 [0102.537] GetSystemMetrics (nIndex=32) returned 4 [0102.537] GetSystemMetrics (nIndex=33) returned 4 [0102.537] CloseThemeData () returned 0x0 [0102.537] lstrlenA (lpString="\x92\x07") returned 2 [0102.537] lstrlenA (lpString="\x92\x07") returned 2 [0102.537] lstrlenA (lpString="\x92\x07") returned 2 [0102.537] lstrlenA (lpString="\x92\x07") returned 2 [0102.537] lstrlenA (lpString="\x92\x07") returned 2 [0102.537] lstrlenA (lpString="\x92\x07") returned 2 [0102.537] capGetDriverDescriptionA () returned 0x0 [0102.538] GetLastError () returned 0x0 [0102.538] SetLastError (dwErrCode=0x0) [0102.824] OpenThemeData () returned 0x1db0000 [0102.824] GetSystemMetrics (nIndex=32) returned 4 [0102.824] GetSystemMetrics (nIndex=33) returned 4 [0102.824] CloseThemeData () returned 0x0 [0102.825] lstrlenA (lpString="\x92\x07") returned 2 [0102.825] lstrlenA (lpString="\x92\x07") returned 2 [0102.825] lstrlenA (lpString="\x92\x07") returned 2 [0102.825] lstrlenA (lpString="\x92\x07") returned 2 [0102.825] lstrlenA (lpString="\x92\x07") returned 2 [0102.825] lstrlenA (lpString="\x92\x07") returned 2 [0102.825] capGetDriverDescriptionA () returned 0x0 [0102.826] GetLastError () returned 0x0 [0102.826] SetLastError (dwErrCode=0x0) [0102.826] OpenThemeData () returned 0x1dc0000 [0102.826] GetSystemMetrics (nIndex=32) returned 4 [0102.826] GetSystemMetrics (nIndex=33) returned 4 [0102.826] CloseThemeData () returned 0x0 [0102.827] lstrlenA (lpString="\x92\x07") returned 2 [0102.827] lstrlenA (lpString="\x92\x07") returned 2 [0102.827] lstrlenA (lpString="\x92\x07") returned 2 [0102.827] lstrlenA (lpString="\x92\x07") returned 2 [0102.827] lstrlenA (lpString="\x92\x07") returned 2 [0102.827] lstrlenA (lpString="\x92\x07") returned 2 [0102.828] capGetDriverDescriptionA () returned 0x0 [0102.829] GetLastError () returned 0x0 [0102.829] SetLastError (dwErrCode=0x0) [0102.829] OpenThemeData () returned 0x1dd0000 [0102.830] GetSystemMetrics (nIndex=32) returned 4 [0102.830] GetSystemMetrics (nIndex=33) returned 4 [0102.830] CloseThemeData () returned 0x0 [0102.830] lstrlenA (lpString="\x92\x07") returned 2 [0102.830] lstrlenA (lpString="\x92\x07") returned 2 [0102.830] lstrlenA (lpString="\x92\x07") returned 2 [0102.830] lstrlenA (lpString="\x92\x07") returned 2 [0102.830] lstrlenA (lpString="\x92\x07") returned 2 [0102.830] lstrlenA (lpString="\x92\x07") returned 2 [0102.830] capGetDriverDescriptionA () returned 0x0 [0102.831] GetLastError () returned 0x0 [0102.831] SetLastError (dwErrCode=0x0) [0102.831] OpenThemeData () returned 0x1de0000 [0102.832] GetSystemMetrics (nIndex=32) returned 4 [0102.832] GetSystemMetrics (nIndex=33) returned 4 [0102.832] CloseThemeData () returned 0x0 [0102.832] lstrlenA (lpString="\x92\x07") returned 2 [0102.832] lstrlenA (lpString="\x92\x07") returned 2 [0102.832] lstrlenA (lpString="\x92\x07") returned 2 [0102.832] lstrlenA (lpString="\x92\x07") returned 2 [0102.832] lstrlenA (lpString="\x92\x07") returned 2 [0102.832] lstrlenA (lpString="\x92\x07") returned 2 [0102.832] capGetDriverDescriptionA () returned 0x0 [0102.833] GetLastError () returned 0x0 [0102.833] SetLastError (dwErrCode=0x0) [0102.833] OpenThemeData () returned 0x1df0000 [0102.833] GetSystemMetrics (nIndex=32) returned 4 [0102.833] GetSystemMetrics (nIndex=33) returned 4 [0102.833] CloseThemeData () returned 0x0 [0102.834] lstrlenA (lpString="\x92\x07") returned 2 [0102.834] lstrlenA (lpString="\x92\x07") returned 2 [0102.834] lstrlenA (lpString="\x92\x07") returned 2 [0102.834] lstrlenA (lpString="\x92\x07") returned 2 [0102.834] lstrlenA (lpString="\x92\x07") returned 2 [0102.834] lstrlenA (lpString="\x92\x07") returned 2 [0102.834] capGetDriverDescriptionA () returned 0x0 [0102.835] GetLastError () returned 0x0 [0102.835] SetLastError (dwErrCode=0x0) [0102.835] OpenThemeData () returned 0x1e00000 [0102.835] GetSystemMetrics (nIndex=32) returned 4 [0102.836] GetSystemMetrics (nIndex=33) returned 4 [0102.836] CloseThemeData () returned 0x0 [0102.836] lstrlenA (lpString="\x92\x07") returned 2 [0102.836] lstrlenA (lpString="\x92\x07") returned 2 [0102.836] lstrlenA (lpString="\x92\x07") returned 2 [0102.836] lstrlenA (lpString="\x92\x07") returned 2 [0102.836] lstrlenA (lpString="\x92\x07") returned 2 [0102.836] lstrlenA (lpString="\x92\x07") returned 2 [0102.836] capGetDriverDescriptionA () returned 0x0 [0102.837] GetLastError () returned 0x0 [0102.837] SetLastError (dwErrCode=0x0) [0102.837] OpenThemeData () returned 0x1e10000 [0102.837] GetSystemMetrics (nIndex=32) returned 4 [0102.837] GetSystemMetrics (nIndex=33) returned 4 [0102.837] CloseThemeData () returned 0x0 [0102.838] lstrlenA (lpString="\x92\x07") returned 2 [0102.838] lstrlenA (lpString="\x92\x07") returned 2 [0102.838] lstrlenA (lpString="\x92\x07") returned 2 [0102.838] lstrlenA (lpString="\x92\x07") returned 2 [0102.838] lstrlenA (lpString="\x92\x07") returned 2 [0102.838] lstrlenA (lpString="\x92\x07") returned 2 [0102.838] capGetDriverDescriptionA () returned 0x0 [0102.838] GetLastError () returned 0x0 [0102.838] SetLastError (dwErrCode=0x0) [0102.839] OpenThemeData () returned 0x1e20000 [0102.839] GetSystemMetrics (nIndex=32) returned 4 [0102.839] GetSystemMetrics (nIndex=33) returned 4 [0102.839] CloseThemeData () returned 0x0 [0102.839] lstrlenA (lpString="\x92\x07") returned 2 [0102.840] lstrlenA (lpString="\x92\x07") returned 2 [0102.840] lstrlenA (lpString="\x92\x07") returned 2 [0102.840] lstrlenA (lpString="\x92\x07") returned 2 [0102.840] lstrlenA (lpString="\x92\x07") returned 2 [0102.840] lstrlenA (lpString="\x92\x07") returned 2 [0102.840] capGetDriverDescriptionA () returned 0x0 [0102.840] GetLastError () returned 0x0 [0102.840] SetLastError (dwErrCode=0x0) [0102.840] OpenThemeData () returned 0x1e30000 [0102.841] GetSystemMetrics (nIndex=32) returned 4 [0102.841] GetSystemMetrics (nIndex=33) returned 4 [0102.841] CloseThemeData () returned 0x0 [0102.841] lstrlenA (lpString="\x92\x07") returned 2 [0102.841] lstrlenA (lpString="\x92\x07") returned 2 [0102.841] lstrlenA (lpString="\x92\x07") returned 2 [0102.841] lstrlenA (lpString="\x92\x07") returned 2 [0102.841] lstrlenA (lpString="\x92\x07") returned 2 [0102.841] lstrlenA (lpString="\x92\x07") returned 2 [0102.841] capGetDriverDescriptionA () returned 0x0 [0102.842] GetLastError () returned 0x0 [0102.842] SetLastError (dwErrCode=0x0) [0102.842] OpenThemeData () returned 0x1e40000 [0102.843] GetSystemMetrics (nIndex=32) returned 4 [0102.843] GetSystemMetrics (nIndex=33) returned 4 [0102.843] CloseThemeData () returned 0x0 [0102.843] lstrlenA (lpString="\x92\x07") returned 2 [0102.843] lstrlenA (lpString="\x92\x07") returned 2 [0102.843] lstrlenA (lpString="\x92\x07") returned 2 [0102.843] lstrlenA (lpString="\x92\x07") returned 2 [0102.843] lstrlenA (lpString="\x92\x07") returned 2 [0102.843] lstrlenA (lpString="\x92\x07") returned 2 [0102.843] capGetDriverDescriptionA () returned 0x0 [0102.844] GetLastError () returned 0x0 [0102.844] SetLastError (dwErrCode=0x0) [0102.844] OpenThemeData () returned 0x1e50000 [0102.844] GetSystemMetrics (nIndex=32) returned 4 [0102.844] GetSystemMetrics (nIndex=33) returned 4 [0102.845] CloseThemeData () returned 0x0 [0102.845] lstrlenA (lpString="\x92\x07") returned 2 [0102.845] lstrlenA (lpString="\x92\x07") returned 2 [0102.845] lstrlenA (lpString="\x92\x07") returned 2 [0102.845] lstrlenA (lpString="\x92\x07") returned 2 [0102.845] lstrlenA (lpString="\x92\x07") returned 2 [0102.845] lstrlenA (lpString="\x92\x07") returned 2 [0102.845] capGetDriverDescriptionA () returned 0x0 [0102.846] GetLastError () returned 0x0 [0102.846] SetLastError (dwErrCode=0x0) [0102.846] OpenThemeData () returned 0x1e60000 [0102.846] GetSystemMetrics (nIndex=32) returned 4 [0102.846] GetSystemMetrics (nIndex=33) returned 4 [0102.846] CloseThemeData () returned 0x0 [0102.847] lstrlenA (lpString="\x92\x07") returned 2 [0102.847] lstrlenA (lpString="\x92\x07") returned 2 [0102.847] lstrlenA (lpString="\x92\x07") returned 2 [0102.847] lstrlenA (lpString="\x92\x07") returned 2 [0102.847] lstrlenA (lpString="\x92\x07") returned 2 [0102.847] lstrlenA (lpString="\x92\x07") returned 2 [0102.847] capGetDriverDescriptionA () returned 0x0 [0102.847] GetLastError () returned 0x0 [0102.848] SetLastError (dwErrCode=0x0) [0102.848] OpenThemeData () returned 0x1e70000 [0102.848] GetSystemMetrics (nIndex=32) returned 4 [0102.848] GetSystemMetrics (nIndex=33) returned 4 [0102.848] CloseThemeData () returned 0x0 [0102.848] lstrlenA (lpString="\x92\x07") returned 2 [0102.848] lstrlenA (lpString="\x92\x07") returned 2 [0102.849] lstrlenA (lpString="\x92\x07") returned 2 [0102.849] lstrlenA (lpString="\x92\x07") returned 2 [0102.849] lstrlenA (lpString="\x92\x07") returned 2 [0102.849] lstrlenA (lpString="\x92\x07") returned 2 [0102.849] capGetDriverDescriptionA () returned 0x0 [0102.849] GetLastError () returned 0x0 [0102.849] SetLastError (dwErrCode=0x0) [0102.849] OpenThemeData () returned 0x1e80000 [0102.850] GetSystemMetrics (nIndex=32) returned 4 [0102.850] GetSystemMetrics (nIndex=33) returned 4 [0102.850] CloseThemeData () returned 0x0 [0102.850] lstrlenA (lpString="\x92\x07") returned 2 [0102.850] lstrlenA (lpString="\x92\x07") returned 2 [0102.850] lstrlenA (lpString="\x92\x07") returned 2 [0102.850] lstrlenA (lpString="\x92\x07") returned 2 [0102.850] lstrlenA (lpString="\x92\x07") returned 2 [0102.850] lstrlenA (lpString="\x92\x07") returned 2 [0102.850] capGetDriverDescriptionA () returned 0x0 [0102.851] GetLastError () returned 0x0 [0102.851] SetLastError (dwErrCode=0x0) [0102.851] OpenThemeData () returned 0x1e90000 [0102.852] GetSystemMetrics (nIndex=32) returned 4 [0102.852] GetSystemMetrics (nIndex=33) returned 4 [0102.852] CloseThemeData () returned 0x0 [0102.852] lstrlenA (lpString="\x92\x07") returned 2 [0102.852] lstrlenA (lpString="\x92\x07") returned 2 [0102.852] lstrlenA (lpString="\x92\x07") returned 2 [0102.852] lstrlenA (lpString="\x92\x07") returned 2 [0102.852] lstrlenA (lpString="\x92\x07") returned 2 [0102.852] lstrlenA (lpString="\x92\x07") returned 2 [0102.853] capGetDriverDescriptionA () returned 0x0 [0102.853] GetLastError () returned 0x0 [0102.853] SetLastError (dwErrCode=0x0) [0102.853] OpenThemeData () returned 0x1ea0000 [0102.854] GetSystemMetrics (nIndex=32) returned 4 [0102.854] GetSystemMetrics (nIndex=33) returned 4 [0102.854] CloseThemeData () returned 0x0 [0102.854] lstrlenA (lpString="\x92\x07") returned 2 [0102.854] lstrlenA (lpString="\x92\x07") returned 2 [0102.854] lstrlenA (lpString="\x92\x07") returned 2 [0102.854] lstrlenA (lpString="\x92\x07") returned 2 [0102.854] lstrlenA (lpString="\x92\x07") returned 2 [0102.854] lstrlenA (lpString="\x92\x07") returned 2 [0102.854] capGetDriverDescriptionA () returned 0x0 [0102.855] GetLastError () returned 0x0 [0102.855] SetLastError (dwErrCode=0x0) [0102.855] OpenThemeData () returned 0x1eb0000 [0102.856] GetSystemMetrics (nIndex=32) returned 4 [0102.856] GetSystemMetrics (nIndex=33) returned 4 [0102.856] CloseThemeData () returned 0x0 [0102.856] lstrlenA (lpString="\x92\x07") returned 2 [0102.856] lstrlenA (lpString="\x92\x07") returned 2 [0102.856] lstrlenA (lpString="\x92\x07") returned 2 [0102.856] lstrlenA (lpString="\x92\x07") returned 2 [0102.856] lstrlenA (lpString="\x92\x07") returned 2 [0102.856] lstrlenA (lpString="\x92\x07") returned 2 [0102.856] capGetDriverDescriptionA () returned 0x0 [0102.857] GetLastError () returned 0x0 [0102.857] SetLastError (dwErrCode=0x0) [0102.857] OpenThemeData () returned 0x1ec0000 [0102.861] GetSystemMetrics (nIndex=32) returned 4 [0102.861] GetSystemMetrics (nIndex=33) returned 4 [0102.861] CloseThemeData () returned 0x0 [0102.861] lstrlenA (lpString="\x92\x07") returned 2 [0102.861] lstrlenA (lpString="\x92\x07") returned 2 [0102.861] lstrlenA (lpString="\x92\x07") returned 2 [0102.862] lstrlenA (lpString="\x92\x07") returned 2 [0102.862] lstrlenA (lpString="\x92\x07") returned 2 [0102.862] lstrlenA (lpString="\x92\x07") returned 2 [0102.862] capGetDriverDescriptionA () returned 0x0 [0102.862] GetLastError () returned 0x0 [0102.862] SetLastError (dwErrCode=0x0) [0102.862] OpenThemeData () returned 0x1ed0000 [0102.863] GetSystemMetrics (nIndex=32) returned 4 [0102.863] GetSystemMetrics (nIndex=33) returned 4 [0102.863] CloseThemeData () returned 0x0 [0102.863] lstrlenA (lpString="\x92\x07") returned 2 [0102.863] lstrlenA (lpString="\x92\x07") returned 2 [0102.863] lstrlenA (lpString="\x92\x07") returned 2 [0102.863] lstrlenA (lpString="\x92\x07") returned 2 [0102.863] lstrlenA (lpString="\x92\x07") returned 2 [0102.863] lstrlenA (lpString="\x92\x07") returned 2 [0102.864] capGetDriverDescriptionA () returned 0x0 [0102.864] GetLastError () returned 0x0 [0102.864] SetLastError (dwErrCode=0x0) [0102.864] OpenThemeData () returned 0x1ee0000 [0102.865] GetSystemMetrics (nIndex=32) returned 4 [0102.865] GetSystemMetrics (nIndex=33) returned 4 [0102.865] CloseThemeData () returned 0x0 [0102.865] lstrlenA (lpString="\x92\x07") returned 2 [0102.865] lstrlenA (lpString="\x92\x07") returned 2 [0102.865] lstrlenA (lpString="\x92\x07") returned 2 [0102.865] lstrlenA (lpString="\x92\x07") returned 2 [0102.865] lstrlenA (lpString="\x92\x07") returned 2 [0102.865] lstrlenA (lpString="\x92\x07") returned 2 [0102.865] capGetDriverDescriptionA () returned 0x0 [0102.866] GetLastError () returned 0x0 [0102.866] SetLastError (dwErrCode=0x0) [0102.866] OpenThemeData () returned 0x1ef0000 [0102.964] GetSystemMetrics (nIndex=32) returned 4 [0102.964] GetSystemMetrics (nIndex=33) returned 4 [0102.964] CloseThemeData () returned 0x0 [0102.964] lstrlenA (lpString="\x92\x07") returned 2 [0102.964] lstrlenA (lpString="\x92\x07") returned 2 [0102.964] lstrlenA (lpString="\x92\x07") returned 2 [0102.964] lstrlenA (lpString="\x92\x07") returned 2 [0102.964] lstrlenA (lpString="\x92\x07") returned 2 [0102.964] lstrlenA (lpString="\x92\x07") returned 2 [0102.964] capGetDriverDescriptionA () returned 0x0 [0102.965] GetLastError () returned 0x0 [0102.965] SetLastError (dwErrCode=0x0) [0102.965] OpenThemeData () returned 0x1f00000 [0102.966] GetSystemMetrics (nIndex=32) returned 4 [0102.966] GetSystemMetrics (nIndex=33) returned 4 [0102.966] CloseThemeData () returned 0x0 [0102.966] lstrlenA (lpString="\x92\x07") returned 2 [0102.966] lstrlenA (lpString="\x92\x07") returned 2 [0102.966] lstrlenA (lpString="\x92\x07") returned 2 [0102.966] lstrlenA (lpString="\x92\x07") returned 2 [0102.966] lstrlenA (lpString="\x92\x07") returned 2 [0102.966] lstrlenA (lpString="\x92\x07") returned 2 [0102.966] capGetDriverDescriptionA () returned 0x0 [0102.967] GetLastError () returned 0x0 [0102.967] SetLastError (dwErrCode=0x0) [0102.967] OpenThemeData () returned 0x1f10000 [0102.967] GetSystemMetrics (nIndex=32) returned 4 [0102.967] GetSystemMetrics (nIndex=33) returned 4 [0102.967] CloseThemeData () returned 0x0 [0102.968] lstrlenA (lpString="\x92\x07") returned 2 [0102.968] lstrlenA (lpString="\x92\x07") returned 2 [0102.968] lstrlenA (lpString="\x92\x07") returned 2 [0102.968] lstrlenA (lpString="\x92\x07") returned 2 [0102.968] lstrlenA (lpString="\x92\x07") returned 2 [0102.968] lstrlenA (lpString="\x92\x07") returned 2 [0102.968] capGetDriverDescriptionA () returned 0x0 [0102.968] GetLastError () returned 0x0 [0102.969] SetLastError (dwErrCode=0x0) [0102.969] OpenThemeData () returned 0x1f20000 [0102.969] GetSystemMetrics (nIndex=32) returned 4 [0102.969] GetSystemMetrics (nIndex=33) returned 4 [0102.969] CloseThemeData () returned 0x0 [0102.969] lstrlenA (lpString="\x92\x07") returned 2 [0102.969] lstrlenA (lpString="\x92\x07") returned 2 [0102.969] lstrlenA (lpString="\x92\x07") returned 2 [0102.970] lstrlenA (lpString="\x92\x07") returned 2 [0102.970] lstrlenA (lpString="\x92\x07") returned 2 [0102.970] lstrlenA (lpString="\x92\x07") returned 2 [0102.970] capGetDriverDescriptionA () returned 0x0 [0102.970] GetLastError () returned 0x0 [0102.970] SetLastError (dwErrCode=0x0) [0102.970] OpenThemeData () returned 0x1f30000 [0102.971] GetSystemMetrics (nIndex=32) returned 4 [0102.971] GetSystemMetrics (nIndex=33) returned 4 [0102.971] CloseThemeData () returned 0x0 [0102.971] lstrlenA (lpString="\x92\x07") returned 2 [0102.971] lstrlenA (lpString="\x92\x07") returned 2 [0102.971] lstrlenA (lpString="\x92\x07") returned 2 [0102.971] lstrlenA (lpString="\x92\x07") returned 2 [0102.971] lstrlenA (lpString="\x92\x07") returned 2 [0102.971] lstrlenA (lpString="\x92\x07") returned 2 [0102.971] capGetDriverDescriptionA () returned 0x0 [0102.972] GetLastError () returned 0x0 [0102.972] SetLastError (dwErrCode=0x0) [0102.972] OpenThemeData () returned 0x1f40000 [0102.973] GetSystemMetrics (nIndex=32) returned 4 [0102.973] GetSystemMetrics (nIndex=33) returned 4 [0102.973] CloseThemeData () returned 0x0 [0102.973] lstrlenA (lpString="\x92\x07") returned 2 [0102.973] lstrlenA (lpString="\x92\x07") returned 2 [0102.973] lstrlenA (lpString="\x92\x07") returned 2 [0102.973] lstrlenA (lpString="\x92\x07") returned 2 [0102.973] lstrlenA (lpString="\x92\x07") returned 2 [0102.973] lstrlenA (lpString="\x92\x07") returned 2 [0102.973] capGetDriverDescriptionA () returned 0x0 [0102.974] GetLastError () returned 0x0 [0102.974] SetLastError (dwErrCode=0x0) [0102.974] OpenThemeData () returned 0x1f50000 [0102.974] GetSystemMetrics (nIndex=32) returned 4 [0102.974] GetSystemMetrics (nIndex=33) returned 4 [0102.974] CloseThemeData () returned 0x0 [0102.975] lstrlenA (lpString="\x92\x07") returned 2 [0102.975] lstrlenA (lpString="\x92\x07") returned 2 [0102.975] lstrlenA (lpString="\x92\x07") returned 2 [0102.975] lstrlenA (lpString="\x92\x07") returned 2 [0102.975] lstrlenA (lpString="\x92\x07") returned 2 [0102.975] lstrlenA (lpString="\x92\x07") returned 2 [0102.975] capGetDriverDescriptionA () returned 0x0 [0102.976] GetLastError () returned 0x0 [0102.976] SetLastError (dwErrCode=0x0) [0102.976] OpenThemeData () returned 0x1f60000 [0102.976] GetSystemMetrics (nIndex=32) returned 4 [0102.976] GetSystemMetrics (nIndex=33) returned 4 [0102.976] CloseThemeData () returned 0x0 [0102.977] lstrlenA (lpString="\x92\x07") returned 2 [0102.977] lstrlenA (lpString="\x92\x07") returned 2 [0102.977] lstrlenA (lpString="\x92\x07") returned 2 [0102.977] lstrlenA (lpString="\x92\x07") returned 2 [0102.977] lstrlenA (lpString="\x92\x07") returned 2 [0102.977] lstrlenA (lpString="\x92\x07") returned 2 [0102.977] capGetDriverDescriptionA () returned 0x0 [0102.977] GetLastError () returned 0x0 [0102.978] SetLastError (dwErrCode=0x0) [0102.978] OpenThemeData () returned 0x1f70000 [0102.978] GetSystemMetrics (nIndex=32) returned 4 [0102.978] GetSystemMetrics (nIndex=33) returned 4 [0102.978] CloseThemeData () returned 0x0 [0102.978] lstrlenA (lpString="\x92\x07") returned 2 [0102.978] lstrlenA (lpString="\x92\x07") returned 2 [0102.978] lstrlenA (lpString="\x92\x07") returned 2 [0102.978] lstrlenA (lpString="\x92\x07") returned 2 [0102.978] lstrlenA (lpString="\x92\x07") returned 2 [0102.979] lstrlenA (lpString="\x92\x07") returned 2 [0102.979] capGetDriverDescriptionA () returned 0x0 [0102.979] GetLastError () returned 0x0 [0102.979] SetLastError (dwErrCode=0x0) [0102.979] OpenThemeData () returned 0x1f80000 [0102.980] GetSystemMetrics (nIndex=32) returned 4 [0102.980] GetSystemMetrics (nIndex=33) returned 4 [0102.980] CloseThemeData () returned 0x0 [0102.980] lstrlenA (lpString="\x92\x07") returned 2 [0102.980] lstrlenA (lpString="\x92\x07") returned 2 [0102.980] lstrlenA (lpString="\x92\x07") returned 2 [0102.980] lstrlenA (lpString="\x92\x07") returned 2 [0102.980] lstrlenA (lpString="\x92\x07") returned 2 [0102.980] lstrlenA (lpString="\x92\x07") returned 2 [0102.980] capGetDriverDescriptionA () returned 0x0 [0102.981] GetLastError () returned 0x0 [0102.981] SetLastError (dwErrCode=0x0) [0102.981] OpenThemeData () returned 0x1f90000 [0102.982] GetSystemMetrics (nIndex=32) returned 4 [0102.982] GetSystemMetrics (nIndex=33) returned 4 [0102.982] CloseThemeData () returned 0x0 [0102.982] lstrlenA (lpString="\x92\x07") returned 2 [0102.982] lstrlenA (lpString="\x92\x07") returned 2 [0102.982] lstrlenA (lpString="\x92\x07") returned 2 [0102.982] lstrlenA (lpString="\x92\x07") returned 2 [0102.982] lstrlenA (lpString="\x92\x07") returned 2 [0102.982] lstrlenA (lpString="\x92\x07") returned 2 [0102.982] capGetDriverDescriptionA () returned 0x0 [0102.983] GetLastError () returned 0x0 [0102.983] SetLastError (dwErrCode=0x0) [0102.983] OpenThemeData () returned 0x1fa0000 [0102.983] GetSystemMetrics (nIndex=32) returned 4 [0102.983] GetSystemMetrics (nIndex=33) returned 4 [0102.983] CloseThemeData () returned 0x0 [0102.984] lstrlenA (lpString="\x92\x07") returned 2 [0102.984] lstrlenA (lpString="\x92\x07") returned 2 [0102.984] lstrlenA (lpString="\x92\x07") returned 2 [0102.984] lstrlenA (lpString="\x92\x07") returned 2 [0102.984] lstrlenA (lpString="\x92\x07") returned 2 [0102.984] lstrlenA (lpString="\x92\x07") returned 2 [0102.984] capGetDriverDescriptionA () returned 0x0 [0102.984] GetLastError () returned 0x0 [0102.984] SetLastError (dwErrCode=0x0) [0102.984] OpenThemeData () returned 0x1fb0000 [0102.985] GetSystemMetrics (nIndex=32) returned 4 [0102.985] GetSystemMetrics (nIndex=33) returned 4 [0102.985] CloseThemeData () returned 0x0 [0102.985] lstrlenA (lpString="\x92\x07") returned 2 [0102.985] lstrlenA (lpString="\x92\x07") returned 2 [0102.985] lstrlenA (lpString="\x92\x07") returned 2 [0102.985] lstrlenA (lpString="\x92\x07") returned 2 [0102.985] lstrlenA (lpString="\x92\x07") returned 2 [0102.985] lstrlenA (lpString="\x92\x07") returned 2 [0102.986] capGetDriverDescriptionA () returned 0x0 [0102.986] GetLastError () returned 0x0 [0102.986] SetLastError (dwErrCode=0x0) [0102.986] OpenThemeData () returned 0x1fc0000 [0102.987] GetSystemMetrics (nIndex=32) returned 4 [0102.987] GetSystemMetrics (nIndex=33) returned 4 [0102.987] CloseThemeData () returned 0x0 [0102.987] lstrlenA (lpString="\x92\x07") returned 2 [0102.987] lstrlenA (lpString="\x92\x07") returned 2 [0102.987] lstrlenA (lpString="\x92\x07") returned 2 [0102.987] lstrlenA (lpString="\x92\x07") returned 2 [0102.987] lstrlenA (lpString="\x92\x07") returned 2 [0102.987] lstrlenA (lpString="\x92\x07") returned 2 [0102.987] capGetDriverDescriptionA () returned 0x0 [0102.988] GetLastError () returned 0x0 [0102.988] SetLastError (dwErrCode=0x0) [0102.988] OpenThemeData () returned 0x1fd0000 [0102.990] GetSystemMetrics (nIndex=32) returned 4 [0102.990] GetSystemMetrics (nIndex=33) returned 4 [0102.990] CloseThemeData () returned 0x0 [0102.990] lstrlenA (lpString="\x92\x07") returned 2 [0102.990] lstrlenA (lpString="\x92\x07") returned 2 [0102.990] lstrlenA (lpString="\x92\x07") returned 2 [0102.990] lstrlenA (lpString="\x92\x07") returned 2 [0102.990] lstrlenA (lpString="\x92\x07") returned 2 [0102.990] lstrlenA (lpString="\x92\x07") returned 2 [0102.990] capGetDriverDescriptionA () returned 0x0 [0102.991] GetLastError () returned 0x0 [0102.991] SetLastError (dwErrCode=0x0) [0102.991] OpenThemeData () returned 0x1fe0000 [0102.992] GetSystemMetrics (nIndex=32) returned 4 [0102.992] GetSystemMetrics (nIndex=33) returned 4 [0102.992] CloseThemeData () returned 0x0 [0102.993] lstrlenA (lpString="\x92\x07") returned 2 [0102.993] lstrlenA (lpString="\x92\x07") returned 2 [0102.993] lstrlenA (lpString="\x92\x07") returned 2 [0102.993] lstrlenA (lpString="\x92\x07") returned 2 [0102.993] lstrlenA (lpString="\x92\x07") returned 2 [0102.993] lstrlenA (lpString="\x92\x07") returned 2 [0102.993] capGetDriverDescriptionA () returned 0x0 [0102.993] GetLastError () returned 0x0 [0102.993] SetLastError (dwErrCode=0x0) [0102.993] OpenThemeData () returned 0x1ff0000 [0102.994] GetSystemMetrics (nIndex=32) returned 4 [0102.994] GetSystemMetrics (nIndex=33) returned 4 [0102.994] CloseThemeData () returned 0x0 [0102.994] lstrlenA (lpString="\x92\x07") returned 2 [0102.994] lstrlenA (lpString="\x92\x07") returned 2 [0102.994] lstrlenA (lpString="\x92\x07") returned 2 [0102.994] lstrlenA (lpString="\x92\x07") returned 2 [0102.994] lstrlenA (lpString="\x92\x07") returned 2 [0102.994] lstrlenA (lpString="\x92\x07") returned 2 [0102.995] capGetDriverDescriptionA () returned 0x0 [0102.995] GetLastError () returned 0x0 [0102.995] SetLastError (dwErrCode=0x0) [0102.995] OpenThemeData () returned 0x2000000 [0102.996] GetSystemMetrics (nIndex=32) returned 4 [0102.996] GetSystemMetrics (nIndex=33) returned 4 [0102.996] CloseThemeData () returned 0x0 [0102.996] lstrlenA (lpString="\x92\x07") returned 2 [0102.996] lstrlenA (lpString="\x92\x07") returned 2 [0102.996] lstrlenA (lpString="\x92\x07") returned 2 [0102.996] lstrlenA (lpString="\x92\x07") returned 2 [0102.996] lstrlenA (lpString="\x92\x07") returned 2 [0102.996] lstrlenA (lpString="\x92\x07") returned 2 [0102.996] capGetDriverDescriptionA () returned 0x0 [0102.997] GetLastError () returned 0x0 [0102.997] SetLastError (dwErrCode=0x0) [0102.997] OpenThemeData () returned 0x2010000 [0102.997] GetSystemMetrics (nIndex=32) returned 4 [0102.997] GetSystemMetrics (nIndex=33) returned 4 [0102.998] CloseThemeData () returned 0x0 [0102.998] lstrlenA (lpString="\x92\x07") returned 2 [0102.998] lstrlenA (lpString="\x92\x07") returned 2 [0102.998] lstrlenA (lpString="\x92\x07") returned 2 [0102.998] lstrlenA (lpString="\x92\x07") returned 2 [0102.998] lstrlenA (lpString="\x92\x07") returned 2 [0102.998] lstrlenA (lpString="\x92\x07") returned 2 [0102.998] capGetDriverDescriptionA () returned 0x0 [0102.999] GetLastError () returned 0x0 [0102.999] SetLastError (dwErrCode=0x0) [0102.999] OpenThemeData () returned 0x2020000 [0102.999] GetSystemMetrics (nIndex=32) returned 4 [0102.999] GetSystemMetrics (nIndex=33) returned 4 [0102.999] CloseThemeData () returned 0x0 [0103.000] lstrlenA (lpString="\x92\x07") returned 2 [0103.000] lstrlenA (lpString="\x92\x07") returned 2 [0103.000] lstrlenA (lpString="\x92\x07") returned 2 [0103.000] lstrlenA (lpString="\x92\x07") returned 2 [0103.000] lstrlenA (lpString="\x92\x07") returned 2 [0103.000] lstrlenA (lpString="\x92\x07") returned 2 [0103.000] capGetDriverDescriptionA () returned 0x0 [0103.000] GetLastError () returned 0x0 [0103.000] SetLastError (dwErrCode=0x0) [0103.000] OpenThemeData () returned 0x2030000 [0103.001] GetSystemMetrics (nIndex=32) returned 4 [0103.001] GetSystemMetrics (nIndex=33) returned 4 [0103.001] CloseThemeData () returned 0x0 [0103.001] lstrlenA (lpString="\x92\x07") returned 2 [0103.001] lstrlenA (lpString="\x92\x07") returned 2 [0103.001] lstrlenA (lpString="\x92\x07") returned 2 [0103.001] lstrlenA (lpString="\x92\x07") returned 2 [0103.001] lstrlenA (lpString="\x92\x07") returned 2 [0103.001] lstrlenA (lpString="\x92\x07") returned 2 [0103.002] capGetDriverDescriptionA () returned 0x0 [0103.002] GetLastError () returned 0x0 [0103.002] SetLastError (dwErrCode=0x0) [0103.002] OpenThemeData () returned 0x2040000 [0103.003] GetSystemMetrics (nIndex=32) returned 4 [0103.003] GetSystemMetrics (nIndex=33) returned 4 [0103.003] CloseThemeData () returned 0x0 [0103.003] lstrlenA (lpString="\x92\x07") returned 2 [0103.003] lstrlenA (lpString="\x92\x07") returned 2 [0103.003] lstrlenA (lpString="\x92\x07") returned 2 [0103.003] lstrlenA (lpString="\x92\x07") returned 2 [0103.003] lstrlenA (lpString="\x92\x07") returned 2 [0103.003] lstrlenA (lpString="\x92\x07") returned 2 [0103.003] capGetDriverDescriptionA () returned 0x0 [0103.004] GetLastError () returned 0x0 [0103.004] SetLastError (dwErrCode=0x0) [0103.004] OpenThemeData () returned 0x2050000 [0103.004] GetSystemMetrics (nIndex=32) returned 4 [0103.005] GetSystemMetrics (nIndex=33) returned 4 [0103.005] CloseThemeData () returned 0x0 [0103.005] lstrlenA (lpString="\x92\x07") returned 2 [0103.005] lstrlenA (lpString="\x92\x07") returned 2 [0103.005] lstrlenA (lpString="\x92\x07") returned 2 [0103.005] lstrlenA (lpString="\x92\x07") returned 2 [0103.005] lstrlenA (lpString="\x92\x07") returned 2 [0103.005] lstrlenA (lpString="\x92\x07") returned 2 [0103.005] capGetDriverDescriptionA () returned 0x0 [0103.006] GetLastError () returned 0x0 [0103.006] SetLastError (dwErrCode=0x0) [0103.006] OpenThemeData () returned 0x2060000 [0103.006] GetSystemMetrics (nIndex=32) returned 4 [0103.006] GetSystemMetrics (nIndex=33) returned 4 [0103.006] CloseThemeData () returned 0x0 [0103.007] lstrlenA (lpString="\x92\x07") returned 2 [0103.007] lstrlenA (lpString="\x92\x07") returned 2 [0103.007] lstrlenA (lpString="\x92\x07") returned 2 [0103.007] lstrlenA (lpString="\x92\x07") returned 2 [0103.007] lstrlenA (lpString="\x92\x07") returned 2 [0103.007] lstrlenA (lpString="\x92\x07") returned 2 [0103.007] capGetDriverDescriptionA () returned 0x0 [0103.094] GetLastError () returned 0x0 [0103.094] SetLastError (dwErrCode=0x0) [0103.094] OpenThemeData () returned 0x2070000 [0103.095] GetSystemMetrics (nIndex=32) returned 4 [0103.095] GetSystemMetrics (nIndex=33) returned 4 [0103.095] CloseThemeData () returned 0x0 [0103.095] lstrlenA (lpString="\x92\x07") returned 2 [0103.095] lstrlenA (lpString="\x92\x07") returned 2 [0103.095] lstrlenA (lpString="\x92\x07") returned 2 [0103.095] lstrlenA (lpString="\x92\x07") returned 2 [0103.095] lstrlenA (lpString="\x92\x07") returned 2 [0103.095] lstrlenA (lpString="\x92\x07") returned 2 [0103.095] capGetDriverDescriptionA () returned 0x0 [0103.096] GetLastError () returned 0x0 [0103.096] SetLastError (dwErrCode=0x0) [0103.096] OpenThemeData () returned 0x2080000 [0103.096] GetSystemMetrics (nIndex=32) returned 4 [0103.096] GetSystemMetrics (nIndex=33) returned 4 [0103.096] CloseThemeData () returned 0x0 [0103.097] lstrlenA (lpString="\x92\x07") returned 2 [0103.097] lstrlenA (lpString="\x92\x07") returned 2 [0103.097] lstrlenA (lpString="\x92\x07") returned 2 [0103.097] lstrlenA (lpString="\x92\x07") returned 2 [0103.097] lstrlenA (lpString="\x92\x07") returned 2 [0103.097] lstrlenA (lpString="\x92\x07") returned 2 [0103.097] capGetDriverDescriptionA () returned 0x0 [0103.098] GetLastError () returned 0x0 [0103.098] SetLastError (dwErrCode=0x0) [0103.098] OpenThemeData () returned 0x2090000 [0103.098] GetSystemMetrics (nIndex=32) returned 4 [0103.098] GetSystemMetrics (nIndex=33) returned 4 [0103.098] CloseThemeData () returned 0x0 [0103.098] lstrlenA (lpString="\x92\x07") returned 2 [0103.098] lstrlenA (lpString="\x92\x07") returned 2 [0103.099] lstrlenA (lpString="\x92\x07") returned 2 [0103.099] lstrlenA (lpString="\x92\x07") returned 2 [0103.099] lstrlenA (lpString="\x92\x07") returned 2 [0103.099] lstrlenA (lpString="\x92\x07") returned 2 [0103.099] capGetDriverDescriptionA () returned 0x0 [0103.099] GetLastError () returned 0x0 [0103.099] SetLastError (dwErrCode=0x0) [0103.099] OpenThemeData () returned 0x20a0000 [0103.100] GetSystemMetrics (nIndex=32) returned 4 [0103.100] GetSystemMetrics (nIndex=33) returned 4 [0103.100] CloseThemeData () returned 0x0 [0103.100] lstrlenA (lpString="\x92\x07") returned 2 [0103.100] lstrlenA (lpString="\x92\x07") returned 2 [0103.100] lstrlenA (lpString="\x92\x07") returned 2 [0103.100] lstrlenA (lpString="\x92\x07") returned 2 [0103.100] lstrlenA (lpString="\x92\x07") returned 2 [0103.100] lstrlenA (lpString="\x92\x07") returned 2 [0103.100] capGetDriverDescriptionA () returned 0x0 [0103.101] GetLastError () returned 0x0 [0103.101] SetLastError (dwErrCode=0x0) [0103.101] OpenThemeData () returned 0x20b0000 [0103.102] GetSystemMetrics (nIndex=32) returned 4 [0103.102] GetSystemMetrics (nIndex=33) returned 4 [0103.102] CloseThemeData () returned 0x0 [0103.102] lstrlenA (lpString="\x92\x07") returned 2 [0103.102] lstrlenA (lpString="\x92\x07") returned 2 [0103.102] lstrlenA (lpString="\x92\x07") returned 2 [0103.102] lstrlenA (lpString="\x92\x07") returned 2 [0103.102] lstrlenA (lpString="\x92\x07") returned 2 [0103.102] lstrlenA (lpString="\x92\x07") returned 2 [0103.102] capGetDriverDescriptionA () returned 0x0 [0103.103] GetLastError () returned 0x0 [0103.103] SetLastError (dwErrCode=0x0) [0103.103] OpenThemeData () returned 0x20c0000 [0103.103] GetSystemMetrics (nIndex=32) returned 4 [0103.103] GetSystemMetrics (nIndex=33) returned 4 [0103.103] CloseThemeData () returned 0x0 [0103.104] lstrlenA (lpString="\x92\x07") returned 2 [0103.104] lstrlenA (lpString="\x92\x07") returned 2 [0103.104] lstrlenA (lpString="\x92\x07") returned 2 [0103.104] lstrlenA (lpString="\x92\x07") returned 2 [0103.104] lstrlenA (lpString="\x92\x07") returned 2 [0103.104] lstrlenA (lpString="\x92\x07") returned 2 [0103.104] capGetDriverDescriptionA () returned 0x0 [0103.105] GetLastError () returned 0x0 [0103.105] SetLastError (dwErrCode=0x0) [0103.105] OpenThemeData () returned 0x20d0000 [0103.105] GetSystemMetrics (nIndex=32) returned 4 [0103.105] GetSystemMetrics (nIndex=33) returned 4 [0103.105] CloseThemeData () returned 0x0 [0103.105] lstrlenA (lpString="\x92\x07") returned 2 [0103.105] lstrlenA (lpString="\x92\x07") returned 2 [0103.105] lstrlenA (lpString="\x92\x07") returned 2 [0103.106] lstrlenA (lpString="\x92\x07") returned 2 [0103.106] lstrlenA (lpString="\x92\x07") returned 2 [0103.106] lstrlenA (lpString="\x92\x07") returned 2 [0103.106] capGetDriverDescriptionA () returned 0x0 [0103.106] GetLastError () returned 0x0 [0103.106] SetLastError (dwErrCode=0x0) [0103.106] OpenThemeData () returned 0x20e0000 [0103.107] GetSystemMetrics (nIndex=32) returned 4 [0103.107] GetSystemMetrics (nIndex=33) returned 4 [0103.107] CloseThemeData () returned 0x0 [0103.107] lstrlenA (lpString="\x92\x07") returned 2 [0103.107] lstrlenA (lpString="\x92\x07") returned 2 [0103.107] lstrlenA (lpString="\x92\x07") returned 2 [0103.107] lstrlenA (lpString="\x92\x07") returned 2 [0103.107] lstrlenA (lpString="\x92\x07") returned 2 [0103.107] lstrlenA (lpString="\x92\x07") returned 2 [0103.107] capGetDriverDescriptionA () returned 0x0 [0103.108] GetLastError () returned 0x0 [0103.108] SetLastError (dwErrCode=0x0) [0103.108] OpenThemeData () returned 0x20f0000 [0103.108] GetSystemMetrics (nIndex=32) returned 4 [0103.108] GetSystemMetrics (nIndex=33) returned 4 [0103.108] CloseThemeData () returned 0x0 [0103.109] lstrlenA (lpString="\x92\x07") returned 2 [0103.109] lstrlenA (lpString="\x92\x07") returned 2 [0103.109] lstrlenA (lpString="\x92\x07") returned 2 [0103.109] lstrlenA (lpString="\x92\x07") returned 2 [0103.109] lstrlenA (lpString="\x92\x07") returned 2 [0103.109] lstrlenA (lpString="\x92\x07") returned 2 [0103.109] capGetDriverDescriptionA () returned 0x0 [0103.110] GetLastError () returned 0x0 [0103.110] SetLastError (dwErrCode=0x0) [0103.110] OpenThemeData () returned 0x2100000 [0103.110] GetSystemMetrics (nIndex=32) returned 4 [0103.110] GetSystemMetrics (nIndex=33) returned 4 [0103.110] CloseThemeData () returned 0x0 [0103.110] lstrlenA (lpString="\x92\x07") returned 2 [0103.110] lstrlenA (lpString="\x92\x07") returned 2 [0103.111] lstrlenA (lpString="\x92\x07") returned 2 [0103.111] lstrlenA (lpString="\x92\x07") returned 2 [0103.111] lstrlenA (lpString="\x92\x07") returned 2 [0103.111] lstrlenA (lpString="\x92\x07") returned 2 [0103.111] capGetDriverDescriptionA () returned 0x0 [0103.111] GetLastError () returned 0x0 [0103.111] SetLastError (dwErrCode=0x0) [0103.111] OpenThemeData () returned 0x2110000 [0103.112] GetSystemMetrics (nIndex=32) returned 4 [0103.112] GetSystemMetrics (nIndex=33) returned 4 [0103.112] CloseThemeData () returned 0x0 [0103.112] lstrlenA (lpString="\x92\x07") returned 2 [0103.112] lstrlenA (lpString="\x92\x07") returned 2 [0103.112] lstrlenA (lpString="\x92\x07") returned 2 [0103.112] lstrlenA (lpString="\x92\x07") returned 2 [0103.112] lstrlenA (lpString="\x92\x07") returned 2 [0103.112] lstrlenA (lpString="\x92\x07") returned 2 [0103.112] capGetDriverDescriptionA () returned 0x0 [0103.113] GetLastError () returned 0x0 [0103.113] SetLastError (dwErrCode=0x0) [0103.113] OpenThemeData () returned 0x2120000 [0103.113] GetSystemMetrics (nIndex=32) returned 4 [0103.113] GetSystemMetrics (nIndex=33) returned 4 [0103.113] CloseThemeData () returned 0x0 [0103.114] lstrlenA (lpString="\x92\x07") returned 2 [0103.114] lstrlenA (lpString="\x92\x07") returned 2 [0103.114] lstrlenA (lpString="\x92\x07") returned 2 [0103.114] lstrlenA (lpString="\x92\x07") returned 2 [0103.114] lstrlenA (lpString="\x92\x07") returned 2 [0103.114] lstrlenA (lpString="\x92\x07") returned 2 [0103.114] capGetDriverDescriptionA () returned 0x0 [0103.115] GetLastError () returned 0x0 [0103.115] SetLastError (dwErrCode=0x0) [0103.115] OpenThemeData () returned 0x2130000 [0103.116] GetSystemMetrics (nIndex=32) returned 4 [0103.116] GetSystemMetrics (nIndex=33) returned 4 [0103.116] CloseThemeData () returned 0x0 [0103.223] lstrlenA (lpString="\x92\x07") returned 2 [0103.223] lstrlenA (lpString="\x92\x07") returned 2 [0103.223] lstrlenA (lpString="\x92\x07") returned 2 [0103.223] lstrlenA (lpString="\x92\x07") returned 2 [0103.223] lstrlenA (lpString="\x92\x07") returned 2 [0103.223] lstrlenA (lpString="\x92\x07") returned 2 [0103.223] capGetDriverDescriptionA () returned 0x0 [0103.224] GetLastError () returned 0x0 [0103.224] SetLastError (dwErrCode=0x0) [0103.224] OpenThemeData () returned 0x2140000 [0103.224] GetSystemMetrics (nIndex=32) returned 4 [0103.224] GetSystemMetrics (nIndex=33) returned 4 [0103.224] CloseThemeData () returned 0x0 [0103.225] lstrlenA (lpString="\x92\x07") returned 2 [0103.225] lstrlenA (lpString="\x92\x07") returned 2 [0103.225] lstrlenA (lpString="\x92\x07") returned 2 [0103.225] lstrlenA (lpString="\x92\x07") returned 2 [0103.225] lstrlenA (lpString="\x92\x07") returned 2 [0103.225] lstrlenA (lpString="\x92\x07") returned 2 [0103.225] capGetDriverDescriptionA () returned 0x0 [0103.225] GetLastError () returned 0x0 [0103.225] SetLastError (dwErrCode=0x0) [0103.225] OpenThemeData () returned 0x2150000 [0103.226] GetSystemMetrics (nIndex=32) returned 4 [0103.226] GetSystemMetrics (nIndex=33) returned 4 [0103.226] CloseThemeData () returned 0x0 [0103.226] lstrlenA (lpString="\x92\x07") returned 2 [0103.226] lstrlenA (lpString="\x92\x07") returned 2 [0103.227] lstrlenA (lpString="\x92\x07") returned 2 [0103.227] lstrlenA (lpString="\x92\x07") returned 2 [0103.227] lstrlenA (lpString="\x92\x07") returned 2 [0103.227] lstrlenA (lpString="\x92\x07") returned 2 [0103.227] capGetDriverDescriptionA () returned 0x0 [0103.227] GetLastError () returned 0x0 [0103.227] SetLastError (dwErrCode=0x0) [0103.227] OpenThemeData () returned 0x2160000 [0103.228] GetSystemMetrics (nIndex=32) returned 4 [0103.228] GetSystemMetrics (nIndex=33) returned 4 [0103.228] CloseThemeData () returned 0x0 [0103.228] lstrlenA (lpString="\x92\x07") returned 2 [0103.228] lstrlenA (lpString="\x92\x07") returned 2 [0103.228] lstrlenA (lpString="\x92\x07") returned 2 [0103.228] lstrlenA (lpString="\x92\x07") returned 2 [0103.228] lstrlenA (lpString="\x92\x07") returned 2 [0103.228] lstrlenA (lpString="\x92\x07") returned 2 [0103.228] capGetDriverDescriptionA () returned 0x0 [0103.229] GetLastError () returned 0x0 [0103.229] SetLastError (dwErrCode=0x0) [0103.229] OpenThemeData () returned 0x2170000 [0103.230] GetSystemMetrics (nIndex=32) returned 4 [0103.230] GetSystemMetrics (nIndex=33) returned 4 [0103.230] CloseThemeData () returned 0x0 [0103.230] lstrlenA (lpString="\x92\x07") returned 2 [0103.230] lstrlenA (lpString="\x92\x07") returned 2 [0103.230] lstrlenA (lpString="\x92\x07") returned 2 [0103.230] lstrlenA (lpString="\x92\x07") returned 2 [0103.230] lstrlenA (lpString="\x92\x07") returned 2 [0103.230] lstrlenA (lpString="\x92\x07") returned 2 [0103.230] capGetDriverDescriptionA () returned 0x0 [0103.231] GetLastError () returned 0x0 [0103.231] SetLastError (dwErrCode=0x0) [0103.231] OpenThemeData () returned 0x2180000 [0103.231] GetSystemMetrics (nIndex=32) returned 4 [0103.231] GetSystemMetrics (nIndex=33) returned 4 [0103.231] CloseThemeData () returned 0x0 [0103.232] lstrlenA (lpString="\x92\x07") returned 2 [0103.232] lstrlenA (lpString="\x92\x07") returned 2 [0103.232] lstrlenA (lpString="\x92\x07") returned 2 [0103.232] lstrlenA (lpString="\x92\x07") returned 2 [0103.232] lstrlenA (lpString="\x92\x07") returned 2 [0103.232] lstrlenA (lpString="\x92\x07") returned 2 [0103.232] capGetDriverDescriptionA () returned 0x0 [0103.233] GetLastError () returned 0x0 [0103.233] SetLastError (dwErrCode=0x0) [0103.233] OpenThemeData () returned 0x2190000 [0103.233] GetSystemMetrics (nIndex=32) returned 4 [0103.233] GetSystemMetrics (nIndex=33) returned 4 [0103.233] CloseThemeData () returned 0x0 [0103.234] lstrlenA (lpString="\x92\x07") returned 2 [0103.234] lstrlenA (lpString="\x92\x07") returned 2 [0103.234] lstrlenA (lpString="\x92\x07") returned 2 [0103.234] lstrlenA (lpString="\x92\x07") returned 2 [0103.234] lstrlenA (lpString="\x92\x07") returned 2 [0103.234] lstrlenA (lpString="\x92\x07") returned 2 [0103.234] capGetDriverDescriptionA () returned 0x0 [0103.234] GetLastError () returned 0x0 [0103.234] SetLastError (dwErrCode=0x0) [0103.234] OpenThemeData () returned 0x21a0000 [0103.235] GetSystemMetrics (nIndex=32) returned 4 [0103.235] GetSystemMetrics (nIndex=33) returned 4 [0103.235] CloseThemeData () returned 0x0 [0103.235] lstrlenA (lpString="\x92\x07") returned 2 [0103.235] lstrlenA (lpString="\x92\x07") returned 2 [0103.235] lstrlenA (lpString="\x92\x07") returned 2 [0103.235] lstrlenA (lpString="\x92\x07") returned 2 [0103.235] lstrlenA (lpString="\x92\x07") returned 2 [0103.235] lstrlenA (lpString="\x92\x07") returned 2 [0103.236] capGetDriverDescriptionA () returned 0x0 [0103.236] GetLastError () returned 0x0 [0103.236] SetLastError (dwErrCode=0x0) [0103.236] OpenThemeData () returned 0x21b0000 [0103.237] GetSystemMetrics (nIndex=32) returned 4 [0103.237] GetSystemMetrics (nIndex=33) returned 4 [0103.237] CloseThemeData () returned 0x0 [0103.237] lstrlenA (lpString="\x92\x07") returned 2 [0103.237] lstrlenA (lpString="\x92\x07") returned 2 [0103.237] lstrlenA (lpString="\x92\x07") returned 2 [0103.237] lstrlenA (lpString="\x92\x07") returned 2 [0103.237] lstrlenA (lpString="\x92\x07") returned 2 [0103.237] lstrlenA (lpString="\x92\x07") returned 2 [0103.237] capGetDriverDescriptionA () returned 0x0 [0103.238] GetLastError () returned 0x0 [0103.238] SetLastError (dwErrCode=0x0) [0103.238] OpenThemeData () returned 0x21c0000 [0103.238] GetSystemMetrics (nIndex=32) returned 4 [0103.238] GetSystemMetrics (nIndex=33) returned 4 [0103.238] CloseThemeData () returned 0x0 [0103.239] lstrlenA (lpString="\x92\x07") returned 2 [0103.239] lstrlenA (lpString="\x92\x07") returned 2 [0103.239] lstrlenA (lpString="\x92\x07") returned 2 [0103.239] lstrlenA (lpString="\x92\x07") returned 2 [0103.239] lstrlenA (lpString="\x92\x07") returned 2 [0103.239] lstrlenA (lpString="\x92\x07") returned 2 [0103.239] capGetDriverDescriptionA () returned 0x0 [0103.240] GetLastError () returned 0x0 [0103.240] SetLastError (dwErrCode=0x0) [0103.240] OpenThemeData () returned 0x21d0000 [0103.240] GetSystemMetrics (nIndex=32) returned 4 [0103.240] GetSystemMetrics (nIndex=33) returned 4 [0103.240] CloseThemeData () returned 0x0 [0103.240] lstrlenA (lpString="\x92\x07") returned 2 [0103.241] lstrlenA (lpString="\x92\x07") returned 2 [0103.241] lstrlenA (lpString="\x92\x07") returned 2 [0103.241] lstrlenA (lpString="\x92\x07") returned 2 [0103.241] lstrlenA (lpString="\x92\x07") returned 2 [0103.241] lstrlenA (lpString="\x92\x07") returned 2 [0103.343] capGetDriverDescriptionA () returned 0x0 [0103.344] GetLastError () returned 0x0 [0103.344] SetLastError (dwErrCode=0x0) [0103.344] OpenThemeData () returned 0x21e0000 [0103.345] GetSystemMetrics (nIndex=32) returned 4 [0103.345] GetSystemMetrics (nIndex=33) returned 4 [0103.345] CloseThemeData () returned 0x0 [0103.346] lstrlenA (lpString="\x92\x07") returned 2 [0103.346] lstrlenA (lpString="\x92\x07") returned 2 [0103.346] lstrlenA (lpString="\x92\x07") returned 2 [0103.346] lstrlenA (lpString="\x92\x07") returned 2 [0103.346] lstrlenA (lpString="\x92\x07") returned 2 [0103.346] lstrlenA (lpString="\x92\x07") returned 2 [0103.346] capGetDriverDescriptionA () returned 0x0 [0103.347] GetLastError () returned 0x0 [0103.347] SetLastError (dwErrCode=0x0) [0103.347] OpenThemeData () returned 0x21f0000 [0103.348] GetSystemMetrics (nIndex=32) returned 4 [0103.348] GetSystemMetrics (nIndex=33) returned 4 [0103.348] CloseThemeData () returned 0x0 [0103.348] lstrlenA (lpString="\x92\x07") returned 2 [0103.348] lstrlenA (lpString="\x92\x07") returned 2 [0103.348] lstrlenA (lpString="\x92\x07") returned 2 [0103.348] capGetDriverDescriptionA () returned 0x0 [0103.349] GetLastError () returned 0x0 [0103.349] SetLastError (dwErrCode=0x0) [0103.349] OpenThemeData () returned 0x2200000 [0103.350] GetSystemMetrics (nIndex=32) returned 4 [0103.350] GetSystemMetrics (nIndex=33) returned 4 [0103.350] CloseThemeData () returned 0x0 [0103.350] capGetDriverDescriptionA () returned 0x0 [0103.352] GetLastError () returned 0x0 [0103.352] SetLastError (dwErrCode=0x0) [0103.352] OpenThemeData () returned 0x2210000 [0103.352] GetSystemMetrics (nIndex=32) returned 4 [0103.352] GetSystemMetrics (nIndex=33) returned 4 [0103.352] CloseThemeData () returned 0x0 [0103.353] capGetDriverDescriptionA () returned 0x0 [0103.353] GetLastError () returned 0x0 [0103.353] SetLastError (dwErrCode=0x0) [0103.353] OpenThemeData () returned 0x2220000 [0103.354] GetSystemMetrics (nIndex=32) returned 4 [0103.354] GetSystemMetrics (nIndex=33) returned 4 [0103.354] CloseThemeData () returned 0x0 [0103.354] capGetDriverDescriptionA () returned 0x0 [0103.355] GetLastError () returned 0x0 [0103.355] SetLastError (dwErrCode=0x0) [0103.355] OpenThemeData () returned 0x2230000 [0103.355] GetSystemMetrics (nIndex=32) returned 4 [0103.355] GetSystemMetrics (nIndex=33) returned 4 [0103.355] CloseThemeData () returned 0x0 [0103.356] capGetDriverDescriptionA () returned 0x0 [0103.356] GetLastError () returned 0x0 [0103.356] SetLastError (dwErrCode=0x0) [0103.356] OpenThemeData () returned 0x2240000 [0103.357] GetSystemMetrics (nIndex=32) returned 4 [0103.357] GetSystemMetrics (nIndex=33) returned 4 [0103.357] CloseThemeData () returned 0x0 [0103.357] capGetDriverDescriptionA () returned 0x0 [0103.358] GetLastError () returned 0x0 [0103.358] SetLastError (dwErrCode=0x0) [0103.358] OpenThemeData () returned 0x2250000 [0103.358] GetSystemMetrics (nIndex=32) returned 4 [0103.358] GetSystemMetrics (nIndex=33) returned 4 [0103.358] CloseThemeData () returned 0x0 [0103.359] capGetDriverDescriptionA () returned 0x0 [0103.359] GetLastError () returned 0x0 [0103.359] SetLastError (dwErrCode=0x0) [0103.359] OpenThemeData () returned 0x2260000 [0103.360] GetSystemMetrics (nIndex=32) returned 4 [0103.360] GetSystemMetrics (nIndex=33) returned 4 [0103.360] CloseThemeData () returned 0x0 [0103.360] capGetDriverDescriptionA () returned 0x0 [0103.361] GetLastError () returned 0x0 [0103.361] SetLastError (dwErrCode=0x0) [0103.361] OpenThemeData () returned 0x2270000 [0103.361] GetSystemMetrics (nIndex=32) returned 4 [0103.361] GetSystemMetrics (nIndex=33) returned 4 [0103.361] CloseThemeData () returned 0x0 [0103.362] capGetDriverDescriptionA () returned 0x0 [0103.362] GetLastError () returned 0x0 [0103.362] SetLastError (dwErrCode=0x0) [0103.362] OpenThemeData () returned 0x2280000 [0103.363] GetSystemMetrics (nIndex=32) returned 4 [0103.363] GetSystemMetrics (nIndex=33) returned 4 [0103.363] CloseThemeData () returned 0x0 [0103.363] capGetDriverDescriptionA () returned 0x0 [0103.364] GetLastError () returned 0x0 [0103.364] SetLastError (dwErrCode=0x0) [0103.364] OpenThemeData () returned 0x2290000 [0103.364] GetSystemMetrics (nIndex=32) returned 4 [0103.364] GetSystemMetrics (nIndex=33) returned 4 [0103.365] CloseThemeData () returned 0x0 [0103.365] capGetDriverDescriptionA () returned 0x0 [0103.365] GetLastError () returned 0x0 [0103.365] SetLastError (dwErrCode=0x0) [0103.365] OpenThemeData () returned 0x22a0000 [0103.366] GetSystemMetrics (nIndex=32) returned 4 [0103.366] GetSystemMetrics (nIndex=33) returned 4 [0103.366] CloseThemeData () returned 0x0 [0103.367] capGetDriverDescriptionA () returned 0x0 [0103.368] GetLastError () returned 0x0 [0103.368] SetLastError (dwErrCode=0x0) [0103.368] OpenThemeData () returned 0x22b0000 [0103.368] GetSystemMetrics (nIndex=32) returned 4 [0103.368] GetSystemMetrics (nIndex=33) returned 4 [0103.368] CloseThemeData () returned 0x0 [0103.369] capGetDriverDescriptionA () returned 0x0 [0103.369] GetLastError () returned 0x0 [0103.369] SetLastError (dwErrCode=0x0) [0103.369] OpenThemeData () returned 0x22c0000 [0103.370] GetSystemMetrics (nIndex=32) returned 4 [0103.370] GetSystemMetrics (nIndex=33) returned 4 [0103.370] CloseThemeData () returned 0x0 [0103.370] capGetDriverDescriptionA () returned 0x0 [0103.371] GetLastError () returned 0x0 [0103.371] SetLastError (dwErrCode=0x0) [0103.371] OpenThemeData () returned 0x22d0000 [0103.371] GetSystemMetrics (nIndex=32) returned 4 [0103.371] GetSystemMetrics (nIndex=33) returned 4 [0103.371] CloseThemeData () returned 0x0 [0103.372] capGetDriverDescriptionA () returned 0x0 [0103.372] GetLastError () returned 0x0 [0103.372] SetLastError (dwErrCode=0x0) [0103.372] OpenThemeData () returned 0x22e0000 [0103.373] GetSystemMetrics (nIndex=32) returned 4 [0103.373] GetSystemMetrics (nIndex=33) returned 4 [0103.373] CloseThemeData () returned 0x0 [0103.373] capGetDriverDescriptionA () returned 0x0 [0103.374] GetLastError () returned 0x0 [0103.374] SetLastError (dwErrCode=0x0) [0103.374] OpenThemeData () returned 0x22f0000 [0103.374] GetSystemMetrics (nIndex=32) returned 4 [0103.374] GetSystemMetrics (nIndex=33) returned 4 [0103.374] CloseThemeData () returned 0x0 [0103.375] capGetDriverDescriptionA () returned 0x0 [0103.375] GetLastError () returned 0x0 [0103.375] SetLastError (dwErrCode=0x0) [0103.375] OpenThemeData () returned 0x2300000 [0103.376] GetSystemMetrics (nIndex=32) returned 4 [0103.376] GetSystemMetrics (nIndex=33) returned 4 [0103.376] CloseThemeData () returned 0x0 [0103.376] capGetDriverDescriptionA () returned 0x0 [0103.377] GetLastError () returned 0x0 [0103.377] SetLastError (dwErrCode=0x0) [0103.377] OpenThemeData () returned 0x2310000 [0103.377] GetSystemMetrics (nIndex=32) returned 4 [0103.377] GetSystemMetrics (nIndex=33) returned 4 [0103.377] CloseThemeData () returned 0x0 [0103.378] capGetDriverDescriptionA () returned 0x0 [0103.378] GetLastError () returned 0x0 [0103.378] SetLastError (dwErrCode=0x0) [0103.378] OpenThemeData () returned 0x2320000 [0103.379] GetSystemMetrics (nIndex=32) returned 4 [0103.379] GetSystemMetrics (nIndex=33) returned 4 [0103.379] CloseThemeData () returned 0x0 [0103.379] capGetDriverDescriptionA () returned 0x0 [0103.380] GetLastError () returned 0x0 [0103.380] SetLastError (dwErrCode=0x0) [0103.380] OpenThemeData () returned 0x2330000 [0103.380] GetSystemMetrics (nIndex=32) returned 4 [0103.380] GetSystemMetrics (nIndex=33) returned 4 [0103.380] CloseThemeData () returned 0x0 [0103.381] capGetDriverDescriptionA () returned 0x0 [0103.381] GetLastError () returned 0x0 [0103.381] SetLastError (dwErrCode=0x0) [0103.381] OpenThemeData () returned 0x2340000 [0103.474] GetSystemMetrics (nIndex=32) returned 4 [0103.474] GetSystemMetrics (nIndex=33) returned 4 [0103.474] CloseThemeData () returned 0x0 [0103.474] capGetDriverDescriptionA () returned 0x0 [0103.475] GetLastError () returned 0x0 [0103.475] SetLastError (dwErrCode=0x0) [0103.475] OpenThemeData () returned 0x2350000 [0103.476] GetSystemMetrics (nIndex=32) returned 4 [0103.476] GetSystemMetrics (nIndex=33) returned 4 [0103.476] CloseThemeData () returned 0x0 [0103.476] lstrlenA (lpString="\x92\x07") returned 2 [0103.476] lstrlenA (lpString="\x92\x07") returned 2 [0103.476] lstrlenA (lpString="\x92\x07") returned 2 [0103.476] lstrlenA (lpString="\x92\x07") returned 2 [0103.476] lstrlenA (lpString="\x92\x07") returned 2 [0103.476] lstrlenA (lpString="\x92\x07") returned 2 [0103.476] capGetDriverDescriptionA () returned 0x0 [0103.477] GetLastError () returned 0x0 [0103.477] SetLastError (dwErrCode=0x0) [0103.477] OpenThemeData () returned 0x2360000 [0103.478] GetSystemMetrics (nIndex=32) returned 4 [0103.478] GetSystemMetrics (nIndex=33) returned 4 [0103.478] CloseThemeData () returned 0x0 [0103.478] lstrlenA (lpString="\x92\x07") returned 2 [0103.478] lstrlenA (lpString="\x92\x07") returned 2 [0103.478] lstrlenA (lpString="\x92\x07") returned 2 [0103.478] lstrlenA (lpString="\x92\x07") returned 2 [0103.478] lstrlenA (lpString="\x92\x07") returned 2 [0103.478] lstrlenA (lpString="\x92\x07") returned 2 [0103.478] capGetDriverDescriptionA () returned 0x0 [0103.479] GetLastError () returned 0x0 [0103.479] SetLastError (dwErrCode=0x0) [0103.479] OpenThemeData () returned 0x2370000 [0103.479] GetSystemMetrics (nIndex=32) returned 4 [0103.479] GetSystemMetrics (nIndex=33) returned 4 [0103.479] CloseThemeData () returned 0x0 [0103.480] lstrlenA (lpString="\x92\x07") returned 2 [0103.480] lstrlenA (lpString="\x92\x07") returned 2 [0103.480] lstrlenA (lpString="\x92\x07") returned 2 [0103.480] lstrlenA (lpString="\x92\x07") returned 2 [0103.480] lstrlenA (lpString="\x92\x07") returned 2 [0103.480] lstrlenA (lpString="\x92\x07") returned 2 [0103.480] capGetDriverDescriptionA () returned 0x0 [0103.481] GetLastError () returned 0x0 [0103.481] SetLastError (dwErrCode=0x0) [0103.481] OpenThemeData () returned 0x2380000 [0103.481] GetSystemMetrics (nIndex=32) returned 4 [0103.481] GetSystemMetrics (nIndex=33) returned 4 [0103.481] CloseThemeData () returned 0x0 [0103.481] lstrlenA (lpString="\x92\x07") returned 2 [0103.481] lstrlenA (lpString="\x92\x07") returned 2 [0103.482] lstrlenA (lpString="\x92\x07") returned 2 [0103.482] lstrlenA (lpString="\x92\x07") returned 2 [0103.482] lstrlenA (lpString="\x92\x07") returned 2 [0103.482] lstrlenA (lpString="\x92\x07") returned 2 [0103.482] capGetDriverDescriptionA () returned 0x0 [0103.482] GetLastError () returned 0x0 [0103.482] SetLastError (dwErrCode=0x0) [0103.482] OpenThemeData () returned 0x2390000 [0103.483] GetSystemMetrics (nIndex=32) returned 4 [0103.483] GetSystemMetrics (nIndex=33) returned 4 [0103.483] CloseThemeData () returned 0x0 [0103.483] lstrlenA (lpString="\x92\x07") returned 2 [0103.483] lstrlenA (lpString="\x92\x07") returned 2 [0103.483] lstrlenA (lpString="\x92\x07") returned 2 [0103.483] lstrlenA (lpString="\x92\x07") returned 2 [0103.483] lstrlenA (lpString="\x92\x07") returned 2 [0103.483] lstrlenA (lpString="\x92\x07") returned 2 [0103.483] capGetDriverDescriptionA () returned 0x0 [0103.484] GetLastError () returned 0x0 [0103.484] SetLastError (dwErrCode=0x0) [0103.484] OpenThemeData () returned 0x23a0000 [0103.485] GetSystemMetrics (nIndex=32) returned 4 [0103.485] GetSystemMetrics (nIndex=33) returned 4 [0103.485] CloseThemeData () returned 0x0 [0103.485] lstrlenA (lpString="\x92\x07") returned 2 [0103.485] lstrlenA (lpString="\x92\x07") returned 2 [0103.485] lstrlenA (lpString="\x92\x07") returned 2 [0103.485] lstrlenA (lpString="\x92\x07") returned 2 [0103.485] lstrlenA (lpString="\x92\x07") returned 2 [0103.485] lstrlenA (lpString="\x92\x07") returned 2 [0103.485] capGetDriverDescriptionA () returned 0x0 [0103.486] GetLastError () returned 0x0 [0103.486] SetLastError (dwErrCode=0x0) [0103.486] OpenThemeData () returned 0x23b0000 [0103.486] GetSystemMetrics (nIndex=32) returned 4 [0103.486] GetSystemMetrics (nIndex=33) returned 4 [0103.486] CloseThemeData () returned 0x0 [0103.487] lstrlenA (lpString="\x92\x07") returned 2 [0103.487] lstrlenA (lpString="\x92\x07") returned 2 [0103.487] lstrlenA (lpString="\x92\x07") returned 2 [0103.487] lstrlenA (lpString="\x92\x07") returned 2 [0103.487] lstrlenA (lpString="\x92\x07") returned 2 [0103.487] lstrlenA (lpString="\x92\x07") returned 2 [0103.487] capGetDriverDescriptionA () returned 0x0 [0103.487] GetLastError () returned 0x0 [0103.487] SetLastError (dwErrCode=0x0) [0103.487] OpenThemeData () returned 0x23c0000 [0103.488] GetSystemMetrics (nIndex=32) returned 4 [0103.488] GetSystemMetrics (nIndex=33) returned 4 [0103.488] CloseThemeData () returned 0x0 [0103.488] lstrlenA (lpString="\x92\x07") returned 2 [0103.488] lstrlenA (lpString="\x92\x07") returned 2 [0103.488] lstrlenA (lpString="\x92\x07") returned 2 [0103.488] lstrlenA (lpString="\x92\x07") returned 2 [0103.488] lstrlenA (lpString="\x92\x07") returned 2 [0103.488] lstrlenA (lpString="\x92\x07") returned 2 [0103.489] capGetDriverDescriptionA () returned 0x0 [0103.489] GetLastError () returned 0x0 [0103.489] SetLastError (dwErrCode=0x0) [0103.489] OpenThemeData () returned 0x23d0000 [0103.490] GetSystemMetrics (nIndex=32) returned 4 [0103.490] GetSystemMetrics (nIndex=33) returned 4 [0103.490] CloseThemeData () returned 0x0 [0103.490] lstrlenA (lpString="\x92\x07") returned 2 [0103.490] lstrlenA (lpString="\x92\x07") returned 2 [0103.490] lstrlenA (lpString="\x92\x07") returned 2 [0103.490] lstrlenA (lpString="\x92\x07") returned 2 [0103.490] lstrlenA (lpString="\x92\x07") returned 2 [0103.490] lstrlenA (lpString="\x92\x07") returned 2 [0103.490] capGetDriverDescriptionA () returned 0x0 [0103.491] GetLastError () returned 0x0 [0103.491] SetLastError (dwErrCode=0x0) [0103.491] OpenThemeData () returned 0x23e0000 [0103.492] GetSystemMetrics (nIndex=32) returned 4 [0103.492] GetSystemMetrics (nIndex=33) returned 4 [0103.492] CloseThemeData () returned 0x0 [0103.492] lstrlenA (lpString="\x92\x07") returned 2 [0103.492] lstrlenA (lpString="\x92\x07") returned 2 [0103.492] lstrlenA (lpString="\x92\x07") returned 2 [0103.492] lstrlenA (lpString="\x92\x07") returned 2 [0103.492] lstrlenA (lpString="\x92\x07") returned 2 [0103.492] lstrlenA (lpString="\x92\x07") returned 2 [0103.492] capGetDriverDescriptionA () returned 0x0 [0103.493] GetLastError () returned 0x0 [0103.493] SetLastError (dwErrCode=0x0) [0103.493] OpenThemeData () returned 0x23f0000 [0103.493] GetSystemMetrics (nIndex=32) returned 4 [0103.493] GetSystemMetrics (nIndex=33) returned 4 [0103.493] CloseThemeData () returned 0x0 [0103.494] lstrlenA (lpString="\x92\x07") returned 2 [0103.494] lstrlenA (lpString="\x92\x07") returned 2 [0103.494] lstrlenA (lpString="\x92\x07") returned 2 [0103.494] lstrlenA (lpString="\x92\x07") returned 2 [0103.494] lstrlenA (lpString="\x92\x07") returned 2 [0103.494] lstrlenA (lpString="\x92\x07") returned 2 [0103.494] capGetDriverDescriptionA () returned 0x0 [0103.494] GetLastError () returned 0x0 [0103.495] SetLastError (dwErrCode=0x0) [0103.495] OpenThemeData () returned 0x2400000 [0103.495] GetSystemMetrics (nIndex=32) returned 4 [0103.495] GetSystemMetrics (nIndex=33) returned 4 [0103.495] CloseThemeData () returned 0x0 [0103.496] lstrlenA (lpString="\x92\x07") returned 2 [0103.496] lstrlenA (lpString="\x92\x07") returned 2 [0103.496] lstrlenA (lpString="\x92\x07") returned 2 [0103.496] lstrlenA (lpString="\x92\x07") returned 2 [0103.496] lstrlenA (lpString="\x92\x07") returned 2 [0103.496] lstrlenA (lpString="\x92\x07") returned 2 [0103.496] capGetDriverDescriptionA () returned 0x0 [0103.496] GetLastError () returned 0x0 [0103.496] SetLastError (dwErrCode=0x0) [0103.496] OpenThemeData () returned 0x2410000 [0103.497] GetSystemMetrics (nIndex=32) returned 4 [0103.497] GetSystemMetrics (nIndex=33) returned 4 [0103.497] CloseThemeData () returned 0x0 [0103.497] lstrlenA (lpString="\x92\x07") returned 2 [0103.497] lstrlenA (lpString="\x92\x07") returned 2 [0103.497] lstrlenA (lpString="\x92\x07") returned 2 [0103.497] lstrlenA (lpString="\x92\x07") returned 2 [0103.497] lstrlenA (lpString="\x92\x07") returned 2 [0103.497] lstrlenA (lpString="\x92\x07") returned 2 [0103.497] capGetDriverDescriptionA () returned 0x0 [0103.498] GetLastError () returned 0x0 [0103.498] SetLastError (dwErrCode=0x0) [0103.498] OpenThemeData () returned 0x2420000 [0103.499] GetSystemMetrics (nIndex=32) returned 4 [0103.499] GetSystemMetrics (nIndex=33) returned 4 [0103.499] CloseThemeData () returned 0x0 [0103.499] lstrlenA (lpString="\x92\x07") returned 2 [0103.499] lstrlenA (lpString="\x92\x07") returned 2 [0103.499] lstrlenA (lpString="\x92\x07") returned 2 [0103.499] lstrlenA (lpString="\x92\x07") returned 2 [0103.499] lstrlenA (lpString="\x92\x07") returned 2 [0103.499] lstrlenA (lpString="\x92\x07") returned 2 [0103.499] capGetDriverDescriptionA () returned 0x0 [0103.500] GetLastError () returned 0x0 [0103.500] SetLastError (dwErrCode=0x0) [0103.500] OpenThemeData () returned 0x2430000 [0103.500] GetSystemMetrics (nIndex=32) returned 4 [0103.500] GetSystemMetrics (nIndex=33) returned 4 [0103.500] CloseThemeData () returned 0x0 [0103.501] lstrlenA (lpString="\x92\x07") returned 2 [0103.501] lstrlenA (lpString="\x92\x07") returned 2 [0103.501] lstrlenA (lpString="\x92\x07") returned 2 [0103.501] lstrlenA (lpString="\x92\x07") returned 2 [0103.501] lstrlenA (lpString="\x92\x07") returned 2 [0103.501] lstrlenA (lpString="\x92\x07") returned 2 [0103.501] capGetDriverDescriptionA () returned 0x0 [0103.502] GetLastError () returned 0x0 [0103.502] SetLastError (dwErrCode=0x0) [0103.502] OpenThemeData () returned 0x2440000 [0103.502] GetSystemMetrics (nIndex=32) returned 4 [0103.502] GetSystemMetrics (nIndex=33) returned 4 [0103.502] CloseThemeData () returned 0x0 [0103.503] lstrlenA (lpString="\x92\x07") returned 2 [0103.503] lstrlenA (lpString="\x92\x07") returned 2 [0103.503] lstrlenA (lpString="\x92\x07") returned 2 [0103.503] lstrlenA (lpString="\x92\x07") returned 2 [0103.503] lstrlenA (lpString="\x92\x07") returned 2 [0103.503] lstrlenA (lpString="\x92\x07") returned 2 [0103.503] capGetDriverDescriptionA () returned 0x0 [0103.503] GetLastError () returned 0x0 [0103.503] SetLastError (dwErrCode=0x0) [0103.503] OpenThemeData () returned 0x2450000 [0103.506] GetSystemMetrics (nIndex=32) returned 4 [0103.506] GetSystemMetrics (nIndex=33) returned 4 [0103.506] CloseThemeData () returned 0x0 [0103.506] lstrlenA (lpString="\x92\x07") returned 2 [0103.506] lstrlenA (lpString="\x92\x07") returned 2 [0103.506] lstrlenA (lpString="\x92\x07") returned 2 [0103.506] lstrlenA (lpString="\x92\x07") returned 2 [0103.506] lstrlenA (lpString="\x92\x07") returned 2 [0103.506] lstrlenA (lpString="\x92\x07") returned 2 [0103.506] capGetDriverDescriptionA () returned 0x0 [0103.601] GetLastError () returned 0x0 [0103.601] SetLastError (dwErrCode=0x0) [0103.601] OpenThemeData () returned 0x2460000 [0103.602] GetSystemMetrics (nIndex=32) returned 4 [0103.602] GetSystemMetrics (nIndex=33) returned 4 [0103.602] CloseThemeData () returned 0x0 [0103.602] lstrlenA (lpString="\x92\x07") returned 2 [0103.602] lstrlenA (lpString="\x92\x07") returned 2 [0103.602] lstrlenA (lpString="\x92\x07") returned 2 [0103.602] lstrlenA (lpString="\x92\x07") returned 2 [0103.602] lstrlenA (lpString="\x92\x07") returned 2 [0103.602] lstrlenA (lpString="\x92\x07") returned 2 [0103.602] capGetDriverDescriptionA () returned 0x0 [0103.603] GetLastError () returned 0x0 [0103.603] SetLastError (dwErrCode=0x0) [0103.603] OpenThemeData () returned 0x2470000 [0103.604] GetSystemMetrics (nIndex=32) returned 4 [0103.604] GetSystemMetrics (nIndex=33) returned 4 [0103.604] CloseThemeData () returned 0x0 [0103.604] lstrlenA (lpString="\x92\x07") returned 2 [0103.604] lstrlenA (lpString="\x92\x07") returned 2 [0103.604] lstrlenA (lpString="\x92\x07") returned 2 [0103.604] lstrlenA (lpString="\x92\x07") returned 2 [0103.604] lstrlenA (lpString="\x92\x07") returned 2 [0103.604] lstrlenA (lpString="\x92\x07") returned 2 [0103.604] capGetDriverDescriptionA () returned 0x0 [0103.605] GetLastError () returned 0x0 [0103.605] SetLastError (dwErrCode=0x0) [0103.605] OpenThemeData () returned 0x2480000 [0103.605] GetSystemMetrics (nIndex=32) returned 4 [0103.605] GetSystemMetrics (nIndex=33) returned 4 [0103.605] CloseThemeData () returned 0x0 [0103.606] lstrlenA (lpString="\x92\x07") returned 2 [0103.606] lstrlenA (lpString="\x92\x07") returned 2 [0103.606] lstrlenA (lpString="\x92\x07") returned 2 [0103.606] lstrlenA (lpString="\x92\x07") returned 2 [0103.606] lstrlenA (lpString="\x92\x07") returned 2 [0103.606] lstrlenA (lpString="\x92\x07") returned 2 [0103.606] capGetDriverDescriptionA () returned 0x0 [0103.606] GetLastError () returned 0x0 [0103.606] SetLastError (dwErrCode=0x0) [0103.606] OpenThemeData () returned 0x2490000 [0103.607] GetSystemMetrics (nIndex=32) returned 4 [0103.607] GetSystemMetrics (nIndex=33) returned 4 [0103.607] CloseThemeData () returned 0x0 [0103.607] lstrlenA (lpString="\x92\x07") returned 2 [0103.607] lstrlenA (lpString="\x92\x07") returned 2 [0103.607] lstrlenA (lpString="\x92\x07") returned 2 [0103.607] lstrlenA (lpString="\x92\x07") returned 2 [0103.607] lstrlenA (lpString="\x92\x07") returned 2 [0103.607] lstrlenA (lpString="\x92\x07") returned 2 [0103.607] capGetDriverDescriptionA () returned 0x0 [0103.608] GetLastError () returned 0x0 [0103.608] SetLastError (dwErrCode=0x0) [0103.608] OpenThemeData () returned 0x24a0000 [0103.609] GetSystemMetrics (nIndex=32) returned 4 [0103.609] GetSystemMetrics (nIndex=33) returned 4 [0103.609] CloseThemeData () returned 0x0 [0103.609] lstrlenA (lpString="\x92\x07") returned 2 [0103.609] lstrlenA (lpString="\x92\x07") returned 2 [0103.609] lstrlenA (lpString="\x92\x07") returned 2 [0103.609] lstrlenA (lpString="\x92\x07") returned 2 [0103.609] lstrlenA (lpString="\x92\x07") returned 2 [0103.609] lstrlenA (lpString="\x92\x07") returned 2 [0103.609] capGetDriverDescriptionA () returned 0x0 [0103.610] GetLastError () returned 0x0 [0103.610] SetLastError (dwErrCode=0x0) [0103.610] OpenThemeData () returned 0x24b0000 [0103.610] GetSystemMetrics (nIndex=32) returned 4 [0103.610] GetSystemMetrics (nIndex=33) returned 4 [0103.610] CloseThemeData () returned 0x0 [0103.611] lstrlenA (lpString="\x92\x07") returned 2 [0103.611] lstrlenA (lpString="\x92\x07") returned 2 [0103.611] lstrlenA (lpString="\x92\x07") returned 2 [0103.611] lstrlenA (lpString="\x92\x07") returned 2 [0103.611] lstrlenA (lpString="\x92\x07") returned 2 [0103.611] lstrlenA (lpString="\x92\x07") returned 2 [0103.611] capGetDriverDescriptionA () returned 0x0 [0103.611] GetLastError () returned 0x0 [0103.612] SetLastError (dwErrCode=0x0) [0103.612] OpenThemeData () returned 0x24c0000 [0103.613] GetSystemMetrics (nIndex=32) returned 4 [0103.613] GetSystemMetrics (nIndex=33) returned 4 [0103.613] CloseThemeData () returned 0x0 [0103.613] lstrlenA (lpString="\x92\x07") returned 2 [0103.613] lstrlenA (lpString="\x92\x07") returned 2 [0103.613] lstrlenA (lpString="\x92\x07") returned 2 [0103.613] lstrlenA (lpString="\x92\x07") returned 2 [0103.613] lstrlenA (lpString="\x92\x07") returned 2 [0103.613] lstrlenA (lpString="\x92\x07") returned 2 [0103.613] capGetDriverDescriptionA () returned 0x0 [0103.614] GetLastError () returned 0x0 [0103.614] SetLastError (dwErrCode=0x0) [0103.614] OpenThemeData () returned 0x24d0000 [0103.615] GetSystemMetrics (nIndex=32) returned 4 [0103.615] GetSystemMetrics (nIndex=33) returned 4 [0103.615] CloseThemeData () returned 0x0 [0103.615] lstrlenA (lpString="\x92\x07") returned 2 [0103.615] lstrlenA (lpString="\x92\x07") returned 2 [0103.615] lstrlenA (lpString="\x92\x07") returned 2 [0103.615] lstrlenA (lpString="\x92\x07") returned 2 [0103.615] lstrlenA (lpString="\x92\x07") returned 2 [0103.615] lstrlenA (lpString="\x92\x07") returned 2 [0103.615] capGetDriverDescriptionA () returned 0x0 [0103.616] GetLastError () returned 0x0 [0103.616] SetLastError (dwErrCode=0x0) [0103.616] OpenThemeData () returned 0x24e0000 [0103.616] GetSystemMetrics (nIndex=32) returned 4 [0103.616] GetSystemMetrics (nIndex=33) returned 4 [0103.616] CloseThemeData () returned 0x0 [0103.617] lstrlenA (lpString="\x92\x07") returned 2 [0103.617] lstrlenA (lpString="\x92\x07") returned 2 [0103.617] lstrlenA (lpString="\x92\x07") returned 2 [0103.617] lstrlenA (lpString="\x92\x07") returned 2 [0103.617] lstrlenA (lpString="\x92\x07") returned 2 [0103.617] lstrlenA (lpString="\x92\x07") returned 2 [0103.617] capGetDriverDescriptionA () returned 0x0 [0103.617] GetLastError () returned 0x0 [0103.618] SetLastError (dwErrCode=0x0) [0103.618] OpenThemeData () returned 0x24f0000 [0103.618] GetSystemMetrics (nIndex=32) returned 4 [0103.618] GetSystemMetrics (nIndex=33) returned 4 [0103.618] CloseThemeData () returned 0x0 [0103.618] lstrlenA (lpString="\x92\x07") returned 2 [0103.618] lstrlenA (lpString="\x92\x07") returned 2 [0103.618] lstrlenA (lpString="\x92\x07") returned 2 [0103.619] lstrlenA (lpString="\x92\x07") returned 2 [0103.619] lstrlenA (lpString="\x92\x07") returned 2 [0103.619] lstrlenA (lpString="\x92\x07") returned 2 [0103.619] capGetDriverDescriptionA () returned 0x0 [0103.619] GetLastError () returned 0x0 [0103.619] SetLastError (dwErrCode=0x0) [0103.619] OpenThemeData () returned 0x2500000 [0103.620] GetSystemMetrics (nIndex=32) returned 4 [0103.620] GetSystemMetrics (nIndex=33) returned 4 [0103.620] CloseThemeData () returned 0x0 [0103.620] lstrlenA (lpString="\x92\x07") returned 2 [0103.620] lstrlenA (lpString="\x92\x07") returned 2 [0103.620] lstrlenA (lpString="\x92\x07") returned 2 [0103.620] lstrlenA (lpString="\x92\x07") returned 2 [0103.620] lstrlenA (lpString="\x92\x07") returned 2 [0103.620] lstrlenA (lpString="\x92\x07") returned 2 [0103.620] capGetDriverDescriptionA () returned 0x0 [0103.621] GetLastError () returned 0x0 [0103.621] SetLastError (dwErrCode=0x0) [0103.621] OpenThemeData () returned 0x2510000 [0103.621] GetSystemMetrics (nIndex=32) returned 4 [0103.621] GetSystemMetrics (nIndex=33) returned 4 [0103.622] CloseThemeData () returned 0x0 [0103.622] lstrlenA (lpString="\x92\x07") returned 2 [0103.622] lstrlenA (lpString="\x92\x07") returned 2 [0103.622] lstrlenA (lpString="\x92\x07") returned 2 [0103.622] lstrlenA (lpString="\x92\x07") returned 2 [0103.622] lstrlenA (lpString="\x92\x07") returned 2 [0103.622] lstrlenA (lpString="\x92\x07") returned 2 [0103.622] capGetDriverDescriptionA () returned 0x0 [0103.623] GetLastError () returned 0x0 [0103.623] SetLastError (dwErrCode=0x0) [0103.623] OpenThemeData () returned 0x2520000 [0103.623] GetSystemMetrics (nIndex=32) returned 4 [0103.623] GetSystemMetrics (nIndex=33) returned 4 [0103.623] CloseThemeData () returned 0x0 [0103.624] lstrlenA (lpString="\x92\x07") returned 2 [0103.624] lstrlenA (lpString="\x92\x07") returned 2 [0103.624] lstrlenA (lpString="\x92\x07") returned 2 [0103.624] lstrlenA (lpString="\x92\x07") returned 2 [0103.624] lstrlenA (lpString="\x92\x07") returned 2 [0103.624] lstrlenA (lpString="\x92\x07") returned 2 [0103.624] capGetDriverDescriptionA () returned 0x0 [0103.624] GetLastError () returned 0x0 [0103.624] SetLastError (dwErrCode=0x0) [0103.624] OpenThemeData () returned 0x2530000 [0103.625] GetSystemMetrics (nIndex=32) returned 4 [0103.625] GetSystemMetrics (nIndex=33) returned 4 [0103.625] CloseThemeData () returned 0x0 [0103.625] lstrlenA (lpString="\x92\x07") returned 2 [0103.625] lstrlenA (lpString="\x92\x07") returned 2 [0103.625] lstrlenA (lpString="\x92\x07") returned 2 [0103.625] lstrlenA (lpString="\x92\x07") returned 2 [0103.625] lstrlenA (lpString="\x92\x07") returned 2 [0103.625] lstrlenA (lpString="\x92\x07") returned 2 [0103.625] capGetDriverDescriptionA () returned 0x0 [0103.626] GetLastError () returned 0x0 [0103.626] SetLastError (dwErrCode=0x0) [0103.626] OpenThemeData () returned 0x2540000 [0103.627] GetSystemMetrics (nIndex=32) returned 4 [0103.627] GetSystemMetrics (nIndex=33) returned 4 [0103.627] CloseThemeData () returned 0x0 [0103.627] lstrlenA (lpString="\x92\x07") returned 2 [0103.627] lstrlenA (lpString="\x92\x07") returned 2 [0103.627] lstrlenA (lpString="\x92\x07") returned 2 [0103.627] lstrlenA (lpString="\x92\x07") returned 2 [0103.627] lstrlenA (lpString="\x92\x07") returned 2 [0103.627] lstrlenA (lpString="\x92\x07") returned 2 [0103.627] capGetDriverDescriptionA () returned 0x0 [0103.628] GetLastError () returned 0x0 [0103.628] SetLastError (dwErrCode=0x0) [0103.628] OpenThemeData () returned 0x2550000 [0103.628] GetSystemMetrics (nIndex=32) returned 4 [0103.628] GetSystemMetrics (nIndex=33) returned 4 [0103.628] CloseThemeData () returned 0x0 [0103.629] lstrlenA (lpString="\x92\x07") returned 2 [0103.629] lstrlenA (lpString="\x92\x07") returned 2 [0103.629] lstrlenA (lpString="\x92\x07") returned 2 [0103.629] lstrlenA (lpString="\x92\x07") returned 2 [0103.629] lstrlenA (lpString="\x92\x07") returned 2 [0103.629] lstrlenA (lpString="\x92\x07") returned 2 [0103.629] capGetDriverDescriptionA () returned 0x0 [0103.629] GetLastError () returned 0x0 [0103.629] SetLastError (dwErrCode=0x0) [0103.630] OpenThemeData () returned 0x2560000 [0103.630] GetSystemMetrics (nIndex=32) returned 4 [0103.630] GetSystemMetrics (nIndex=33) returned 4 [0103.630] CloseThemeData () returned 0x0 [0103.630] lstrlenA (lpString="\x92\x07") returned 2 [0103.630] lstrlenA (lpString="\x92\x07") returned 2 [0103.630] lstrlenA (lpString="\x92\x07") returned 2 [0103.630] lstrlenA (lpString="\x92\x07") returned 2 [0103.630] lstrlenA (lpString="\x92\x07") returned 2 [0103.631] lstrlenA (lpString="\x92\x07") returned 2 [0103.631] capGetDriverDescriptionA () returned 0x0 [0103.631] GetLastError () returned 0x0 [0103.631] SetLastError (dwErrCode=0x0) [0103.631] OpenThemeData () returned 0x2570000 [0103.632] GetSystemMetrics (nIndex=32) returned 4 [0103.632] GetSystemMetrics (nIndex=33) returned 4 [0103.632] CloseThemeData () returned 0x0 [0103.632] lstrlenA (lpString="\x92\x07") returned 2 [0103.632] lstrlenA (lpString="\x92\x07") returned 2 [0103.632] lstrlenA (lpString="\x92\x07") returned 2 [0103.632] lstrlenA (lpString="\x92\x07") returned 2 [0103.632] lstrlenA (lpString="\x92\x07") returned 2 [0103.632] lstrlenA (lpString="\x92\x07") returned 2 [0103.633] capGetDriverDescriptionA () returned 0x0 [0103.633] GetLastError () returned 0x0 [0103.633] SetLastError (dwErrCode=0x0) [0103.633] OpenThemeData () returned 0x2580000 [0103.634] GetSystemMetrics (nIndex=32) returned 4 [0103.634] GetSystemMetrics (nIndex=33) returned 4 [0103.634] CloseThemeData () returned 0x0 [0103.634] lstrlenA (lpString="\x92\x07") returned 2 [0103.634] lstrlenA (lpString="\x92\x07") returned 2 [0103.634] lstrlenA (lpString="\x92\x07") returned 2 [0103.634] lstrlenA (lpString="\x92\x07") returned 2 [0103.634] lstrlenA (lpString="\x92\x07") returned 2 [0103.634] lstrlenA (lpString="\x92\x07") returned 2 [0103.634] capGetDriverDescriptionA () returned 0x0 [0103.635] GetLastError () returned 0x0 [0103.635] SetLastError (dwErrCode=0x0) [0103.635] OpenThemeData () returned 0x2590000 [0103.635] GetSystemMetrics (nIndex=32) returned 4 [0103.635] GetSystemMetrics (nIndex=33) returned 4 [0103.635] CloseThemeData () returned 0x0 [0103.636] lstrlenA (lpString="\x92\x07") returned 2 [0103.636] lstrlenA (lpString="\x92\x07") returned 2 [0103.636] lstrlenA (lpString="\x92\x07") returned 2 [0103.636] lstrlenA (lpString="\x92\x07") returned 2 [0103.636] lstrlenA (lpString="\x92\x07") returned 2 [0103.636] lstrlenA (lpString="\x92\x07") returned 2 [0103.636] capGetDriverDescriptionA () returned 0x0 [0103.637] GetLastError () returned 0x0 [0103.637] SetLastError (dwErrCode=0x0) [0103.637] OpenThemeData () returned 0x25a0000 [0103.637] GetSystemMetrics (nIndex=32) returned 4 [0103.637] GetSystemMetrics (nIndex=33) returned 4 [0103.637] CloseThemeData () returned 0x0 [0103.638] lstrlenA (lpString="\x92\x07") returned 2 [0103.638] lstrlenA (lpString="\x92\x07") returned 2 [0103.638] lstrlenA (lpString="\x92\x07") returned 2 [0103.638] lstrlenA (lpString="\x92\x07") returned 2 [0103.638] lstrlenA (lpString="\x92\x07") returned 2 [0103.638] lstrlenA (lpString="\x92\x07") returned 2 [0103.638] capGetDriverDescriptionA () returned 0x0 [0103.638] GetLastError () returned 0x0 [0103.638] SetLastError (dwErrCode=0x0) [0103.638] OpenThemeData () returned 0x25b0000 [0103.639] GetSystemMetrics (nIndex=32) returned 4 [0103.639] GetSystemMetrics (nIndex=33) returned 4 [0103.639] CloseThemeData () returned 0x0 [0103.639] lstrlenA (lpString="\x92\x07") returned 2 [0103.639] lstrlenA (lpString="\x92\x07") returned 2 [0103.639] lstrlenA (lpString="\x92\x07") returned 2 [0103.639] lstrlenA (lpString="\x92\x07") returned 2 [0103.639] lstrlenA (lpString="\x92\x07") returned 2 [0103.639] lstrlenA (lpString="\x92\x07") returned 2 [0103.639] capGetDriverDescriptionA () returned 0x0 [0103.640] GetLastError () returned 0x0 [0103.640] SetLastError (dwErrCode=0x0) [0103.640] OpenThemeData () returned 0x25c0000 [0103.641] GetSystemMetrics (nIndex=32) returned 4 [0103.641] GetSystemMetrics (nIndex=33) returned 4 [0103.641] CloseThemeData () returned 0x0 [0103.641] lstrlenA (lpString="\x92\x07") returned 2 [0103.641] lstrlenA (lpString="\x92\x07") returned 2 [0103.641] lstrlenA (lpString="\x92\x07") returned 2 [0103.641] lstrlenA (lpString="\x92\x07") returned 2 [0103.641] lstrlenA (lpString="\x92\x07") returned 2 [0103.641] lstrlenA (lpString="\x92\x07") returned 2 [0103.641] capGetDriverDescriptionA () returned 0x0 [0103.642] GetLastError () returned 0x0 [0103.642] SetLastError (dwErrCode=0x0) [0103.642] OpenThemeData () returned 0x25d0000 [0103.642] GetSystemMetrics (nIndex=32) returned 4 [0103.642] GetSystemMetrics (nIndex=33) returned 4 [0103.642] CloseThemeData () returned 0x0 [0103.643] lstrlenA (lpString="\x92\x07") returned 2 [0103.643] lstrlenA (lpString="\x92\x07") returned 2 [0103.643] lstrlenA (lpString="\x92\x07") returned 2 [0103.643] lstrlenA (lpString="\x92\x07") returned 2 [0103.643] lstrlenA (lpString="\x92\x07") returned 2 [0103.643] lstrlenA (lpString="\x92\x07") returned 2 [0103.643] capGetDriverDescriptionA () returned 0x0 [0103.643] GetLastError () returned 0x0 [0103.643] SetLastError (dwErrCode=0x0) [0103.644] OpenThemeData () returned 0x25e0000 [0103.644] GetSystemMetrics (nIndex=32) returned 4 [0103.644] GetSystemMetrics (nIndex=33) returned 4 [0103.644] CloseThemeData () returned 0x0 [0103.644] lstrlenA (lpString="\x92\x07") returned 2 [0103.644] lstrlenA (lpString="\x92\x07") returned 2 [0103.644] lstrlenA (lpString="\x92\x07") returned 2 [0103.644] lstrlenA (lpString="\x92\x07") returned 2 [0103.645] lstrlenA (lpString="\x92\x07") returned 2 [0103.645] lstrlenA (lpString="\x92\x07") returned 2 [0103.686] capGetDriverDescriptionA () returned 0x0 [0103.709] GetLastError () returned 0x0 [0103.709] SetLastError (dwErrCode=0x0) [0103.709] OpenThemeData () returned 0x25f0000 [0103.710] GetSystemMetrics (nIndex=32) returned 4 [0103.710] GetSystemMetrics (nIndex=33) returned 4 [0103.710] CloseThemeData () returned 0x0 [0103.711] lstrlenA (lpString="\x92\x07") returned 2 [0103.711] lstrlenA (lpString="\x92\x07") returned 2 [0103.711] lstrlenA (lpString="\x92\x07") returned 2 [0103.711] lstrlenA (lpString="\x92\x07") returned 2 [0103.711] lstrlenA (lpString="\x92\x07") returned 2 [0103.711] lstrlenA (lpString="\x92\x07") returned 2 [0103.711] capGetDriverDescriptionA () returned 0x0 [0103.711] GetLastError () returned 0x0 [0103.711] SetLastError (dwErrCode=0x0) [0103.711] OpenThemeData () returned 0x2600000 [0103.712] GetSystemMetrics (nIndex=32) returned 4 [0103.712] GetSystemMetrics (nIndex=33) returned 4 [0103.712] CloseThemeData () returned 0x0 [0103.712] lstrlenA (lpString="\x92\x07") returned 2 [0103.712] lstrlenA (lpString="\x92\x07") returned 2 [0103.712] lstrlenA (lpString="\x92\x07") returned 2 [0103.712] lstrlenA (lpString="\x92\x07") returned 2 [0103.712] lstrlenA (lpString="\x92\x07") returned 2 [0103.713] lstrlenA (lpString="\x92\x07") returned 2 [0103.713] capGetDriverDescriptionA () returned 0x0 [0103.713] GetLastError () returned 0x0 [0103.713] SetLastError (dwErrCode=0x0) [0103.713] OpenThemeData () returned 0x2610000 [0103.714] GetSystemMetrics (nIndex=32) returned 4 [0103.714] GetSystemMetrics (nIndex=33) returned 4 [0103.714] CloseThemeData () returned 0x0 [0103.714] lstrlenA (lpString="\x92\x07") returned 2 [0103.714] lstrlenA (lpString="\x92\x07") returned 2 [0103.714] lstrlenA (lpString="\x92\x07") returned 2 [0103.714] lstrlenA (lpString="\x92\x07") returned 2 [0103.714] lstrlenA (lpString="\x92\x07") returned 2 [0103.714] lstrlenA (lpString="\x92\x07") returned 2 [0103.714] capGetDriverDescriptionA () returned 0x0 [0103.715] GetLastError () returned 0x0 [0103.715] SetLastError (dwErrCode=0x0) [0103.715] OpenThemeData () returned 0x2620000 [0103.716] GetSystemMetrics (nIndex=32) returned 4 [0103.716] GetSystemMetrics (nIndex=33) returned 4 [0103.716] CloseThemeData () returned 0x0 [0103.716] lstrlenA (lpString="\x92\x07") returned 2 [0103.716] lstrlenA (lpString="\x92\x07") returned 2 [0103.716] lstrlenA (lpString="\x92\x07") returned 2 [0103.716] lstrlenA (lpString="\x92\x07") returned 2 [0103.716] lstrlenA (lpString="\x92\x07") returned 2 [0103.716] lstrlenA (lpString="\x92\x07") returned 2 [0103.716] capGetDriverDescriptionA () returned 0x0 [0103.717] GetLastError () returned 0x0 [0103.717] SetLastError (dwErrCode=0x0) [0103.717] OpenThemeData () returned 0x2630000 [0103.717] GetSystemMetrics (nIndex=32) returned 4 [0103.717] GetSystemMetrics (nIndex=33) returned 4 [0103.717] CloseThemeData () returned 0x0 [0103.718] lstrlenA (lpString="\x92\x07") returned 2 [0103.718] lstrlenA (lpString="\x92\x07") returned 2 [0103.718] lstrlenA (lpString="\x92\x07") returned 2 [0103.718] lstrlenA (lpString="\x92\x07") returned 2 [0103.718] lstrlenA (lpString="\x92\x07") returned 2 [0103.718] lstrlenA (lpString="\x92\x07") returned 2 [0103.718] capGetDriverDescriptionA () returned 0x0 [0103.718] GetLastError () returned 0x0 [0103.719] SetLastError (dwErrCode=0x0) [0103.719] OpenThemeData () returned 0x2640000 [0103.719] GetSystemMetrics (nIndex=32) returned 4 [0103.719] GetSystemMetrics (nIndex=33) returned 4 [0103.719] CloseThemeData () returned 0x0 [0103.719] lstrlenA (lpString="\x92\x07") returned 2 [0103.719] lstrlenA (lpString="\x92\x07") returned 2 [0103.720] lstrlenA (lpString="\x92\x07") returned 2 [0103.720] lstrlenA (lpString="\x92\x07") returned 2 [0103.720] lstrlenA (lpString="\x92\x07") returned 2 [0103.720] lstrlenA (lpString="\x92\x07") returned 2 [0103.720] capGetDriverDescriptionA () returned 0x0 [0103.720] GetLastError () returned 0x0 [0103.720] SetLastError (dwErrCode=0x0) [0103.720] OpenThemeData () returned 0x2650000 [0103.721] GetSystemMetrics (nIndex=32) returned 4 [0103.721] GetSystemMetrics (nIndex=33) returned 4 [0103.721] CloseThemeData () returned 0x0 [0103.721] lstrlenA (lpString="\x92\x07") returned 2 [0103.721] lstrlenA (lpString="\x92\x07") returned 2 [0103.721] lstrlenA (lpString="\x92\x07") returned 2 [0103.721] lstrlenA (lpString="\x92\x07") returned 2 [0103.721] lstrlenA (lpString="\x92\x07") returned 2 [0103.721] lstrlenA (lpString="\x92\x07") returned 2 [0103.721] capGetDriverDescriptionA () returned 0x0 [0103.722] GetLastError () returned 0x0 [0103.722] SetLastError (dwErrCode=0x0) [0103.722] OpenThemeData () returned 0x2660000 [0103.724] GetSystemMetrics (nIndex=32) returned 4 [0103.724] GetSystemMetrics (nIndex=33) returned 4 [0103.724] CloseThemeData () returned 0x0 [0103.725] lstrlenA (lpString="\x92\x07") returned 2 [0103.725] lstrlenA (lpString="\x92\x07") returned 2 [0103.725] lstrlenA (lpString="\x92\x07") returned 2 [0103.725] lstrlenA (lpString="\x92\x07") returned 2 [0103.725] lstrlenA (lpString="\x92\x07") returned 2 [0103.725] lstrlenA (lpString="\x92\x07") returned 2 [0103.725] capGetDriverDescriptionA () returned 0x0 [0103.725] GetLastError () returned 0x0 [0103.725] SetLastError (dwErrCode=0x0) [0103.726] OpenThemeData () returned 0x2670000 [0103.726] GetSystemMetrics (nIndex=32) returned 4 [0103.726] GetSystemMetrics (nIndex=33) returned 4 [0103.726] CloseThemeData () returned 0x0 [0103.727] lstrlenA (lpString="\x92\x07") returned 2 [0103.727] lstrlenA (lpString="\x92\x07") returned 2 [0103.727] lstrlenA (lpString="\x92\x07") returned 2 [0103.727] lstrlenA (lpString="\x92\x07") returned 2 [0103.727] lstrlenA (lpString="\x92\x07") returned 2 [0103.727] lstrlenA (lpString="\x92\x07") returned 2 [0103.727] capGetDriverDescriptionA () returned 0x0 [0103.728] GetLastError () returned 0x0 [0103.728] SetLastError (dwErrCode=0x0) [0103.728] OpenThemeData () returned 0x2680000 [0103.728] GetSystemMetrics (nIndex=32) returned 4 [0103.728] GetSystemMetrics (nIndex=33) returned 4 [0103.728] CloseThemeData () returned 0x0 [0103.729] lstrlenA (lpString="\x92\x07") returned 2 [0103.729] lstrlenA (lpString="\x92\x07") returned 2 [0103.729] lstrlenA (lpString="\x92\x07") returned 2 [0103.729] lstrlenA (lpString="\x92\x07") returned 2 [0103.729] lstrlenA (lpString="\x92\x07") returned 2 [0103.729] lstrlenA (lpString="\x92\x07") returned 2 [0103.729] capGetDriverDescriptionA () returned 0x0 [0103.730] GetLastError () returned 0x0 [0103.730] SetLastError (dwErrCode=0x0) [0103.730] OpenThemeData () returned 0x2690000 [0103.731] GetSystemMetrics (nIndex=32) returned 4 [0103.731] GetSystemMetrics (nIndex=33) returned 4 [0103.731] CloseThemeData () returned 0x0 [0103.731] lstrlenA (lpString="\x92\x07") returned 2 [0103.731] lstrlenA (lpString="\x92\x07") returned 2 [0103.731] lstrlenA (lpString="\x92\x07") returned 2 [0103.731] lstrlenA (lpString="\x92\x07") returned 2 [0103.731] lstrlenA (lpString="\x92\x07") returned 2 [0103.731] lstrlenA (lpString="\x92\x07") returned 2 [0103.731] capGetDriverDescriptionA () returned 0x0 [0103.732] GetLastError () returned 0x0 [0103.732] SetLastError (dwErrCode=0x0) [0103.732] OpenThemeData () returned 0x26a0000 [0103.733] GetSystemMetrics (nIndex=32) returned 4 [0103.733] GetSystemMetrics (nIndex=33) returned 4 [0103.733] CloseThemeData () returned 0x0 [0103.733] lstrlenA (lpString="\x92\x07") returned 2 [0103.733] lstrlenA (lpString="\x92\x07") returned 2 [0103.733] lstrlenA (lpString="\x92\x07") returned 2 [0103.733] lstrlenA (lpString="\x92\x07") returned 2 [0103.733] lstrlenA (lpString="\x92\x07") returned 2 [0103.733] lstrlenA (lpString="\x92\x07") returned 2 [0103.733] capGetDriverDescriptionA () returned 0x0 [0103.734] GetLastError () returned 0x0 [0103.734] SetLastError (dwErrCode=0x0) [0103.734] OpenThemeData () returned 0x26b0000 [0103.734] GetSystemMetrics (nIndex=32) returned 4 [0103.734] GetSystemMetrics (nIndex=33) returned 4 [0103.734] CloseThemeData () returned 0x0 [0103.735] lstrlenA (lpString="\x92\x07") returned 2 [0103.735] lstrlenA (lpString="\x92\x07") returned 2 [0103.735] lstrlenA (lpString="\x92\x07") returned 2 [0103.735] lstrlenA (lpString="\x92\x07") returned 2 [0103.735] lstrlenA (lpString="\x92\x07") returned 2 [0103.735] lstrlenA (lpString="\x92\x07") returned 2 [0103.735] capGetDriverDescriptionA () returned 0x0 [0103.736] GetLastError () returned 0x0 [0103.736] SetLastError (dwErrCode=0x0) [0103.736] OpenThemeData () returned 0x26c0000 [0103.736] GetSystemMetrics (nIndex=32) returned 4 [0103.736] GetSystemMetrics (nIndex=33) returned 4 [0103.736] CloseThemeData () returned 0x0 [0103.737] lstrlenA (lpString="\x92\x07") returned 2 [0103.737] lstrlenA (lpString="\x92\x07") returned 2 [0103.737] lstrlenA (lpString="\x92\x07") returned 2 [0103.737] lstrlenA (lpString="\x92\x07") returned 2 [0103.737] lstrlenA (lpString="\x92\x07") returned 2 [0103.737] lstrlenA (lpString="\x92\x07") returned 2 [0103.737] capGetDriverDescriptionA () returned 0x0 [0103.737] GetLastError () returned 0x0 [0103.737] SetLastError (dwErrCode=0x0) [0103.738] OpenThemeData () returned 0x26d0000 [0103.738] GetSystemMetrics (nIndex=32) returned 4 [0103.738] GetSystemMetrics (nIndex=33) returned 4 [0103.738] CloseThemeData () returned 0x0 [0103.738] lstrlenA (lpString="\x92\x07") returned 2 [0103.738] lstrlenA (lpString="\x92\x07") returned 2 [0103.738] lstrlenA (lpString="\x92\x07") returned 2 [0103.739] lstrlenA (lpString="\x92\x07") returned 2 [0103.739] lstrlenA (lpString="\x92\x07") returned 2 [0103.739] lstrlenA (lpString="\x92\x07") returned 2 [0103.739] capGetDriverDescriptionA () returned 0x0 [0103.739] GetLastError () returned 0x0 [0103.739] SetLastError (dwErrCode=0x0) [0103.739] OpenThemeData () returned 0x26e0000 [0103.740] GetSystemMetrics (nIndex=32) returned 4 [0103.740] GetSystemMetrics (nIndex=33) returned 4 [0103.740] CloseThemeData () returned 0x0 [0103.740] lstrlenA (lpString="\x92\x07") returned 2 [0103.740] lstrlenA (lpString="\x92\x07") returned 2 [0103.740] lstrlenA (lpString="\x92\x07") returned 2 [0103.740] lstrlenA (lpString="\x92\x07") returned 2 [0103.740] lstrlenA (lpString="\x92\x07") returned 2 [0103.740] lstrlenA (lpString="\x92\x07") returned 2 [0103.740] capGetDriverDescriptionA () returned 0x0 [0103.741] GetLastError () returned 0x0 [0103.741] SetLastError (dwErrCode=0x0) [0103.741] OpenThemeData () returned 0x26f0000 [0103.954] GetSystemMetrics (nIndex=32) returned 4 [0103.954] GetSystemMetrics (nIndex=33) returned 4 [0103.954] CloseThemeData () returned 0x0 [0103.954] lstrlenA (lpString="\x92\x07") returned 2 [0103.954] lstrlenA (lpString="\x92\x07") returned 2 [0103.954] lstrlenA (lpString="\x92\x07") returned 2 [0103.954] lstrlenA (lpString="\x92\x07") returned 2 [0103.954] lstrlenA (lpString="\x92\x07") returned 2 [0103.954] lstrlenA (lpString="\x92\x07") returned 2 [0103.954] capGetDriverDescriptionA () returned 0x0 [0103.955] GetLastError () returned 0x0 [0103.955] SetLastError (dwErrCode=0x0) [0103.955] OpenThemeData () returned 0x2700000 [0103.956] GetSystemMetrics (nIndex=32) returned 4 [0103.956] GetSystemMetrics (nIndex=33) returned 4 [0103.956] CloseThemeData () returned 0x0 [0103.956] lstrlenA (lpString="\x92\x07") returned 2 [0103.956] lstrlenA (lpString="\x92\x07") returned 2 [0103.956] lstrlenA (lpString="\x92\x07") returned 2 [0103.956] lstrlenA (lpString="\x92\x07") returned 2 [0103.956] lstrlenA (lpString="\x92\x07") returned 2 [0103.956] lstrlenA (lpString="\x92\x07") returned 2 [0103.956] capGetDriverDescriptionA () returned 0x0 [0103.957] GetLastError () returned 0x0 [0103.957] SetLastError (dwErrCode=0x0) [0103.957] OpenThemeData () returned 0x2710000 [0103.959] GetSystemMetrics (nIndex=32) returned 4 [0103.959] GetSystemMetrics (nIndex=33) returned 4 [0103.959] CloseThemeData () returned 0x0 [0103.959] lstrlenA (lpString="\x92\x07") returned 2 [0103.959] lstrlenA (lpString="\x92\x07") returned 2 [0103.959] lstrlenA (lpString="\x92\x07") returned 2 [0103.959] lstrlenA (lpString="\x92\x07") returned 2 [0103.959] lstrlenA (lpString="\x92\x07") returned 2 [0103.959] lstrlenA (lpString="\x92\x07") returned 2 [0103.959] capGetDriverDescriptionA () returned 0x0 [0103.960] GetLastError () returned 0x0 [0103.960] SetLastError (dwErrCode=0x0) [0103.960] OpenThemeData () returned 0x2720000 [0103.960] GetSystemMetrics (nIndex=32) returned 4 [0103.960] GetSystemMetrics (nIndex=33) returned 4 [0103.961] CloseThemeData () returned 0x0 [0103.961] lstrlenA (lpString="\x92\x07") returned 2 [0103.961] lstrlenA (lpString="\x92\x07") returned 2 [0103.961] lstrlenA (lpString="\x92\x07") returned 2 [0103.961] lstrlenA (lpString="\x92\x07") returned 2 [0103.961] lstrlenA (lpString="\x92\x07") returned 2 [0103.961] lstrlenA (lpString="\x92\x07") returned 2 [0103.961] capGetDriverDescriptionA () returned 0x0 [0103.962] GetLastError () returned 0x0 [0103.962] SetLastError (dwErrCode=0x0) [0103.962] OpenThemeData () returned 0x2730000 [0103.962] GetSystemMetrics (nIndex=32) returned 4 [0103.962] GetSystemMetrics (nIndex=33) returned 4 [0103.962] CloseThemeData () returned 0x0 [0103.963] lstrlenA (lpString="\x92\x07") returned 2 [0103.963] lstrlenA (lpString="\x92\x07") returned 2 [0103.963] lstrlenA (lpString="\x92\x07") returned 2 [0103.963] lstrlenA (lpString="\x92\x07") returned 2 [0103.963] lstrlenA (lpString="\x92\x07") returned 2 [0103.963] lstrlenA (lpString="\x92\x07") returned 2 [0103.963] capGetDriverDescriptionA () returned 0x0 [0103.963] GetLastError () returned 0x0 [0103.963] SetLastError (dwErrCode=0x0) [0103.963] OpenThemeData () returned 0x2740000 [0103.964] GetSystemMetrics (nIndex=32) returned 4 [0103.964] GetSystemMetrics (nIndex=33) returned 4 [0103.964] CloseThemeData () returned 0x0 [0103.964] lstrlenA (lpString="\x92\x07") returned 2 [0103.964] lstrlenA (lpString="\x92\x07") returned 2 [0103.964] lstrlenA (lpString="\x92\x07") returned 2 [0103.965] lstrlenA (lpString="\x92\x07") returned 2 [0103.965] lstrlenA (lpString="\x92\x07") returned 2 [0103.965] lstrlenA (lpString="\x92\x07") returned 2 [0103.965] capGetDriverDescriptionA () returned 0x0 [0103.965] GetLastError () returned 0x0 [0103.965] SetLastError (dwErrCode=0x0) [0103.965] OpenThemeData () returned 0x2750000 [0103.966] GetSystemMetrics (nIndex=32) returned 4 [0103.966] GetSystemMetrics (nIndex=33) returned 4 [0103.966] CloseThemeData () returned 0x0 [0103.966] lstrlenA (lpString="\x92\x07") returned 2 [0103.966] lstrlenA (lpString="\x92\x07") returned 2 [0103.966] lstrlenA (lpString="\x92\x07") returned 2 [0103.966] lstrlenA (lpString="\x92\x07") returned 2 [0103.966] lstrlenA (lpString="\x92\x07") returned 2 [0103.966] lstrlenA (lpString="\x92\x07") returned 2 [0103.966] capGetDriverDescriptionA () returned 0x0 [0103.967] GetLastError () returned 0x0 [0103.967] SetLastError (dwErrCode=0x0) [0103.967] OpenThemeData () returned 0x2760000 [0103.968] GetSystemMetrics (nIndex=32) returned 4 [0103.968] GetSystemMetrics (nIndex=33) returned 4 [0103.968] CloseThemeData () returned 0x0 [0103.968] lstrlenA (lpString="\x92\x07") returned 2 [0103.968] lstrlenA (lpString="\x92\x07") returned 2 [0103.968] lstrlenA (lpString="\x92\x07") returned 2 [0103.968] lstrlenA (lpString="\x92\x07") returned 2 [0103.968] lstrlenA (lpString="\x92\x07") returned 2 [0103.968] lstrlenA (lpString="\x92\x07") returned 2 [0103.968] capGetDriverDescriptionA () returned 0x0 [0103.969] GetLastError () returned 0x0 [0103.969] SetLastError (dwErrCode=0x0) [0103.969] OpenThemeData () returned 0x2770000 [0103.969] GetSystemMetrics (nIndex=32) returned 4 [0103.969] GetSystemMetrics (nIndex=33) returned 4 [0103.969] CloseThemeData () returned 0x0 [0103.970] lstrlenA (lpString="\x92\x07") returned 2 [0103.970] lstrlenA (lpString="\x92\x07") returned 2 [0103.970] lstrlenA (lpString="\x92\x07") returned 2 [0103.970] lstrlenA (lpString="\x92\x07") returned 2 [0103.970] lstrlenA (lpString="\x92\x07") returned 2 [0103.970] lstrlenA (lpString="\x92\x07") returned 2 [0103.970] capGetDriverDescriptionA () returned 0x0 [0103.971] GetLastError () returned 0x0 [0103.971] SetLastError (dwErrCode=0x0) [0103.971] OpenThemeData () returned 0x2780000 [0103.971] GetSystemMetrics (nIndex=32) returned 4 [0103.971] GetSystemMetrics (nIndex=33) returned 4 [0103.971] CloseThemeData () returned 0x0 [0103.972] lstrlenA (lpString="\x92\x07") returned 2 [0103.972] lstrlenA (lpString="\x92\x07") returned 2 [0103.972] lstrlenA (lpString="\x92\x07") returned 2 [0103.972] lstrlenA (lpString="\x92\x07") returned 2 [0103.972] lstrlenA (lpString="\x92\x07") returned 2 [0103.972] lstrlenA (lpString="\x92\x07") returned 2 [0103.972] capGetDriverDescriptionA () returned 0x0 [0103.972] GetLastError () returned 0x0 [0103.972] SetLastError (dwErrCode=0x0) [0103.972] OpenThemeData () returned 0x2790000 [0103.973] GetSystemMetrics (nIndex=32) returned 4 [0103.973] GetSystemMetrics (nIndex=33) returned 4 [0103.973] CloseThemeData () returned 0x0 [0103.973] lstrlenA (lpString="\x92\x07") returned 2 [0103.973] lstrlenA (lpString="\x92\x07") returned 2 [0103.973] lstrlenA (lpString="\x92\x07") returned 2 [0103.973] lstrlenA (lpString="\x92\x07") returned 2 [0103.973] lstrlenA (lpString="\x92\x07") returned 2 [0103.973] lstrlenA (lpString="\x92\x07") returned 2 [0103.974] capGetDriverDescriptionA () returned 0x0 [0103.974] GetLastError () returned 0x0 [0103.974] SetLastError (dwErrCode=0x0) [0103.974] OpenThemeData () returned 0x27a0000 [0103.975] GetSystemMetrics (nIndex=32) returned 4 [0103.975] GetSystemMetrics (nIndex=33) returned 4 [0103.975] CloseThemeData () returned 0x0 [0103.975] lstrlenA (lpString="\x92\x07") returned 2 [0103.975] lstrlenA (lpString="\x92\x07") returned 2 [0103.975] lstrlenA (lpString="\x92\x07") returned 2 [0103.975] lstrlenA (lpString="\x92\x07") returned 2 [0103.975] lstrlenA (lpString="\x92\x07") returned 2 [0103.975] lstrlenA (lpString="\x92\x07") returned 2 [0103.975] capGetDriverDescriptionA () returned 0x0 [0103.976] GetLastError () returned 0x0 [0103.976] SetLastError (dwErrCode=0x0) [0103.976] OpenThemeData () returned 0x27b0000 [0103.977] GetSystemMetrics (nIndex=32) returned 4 [0103.977] GetSystemMetrics (nIndex=33) returned 4 [0103.977] CloseThemeData () returned 0x0 [0103.977] lstrlenA (lpString="\x92\x07") returned 2 [0103.977] lstrlenA (lpString="\x92\x07") returned 2 [0103.977] lstrlenA (lpString="\x92\x07") returned 2 [0103.977] lstrlenA (lpString="\x92\x07") returned 2 [0103.977] lstrlenA (lpString="\x92\x07") returned 2 [0103.977] lstrlenA (lpString="\x92\x07") returned 2 [0103.977] capGetDriverDescriptionA () returned 0x0 [0103.978] GetLastError () returned 0x0 [0103.978] SetLastError (dwErrCode=0x0) [0103.978] OpenThemeData () returned 0x27c0000 [0103.979] GetSystemMetrics (nIndex=32) returned 4 [0103.979] GetSystemMetrics (nIndex=33) returned 4 [0103.979] CloseThemeData () returned 0x0 [0103.979] lstrlenA (lpString="\x92\x07") returned 2 [0103.979] lstrlenA (lpString="\x92\x07") returned 2 [0103.979] lstrlenA (lpString="\x92\x07") returned 2 [0103.979] lstrlenA (lpString="\x92\x07") returned 2 [0103.979] lstrlenA (lpString="\x92\x07") returned 2 [0103.979] lstrlenA (lpString="\x92\x07") returned 2 [0103.979] capGetDriverDescriptionA () returned 0x0 [0103.980] GetLastError () returned 0x0 [0103.980] SetLastError (dwErrCode=0x0) [0103.980] OpenThemeData () returned 0x27d0000 [0103.980] GetSystemMetrics (nIndex=32) returned 4 [0103.980] GetSystemMetrics (nIndex=33) returned 4 [0103.980] CloseThemeData () returned 0x0 [0103.981] lstrlenA (lpString="\x92\x07") returned 2 [0103.981] lstrlenA (lpString="\x92\x07") returned 2 [0103.981] lstrlenA (lpString="\x92\x07") returned 2 [0103.981] lstrlenA (lpString="\x92\x07") returned 2 [0103.981] lstrlenA (lpString="\x92\x07") returned 2 [0103.981] lstrlenA (lpString="\x92\x07") returned 2 [0103.981] capGetDriverDescriptionA () returned 0x0 [0103.981] GetLastError () returned 0x0 [0103.981] SetLastError (dwErrCode=0x0) [0103.982] OpenThemeData () returned 0x27e0000 [0103.982] GetSystemMetrics (nIndex=32) returned 4 [0103.982] GetSystemMetrics (nIndex=33) returned 4 [0103.982] CloseThemeData () returned 0x0 [0103.982] lstrlenA (lpString="\x92\x07") returned 2 [0103.982] lstrlenA (lpString="\x92\x07") returned 2 [0103.982] lstrlenA (lpString="\x92\x07") returned 2 [0103.982] lstrlenA (lpString="\x92\x07") returned 2 [0103.983] lstrlenA (lpString="\x92\x07") returned 2 [0103.983] lstrlenA (lpString="\x92\x07") returned 2 [0103.983] capGetDriverDescriptionA () returned 0x0 [0103.983] GetLastError () returned 0x0 [0103.983] SetLastError (dwErrCode=0x0) [0103.983] OpenThemeData () returned 0x27f0000 [0104.392] GetSystemMetrics (nIndex=32) returned 4 [0104.392] GetSystemMetrics (nIndex=33) returned 4 [0104.392] CloseThemeData () returned 0x0 [0104.392] lstrlenA (lpString="\x92\x07") returned 2 [0104.392] lstrlenA (lpString="\x92\x07") returned 2 [0104.392] lstrlenA (lpString="\x92\x07") returned 2 [0104.392] lstrlenA (lpString="\x92\x07") returned 2 [0104.392] lstrlenA (lpString="\x92\x07") returned 2 [0104.392] lstrlenA (lpString="\x92\x07") returned 2 [0104.393] capGetDriverDescriptionA () returned 0x0 [0104.393] GetLastError () returned 0x0 [0104.393] SetLastError (dwErrCode=0x0) [0104.393] OpenThemeData () returned 0x2800000 [0104.394] GetSystemMetrics (nIndex=32) returned 4 [0104.394] GetSystemMetrics (nIndex=33) returned 4 [0104.394] CloseThemeData () returned 0x0 [0104.394] lstrlenA (lpString="\x92\x07") returned 2 [0104.394] lstrlenA (lpString="\x92\x07") returned 2 [0104.394] lstrlenA (lpString="\x92\x07") returned 2 [0104.394] capGetDriverDescriptionA () returned 0x0 [0104.395] GetLastError () returned 0x0 [0104.395] SetLastError (dwErrCode=0x0) [0104.395] OpenThemeData () returned 0x2810000 [0104.396] GetSystemMetrics (nIndex=32) returned 4 [0104.396] GetSystemMetrics (nIndex=33) returned 4 [0104.396] CloseThemeData () returned 0x0 [0104.396] capGetDriverDescriptionA () returned 0x0 [0104.397] GetLastError () returned 0x0 [0104.397] SetLastError (dwErrCode=0x0) [0104.397] OpenThemeData () returned 0x2820000 [0104.398] GetSystemMetrics (nIndex=32) returned 4 [0104.398] GetSystemMetrics (nIndex=33) returned 4 [0104.398] CloseThemeData () returned 0x0 [0104.398] capGetDriverDescriptionA () returned 0x0 [0104.399] GetLastError () returned 0x0 [0104.399] SetLastError (dwErrCode=0x0) [0104.399] OpenThemeData () returned 0x2830000 [0104.399] GetSystemMetrics (nIndex=32) returned 4 [0104.399] GetSystemMetrics (nIndex=33) returned 4 [0104.399] CloseThemeData () returned 0x0 [0104.400] capGetDriverDescriptionA () returned 0x0 [0104.400] GetLastError () returned 0x0 [0104.400] SetLastError (dwErrCode=0x0) [0104.400] OpenThemeData () returned 0x2840000 [0104.401] GetSystemMetrics (nIndex=32) returned 4 [0104.401] GetSystemMetrics (nIndex=33) returned 4 [0104.401] CloseThemeData () returned 0x0 [0104.401] capGetDriverDescriptionA () returned 0x0 [0104.402] GetLastError () returned 0x0 [0104.402] SetLastError (dwErrCode=0x0) [0104.402] OpenThemeData () returned 0x2850000 [0104.405] GetSystemMetrics (nIndex=32) returned 4 [0104.405] GetSystemMetrics (nIndex=33) returned 4 [0104.405] CloseThemeData () returned 0x0 [0104.405] capGetDriverDescriptionA () returned 0x0 [0104.406] GetLastError () returned 0x0 [0104.406] SetLastError (dwErrCode=0x0) [0104.406] OpenThemeData () returned 0x2860000 [0104.406] GetSystemMetrics (nIndex=32) returned 4 [0104.406] GetSystemMetrics (nIndex=33) returned 4 [0104.406] CloseThemeData () returned 0x0 [0104.407] capGetDriverDescriptionA () returned 0x0 [0104.407] GetLastError () returned 0x0 [0104.407] SetLastError (dwErrCode=0x0) [0104.407] OpenThemeData () returned 0x2870000 [0104.408] GetSystemMetrics (nIndex=32) returned 4 [0104.408] GetSystemMetrics (nIndex=33) returned 4 [0104.408] CloseThemeData () returned 0x0 [0104.408] capGetDriverDescriptionA () returned 0x0 [0104.409] GetLastError () returned 0x0 [0104.409] SetLastError (dwErrCode=0x0) [0104.409] OpenThemeData () returned 0x2880000 [0104.409] GetSystemMetrics (nIndex=32) returned 4 [0104.409] GetSystemMetrics (nIndex=33) returned 4 [0104.410] CloseThemeData () returned 0x0 [0104.410] capGetDriverDescriptionA () returned 0x0 [0104.410] GetLastError () returned 0x0 [0104.411] SetLastError (dwErrCode=0x0) [0104.411] OpenThemeData () returned 0x2890000 [0104.411] GetSystemMetrics (nIndex=32) returned 4 [0104.411] GetSystemMetrics (nIndex=33) returned 4 [0104.411] CloseThemeData () returned 0x0 [0104.412] capGetDriverDescriptionA () returned 0x0 [0104.412] GetLastError () returned 0x0 [0104.412] SetLastError (dwErrCode=0x0) [0104.412] OpenThemeData () returned 0x28a0000 [0104.413] GetSystemMetrics (nIndex=32) returned 4 [0104.413] GetSystemMetrics (nIndex=33) returned 4 [0104.413] CloseThemeData () returned 0x0 [0104.413] capGetDriverDescriptionA () returned 0x0 [0104.414] GetLastError () returned 0x0 [0104.414] SetLastError (dwErrCode=0x0) [0104.414] OpenThemeData () returned 0x28b0000 [0104.415] GetSystemMetrics (nIndex=32) returned 4 [0104.415] GetSystemMetrics (nIndex=33) returned 4 [0104.415] CloseThemeData () returned 0x0 [0104.415] capGetDriverDescriptionA () returned 0x0 [0104.416] GetLastError () returned 0x0 [0104.416] SetLastError (dwErrCode=0x0) [0104.416] OpenThemeData () returned 0x28c0000 [0104.416] GetSystemMetrics (nIndex=32) returned 4 [0104.416] GetSystemMetrics (nIndex=33) returned 4 [0104.416] CloseThemeData () returned 0x0 [0104.417] capGetDriverDescriptionA () returned 0x0 [0104.417] GetLastError () returned 0x0 [0104.417] SetLastError (dwErrCode=0x0) [0104.417] OpenThemeData () returned 0x28d0000 [0104.418] GetSystemMetrics (nIndex=32) returned 4 [0104.418] GetSystemMetrics (nIndex=33) returned 4 [0104.418] CloseThemeData () returned 0x0 [0104.418] capGetDriverDescriptionA () returned 0x0 [0104.419] GetLastError () returned 0x0 [0104.419] SetLastError (dwErrCode=0x0) [0104.419] OpenThemeData () returned 0x28e0000 [0104.419] GetSystemMetrics (nIndex=32) returned 4 [0104.419] GetSystemMetrics (nIndex=33) returned 4 [0104.419] CloseThemeData () returned 0x0 [0104.420] capGetDriverDescriptionA () returned 0x0 [0104.420] GetLastError () returned 0x0 [0104.420] SetLastError (dwErrCode=0x0) [0104.420] OpenThemeData () returned 0x28f0000 [0104.421] GetSystemMetrics (nIndex=32) returned 4 [0104.421] GetSystemMetrics (nIndex=33) returned 4 [0104.421] CloseThemeData () returned 0x0 [0104.421] capGetDriverDescriptionA () returned 0x0 [0104.422] GetLastError () returned 0x0 [0104.422] SetLastError (dwErrCode=0x0) [0104.422] OpenThemeData () returned 0x2900000 [0104.423] GetSystemMetrics (nIndex=32) returned 4 [0104.423] GetSystemMetrics (nIndex=33) returned 4 [0104.423] CloseThemeData () returned 0x0 [0104.423] capGetDriverDescriptionA () returned 0x0 [0104.424] GetLastError () returned 0x0 [0104.424] SetLastError (dwErrCode=0x0) [0104.424] OpenThemeData () returned 0x2910000 [0104.424] GetSystemMetrics (nIndex=32) returned 4 [0104.424] GetSystemMetrics (nIndex=33) returned 4 [0104.424] CloseThemeData () returned 0x0 [0104.425] capGetDriverDescriptionA () returned 0x0 [0104.425] GetLastError () returned 0x0 [0104.425] SetLastError (dwErrCode=0x0) [0104.425] OpenThemeData () returned 0x2920000 [0104.426] GetSystemMetrics (nIndex=32) returned 4 [0104.426] GetSystemMetrics (nIndex=33) returned 4 [0104.426] CloseThemeData () returned 0x0 [0104.426] capGetDriverDescriptionA () returned 0x0 [0104.427] GetLastError () returned 0x0 [0104.427] SetLastError (dwErrCode=0x0) [0104.427] OpenThemeData () returned 0x2930000 [0104.427] GetSystemMetrics (nIndex=32) returned 4 [0104.427] GetSystemMetrics (nIndex=33) returned 4 [0104.427] CloseThemeData () returned 0x0 [0104.428] capGetDriverDescriptionA () returned 0x0 [0104.428] GetLastError () returned 0x0 [0104.428] SetLastError (dwErrCode=0x0) [0104.428] OpenThemeData () returned 0x2940000 [0104.722] GetSystemMetrics (nIndex=32) returned 4 [0104.722] GetSystemMetrics (nIndex=33) returned 4 [0104.722] CloseThemeData () returned 0x0 [0104.722] capGetDriverDescriptionA () returned 0x0 [0104.723] GetLastError () returned 0x0 [0104.723] SetLastError (dwErrCode=0x0) [0104.723] OpenThemeData () returned 0x2950000 [0104.724] GetSystemMetrics (nIndex=32) returned 4 [0104.724] GetSystemMetrics (nIndex=33) returned 4 [0104.724] CloseThemeData () returned 0x0 [0104.724] capGetDriverDescriptionA () returned 0x0 [0104.725] GetLastError () returned 0x0 [0104.725] SetLastError (dwErrCode=0x0) [0104.725] OpenThemeData () returned 0x2960000 [0104.725] GetSystemMetrics (nIndex=32) returned 4 [0104.725] GetSystemMetrics (nIndex=33) returned 4 [0104.725] CloseThemeData () returned 0x0 [0104.726] capGetDriverDescriptionA () returned 0x0 [0104.726] GetLastError () returned 0x0 [0104.727] SetLastError (dwErrCode=0x0) [0104.727] OpenThemeData () returned 0x2970000 [0104.727] GetSystemMetrics (nIndex=32) returned 4 [0104.727] GetSystemMetrics (nIndex=33) returned 4 [0104.727] CloseThemeData () returned 0x0 [0104.728] capGetDriverDescriptionA () returned 0x0 [0104.728] GetLastError () returned 0x0 [0104.728] SetLastError (dwErrCode=0x0) [0104.728] OpenThemeData () returned 0x2980000 [0104.729] GetSystemMetrics (nIndex=32) returned 4 [0104.729] GetSystemMetrics (nIndex=33) returned 4 [0104.729] CloseThemeData () returned 0x0 [0104.730] capGetDriverDescriptionA () returned 0x0 [0104.731] GetLastError () returned 0x0 [0104.731] SetLastError (dwErrCode=0x0) [0104.731] OpenThemeData () returned 0x2990000 [0104.733] GetSystemMetrics (nIndex=32) returned 4 [0104.733] GetSystemMetrics (nIndex=33) returned 4 [0104.733] CloseThemeData () returned 0x0 [0104.734] capGetDriverDescriptionA () returned 0x0 [0104.734] GetLastError () returned 0x0 [0104.734] SetLastError (dwErrCode=0x0) [0104.734] OpenThemeData () returned 0x29a0000 [0104.735] GetSystemMetrics (nIndex=32) returned 4 [0104.735] GetSystemMetrics (nIndex=33) returned 4 [0104.735] CloseThemeData () returned 0x0 [0104.735] capGetDriverDescriptionA () returned 0x0 [0104.736] GetLastError () returned 0x0 [0104.736] SetLastError (dwErrCode=0x0) [0104.736] OpenThemeData () returned 0x29b0000 [0104.736] GetSystemMetrics (nIndex=32) returned 4 [0104.736] GetSystemMetrics (nIndex=33) returned 4 [0104.736] CloseThemeData () returned 0x0 [0104.737] capGetDriverDescriptionA () returned 0x0 [0104.737] GetLastError () returned 0x0 [0104.737] SetLastError (dwErrCode=0x0) [0104.737] OpenThemeData () returned 0x29c0000 [0104.738] GetSystemMetrics (nIndex=32) returned 4 [0104.738] GetSystemMetrics (nIndex=33) returned 4 [0104.738] CloseThemeData () returned 0x0 [0104.738] capGetDriverDescriptionA () returned 0x0 [0104.739] GetLastError () returned 0x0 [0104.739] SetLastError (dwErrCode=0x0) [0104.739] OpenThemeData () returned 0x29d0000 [0104.740] GetSystemMetrics (nIndex=32) returned 4 [0104.740] GetSystemMetrics (nIndex=33) returned 4 [0104.740] CloseThemeData () returned 0x0 [0104.740] capGetDriverDescriptionA () returned 0x0 [0104.741] GetLastError () returned 0x0 [0104.741] SetLastError (dwErrCode=0x0) [0104.741] OpenThemeData () returned 0x29e0000 [0104.741] GetSystemMetrics (nIndex=32) returned 4 [0104.741] GetSystemMetrics (nIndex=33) returned 4 [0104.741] CloseThemeData () returned 0x0 [0104.742] capGetDriverDescriptionA () returned 0x0 [0104.742] GetLastError () returned 0x0 [0104.742] SetLastError (dwErrCode=0x0) [0104.742] OpenThemeData () returned 0x29f0000 [0104.743] GetSystemMetrics (nIndex=32) returned 4 [0104.743] GetSystemMetrics (nIndex=33) returned 4 [0104.743] CloseThemeData () returned 0x0 [0104.743] capGetDriverDescriptionA () returned 0x0 [0104.744] GetLastError () returned 0x0 [0104.744] SetLastError (dwErrCode=0x0) [0104.744] OpenThemeData () returned 0x2a00000 [0104.745] GetSystemMetrics (nIndex=32) returned 4 [0104.745] GetSystemMetrics (nIndex=33) returned 4 [0104.745] CloseThemeData () returned 0x0 [0104.745] capGetDriverDescriptionA () returned 0x0 [0104.746] GetLastError () returned 0x0 [0104.746] SetLastError (dwErrCode=0x0) [0104.746] OpenThemeData () returned 0x2a10000 [0104.746] GetSystemMetrics (nIndex=32) returned 4 [0104.746] GetSystemMetrics (nIndex=33) returned 4 [0104.746] CloseThemeData () returned 0x0 [0104.747] capGetDriverDescriptionA () returned 0x0 [0104.747] GetLastError () returned 0x0 [0104.747] SetLastError (dwErrCode=0x0) [0104.747] OpenThemeData () returned 0x2a20000 [0104.748] GetSystemMetrics (nIndex=32) returned 4 [0104.748] GetSystemMetrics (nIndex=33) returned 4 [0104.748] CloseThemeData () returned 0x0 [0104.748] capGetDriverDescriptionA () returned 0x0 [0104.749] GetLastError () returned 0x0 [0104.749] SetLastError (dwErrCode=0x0) [0104.749] OpenThemeData () returned 0x2a30000 [0104.750] GetSystemMetrics (nIndex=32) returned 4 [0104.750] GetSystemMetrics (nIndex=33) returned 4 [0104.750] CloseThemeData () returned 0x0 [0104.750] capGetDriverDescriptionA () returned 0x0 [0104.751] GetLastError () returned 0x0 [0104.751] SetLastError (dwErrCode=0x0) [0104.751] OpenThemeData () returned 0x2a40000 [0104.751] GetSystemMetrics (nIndex=32) returned 4 [0104.751] GetSystemMetrics (nIndex=33) returned 4 [0104.751] CloseThemeData () returned 0x0 [0104.752] capGetDriverDescriptionA () returned 0x0 [0104.752] GetLastError () returned 0x0 [0104.752] SetLastError (dwErrCode=0x0) [0104.752] OpenThemeData () returned 0x2a50000 [0104.753] GetSystemMetrics (nIndex=32) returned 4 [0104.753] GetSystemMetrics (nIndex=33) returned 4 [0104.753] CloseThemeData () returned 0x0 [0104.753] capGetDriverDescriptionA () returned 0x0 [0104.754] GetLastError () returned 0x0 [0104.754] SetLastError (dwErrCode=0x0) [0104.754] OpenThemeData () returned 0x2a60000 [0104.754] GetSystemMetrics (nIndex=32) returned 4 [0104.754] GetSystemMetrics (nIndex=33) returned 4 [0104.754] CloseThemeData () returned 0x0 [0104.755] capGetDriverDescriptionA () returned 0x0 [0104.755] GetLastError () returned 0x0 [0104.755] SetLastError (dwErrCode=0x0) [0104.755] OpenThemeData () returned 0x2a70000 [0104.756] GetSystemMetrics (nIndex=32) returned 4 [0104.756] GetSystemMetrics (nIndex=33) returned 4 [0104.756] CloseThemeData () returned 0x0 [0104.756] capGetDriverDescriptionA () returned 0x0 [0105.070] GetLastError () returned 0x0 [0105.070] SetLastError (dwErrCode=0x0) [0105.070] OpenThemeData () returned 0x2a80000 [0105.071] GetSystemMetrics (nIndex=32) returned 4 [0105.071] GetSystemMetrics (nIndex=33) returned 4 [0105.071] CloseThemeData () returned 0x0 [0105.072] capGetDriverDescriptionA () returned 0x0 [0105.072] GetLastError () returned 0x0 [0105.072] SetLastError (dwErrCode=0x0) [0105.072] OpenThemeData () returned 0x2a90000 [0105.073] GetSystemMetrics (nIndex=32) returned 4 [0105.073] GetSystemMetrics (nIndex=33) returned 4 [0105.073] CloseThemeData () returned 0x0 [0105.073] capGetDriverDescriptionA () returned 0x0 [0105.074] GetLastError () returned 0x0 [0105.074] SetLastError (dwErrCode=0x0) [0105.074] OpenThemeData () returned 0x2aa0000 [0105.074] GetSystemMetrics (nIndex=32) returned 4 [0105.075] GetSystemMetrics (nIndex=33) returned 4 [0105.075] CloseThemeData () returned 0x0 [0105.075] capGetDriverDescriptionA () returned 0x0 [0105.076] GetLastError () returned 0x0 [0105.076] SetLastError (dwErrCode=0x0) [0105.076] OpenThemeData () returned 0x2ab0000 [0105.076] GetSystemMetrics (nIndex=32) returned 4 [0105.076] GetSystemMetrics (nIndex=33) returned 4 [0105.076] CloseThemeData () returned 0x0 [0105.077] capGetDriverDescriptionA () returned 0x0 [0105.077] GetLastError () returned 0x0 [0105.077] SetLastError (dwErrCode=0x0) [0105.077] OpenThemeData () returned 0x2ac0000 [0105.078] GetSystemMetrics (nIndex=32) returned 4 [0105.078] GetSystemMetrics (nIndex=33) returned 4 [0105.078] CloseThemeData () returned 0x0 [0105.078] capGetDriverDescriptionA () returned 0x0 [0105.079] GetLastError () returned 0x0 [0105.079] SetLastError (dwErrCode=0x0) [0105.079] OpenThemeData () returned 0x2ad0000 [0105.079] GetSystemMetrics (nIndex=32) returned 4 [0105.079] GetSystemMetrics (nIndex=33) returned 4 [0105.079] CloseThemeData () returned 0x0 [0105.080] capGetDriverDescriptionA () returned 0x0 [0105.080] GetLastError () returned 0x0 [0105.080] SetLastError (dwErrCode=0x0) [0105.080] OpenThemeData () returned 0x2ae0000 [0105.081] GetSystemMetrics (nIndex=32) returned 4 [0105.081] GetSystemMetrics (nIndex=33) returned 4 [0105.081] CloseThemeData () returned 0x0 [0105.081] capGetDriverDescriptionA () returned 0x0 [0105.082] GetLastError () returned 0x0 [0105.082] SetLastError (dwErrCode=0x0) [0105.082] OpenThemeData () returned 0x2af0000 [0105.083] GetSystemMetrics (nIndex=32) returned 4 [0105.083] GetSystemMetrics (nIndex=33) returned 4 [0105.083] CloseThemeData () returned 0x0 [0105.083] capGetDriverDescriptionA () returned 0x0 [0105.084] GetLastError () returned 0x0 [0105.084] SetLastError (dwErrCode=0x0) [0105.084] OpenThemeData () returned 0x2b00000 [0105.084] GetSystemMetrics (nIndex=32) returned 4 [0105.084] GetSystemMetrics (nIndex=33) returned 4 [0105.084] CloseThemeData () returned 0x0 [0105.085] capGetDriverDescriptionA () returned 0x0 [0105.085] GetLastError () returned 0x0 [0105.085] SetLastError (dwErrCode=0x0) [0105.085] OpenThemeData () returned 0x2b10000 [0105.086] GetSystemMetrics (nIndex=32) returned 4 [0105.086] GetSystemMetrics (nIndex=33) returned 4 [0105.086] CloseThemeData () returned 0x0 [0105.086] capGetDriverDescriptionA () returned 0x0 [0105.087] GetLastError () returned 0x0 [0105.087] SetLastError (dwErrCode=0x0) [0105.087] OpenThemeData () returned 0x2b20000 [0105.088] GetSystemMetrics (nIndex=32) returned 4 [0105.088] GetSystemMetrics (nIndex=33) returned 4 [0105.088] CloseThemeData () returned 0x0 [0105.088] capGetDriverDescriptionA () returned 0x0 [0105.089] GetLastError () returned 0x0 [0105.089] SetLastError (dwErrCode=0x0) [0105.089] OpenThemeData () returned 0x2b30000 [0105.089] GetSystemMetrics (nIndex=32) returned 4 [0105.089] GetSystemMetrics (nIndex=33) returned 4 [0105.089] CloseThemeData () returned 0x0 [0105.090] capGetDriverDescriptionA () returned 0x0 [0105.090] GetLastError () returned 0x0 [0105.090] SetLastError (dwErrCode=0x0) [0105.090] OpenThemeData () returned 0x2b40000 [0105.091] GetSystemMetrics (nIndex=32) returned 4 [0105.091] GetSystemMetrics (nIndex=33) returned 4 [0105.091] CloseThemeData () returned 0x0 [0105.091] capGetDriverDescriptionA () returned 0x0 [0105.092] GetLastError () returned 0x0 [0105.092] SetLastError (dwErrCode=0x0) [0105.092] OpenThemeData () returned 0x2b50000 [0105.092] GetSystemMetrics (nIndex=32) returned 4 [0105.092] GetSystemMetrics (nIndex=33) returned 4 [0105.092] CloseThemeData () returned 0x0 [0105.093] capGetDriverDescriptionA () returned 0x0 [0105.093] GetLastError () returned 0x0 [0105.093] SetLastError (dwErrCode=0x0) [0105.093] OpenThemeData () returned 0x2b60000 [0105.094] GetSystemMetrics (nIndex=32) returned 4 [0105.094] GetSystemMetrics (nIndex=33) returned 4 [0105.094] CloseThemeData () returned 0x0 [0105.094] capGetDriverDescriptionA () returned 0x0 [0105.095] GetLastError () returned 0x0 [0105.095] SetLastError (dwErrCode=0x0) [0105.095] OpenThemeData () returned 0x2b70000 [0105.095] GetSystemMetrics (nIndex=32) returned 4 [0105.095] GetSystemMetrics (nIndex=33) returned 4 [0105.096] CloseThemeData () returned 0x0 [0105.096] capGetDriverDescriptionA () returned 0x0 [0105.096] GetLastError () returned 0x0 [0105.096] SetLastError (dwErrCode=0x0) [0105.097] OpenThemeData () returned 0x2b80000 [0105.097] GetSystemMetrics (nIndex=32) returned 4 [0105.097] GetSystemMetrics (nIndex=33) returned 4 [0105.097] CloseThemeData () returned 0x0 [0105.097] capGetDriverDescriptionA () returned 0x0 [0105.098] GetLastError () returned 0x0 [0105.098] SetLastError (dwErrCode=0x0) [0105.098] OpenThemeData () returned 0x2b90000 [0105.099] GetSystemMetrics (nIndex=32) returned 4 [0105.099] GetSystemMetrics (nIndex=33) returned 4 [0105.099] CloseThemeData () returned 0x0 [0105.099] capGetDriverDescriptionA () returned 0x0 [0105.100] GetLastError () returned 0x0 [0105.100] SetLastError (dwErrCode=0x0) [0105.100] OpenThemeData () returned 0x2ba0000 [0105.100] GetSystemMetrics (nIndex=32) returned 4 [0105.100] GetSystemMetrics (nIndex=33) returned 4 [0105.100] CloseThemeData () returned 0x0 [0105.101] capGetDriverDescriptionA () returned 0x0 [0105.101] GetLastError () returned 0x0 [0105.101] SetLastError (dwErrCode=0x0) [0105.101] OpenThemeData () returned 0x2bb0000 [0105.102] GetSystemMetrics (nIndex=32) returned 4 [0105.102] GetSystemMetrics (nIndex=33) returned 4 [0105.102] CloseThemeData () returned 0x0 [0105.102] capGetDriverDescriptionA () returned 0x0 [0105.103] GetLastError () returned 0x0 [0105.103] SetLastError (dwErrCode=0x0) [0105.103] OpenThemeData () returned 0x2bc0000 [0105.103] GetSystemMetrics (nIndex=32) returned 4 [0105.103] GetSystemMetrics (nIndex=33) returned 4 [0105.103] CloseThemeData () returned 0x0 [0105.104] capGetDriverDescriptionA () returned 0x0 [0105.104] GetLastError () returned 0x0 [0105.104] SetLastError (dwErrCode=0x0) [0105.104] OpenThemeData () returned 0x2bd0000 [0105.105] GetSystemMetrics (nIndex=32) returned 4 [0105.105] GetSystemMetrics (nIndex=33) returned 4 [0105.105] CloseThemeData () returned 0x0 [0105.105] capGetDriverDescriptionA () returned 0x0 [0105.106] GetLastError () returned 0x0 [0105.106] SetLastError (dwErrCode=0x0) [0105.106] OpenThemeData () returned 0x2be0000 [0105.106] GetSystemMetrics (nIndex=32) returned 4 [0105.106] GetSystemMetrics (nIndex=33) returned 4 [0105.106] CloseThemeData () returned 0x0 [0105.107] capGetDriverDescriptionA () returned 0x0 [0105.107] GetLastError () returned 0x0 [0105.107] SetLastError (dwErrCode=0x0) [0105.107] OpenThemeData () returned 0x2bf0000 [0105.108] GetSystemMetrics (nIndex=32) returned 4 [0105.108] GetSystemMetrics (nIndex=33) returned 4 [0105.108] CloseThemeData () returned 0x0 [0105.108] capGetDriverDescriptionA () returned 0x0 [0105.109] GetLastError () returned 0x0 [0105.109] SetLastError (dwErrCode=0x0) [0105.109] OpenThemeData () returned 0x2c00000 [0105.110] GetSystemMetrics (nIndex=32) returned 4 [0105.110] GetSystemMetrics (nIndex=33) returned 4 [0105.110] CloseThemeData () returned 0x0 [0105.110] capGetDriverDescriptionA () returned 0x0 [0105.111] GetLastError () returned 0x0 [0105.111] SetLastError (dwErrCode=0x0) [0105.111] OpenThemeData () returned 0x2c10000 [0105.111] GetSystemMetrics (nIndex=32) returned 4 [0105.111] GetSystemMetrics (nIndex=33) returned 4 [0105.111] CloseThemeData () returned 0x0 [0105.112] capGetDriverDescriptionA () returned 0x0 [0105.112] GetLastError () returned 0x0 [0105.112] SetLastError (dwErrCode=0x0) [0105.112] OpenThemeData () returned 0x2c20000 [0105.113] GetSystemMetrics (nIndex=32) returned 4 [0105.113] GetSystemMetrics (nIndex=33) returned 4 [0105.113] CloseThemeData () returned 0x0 [0105.113] capGetDriverDescriptionA () returned 0x0 [0105.114] GetLastError () returned 0x0 [0105.114] SetLastError (dwErrCode=0x0) [0105.114] OpenThemeData () returned 0x2c30000 [0105.114] GetSystemMetrics (nIndex=32) returned 4 [0105.114] GetSystemMetrics (nIndex=33) returned 4 [0105.114] CloseThemeData () returned 0x0 [0105.115] capGetDriverDescriptionA () returned 0x0 [0105.115] GetLastError () returned 0x0 [0105.115] SetLastError (dwErrCode=0x0) [0105.115] OpenThemeData () returned 0x2c40000 [0105.116] GetSystemMetrics (nIndex=32) returned 4 [0105.116] GetSystemMetrics (nIndex=33) returned 4 [0105.116] CloseThemeData () returned 0x0 [0105.554] capGetDriverDescriptionA () returned 0x0 [0105.555] GetLastError () returned 0x0 [0105.555] SetLastError (dwErrCode=0x0) [0105.555] OpenThemeData () returned 0x2c50000 [0105.556] GetSystemMetrics (nIndex=32) returned 4 [0105.556] GetSystemMetrics (nIndex=33) returned 4 [0105.556] CloseThemeData () returned 0x0 [0105.556] capGetDriverDescriptionA () returned 0x0 [0105.557] GetLastError () returned 0x0 [0105.557] SetLastError (dwErrCode=0x0) [0105.557] OpenThemeData () returned 0x2c60000 [0105.557] GetSystemMetrics (nIndex=32) returned 4 [0105.557] GetSystemMetrics (nIndex=33) returned 4 [0105.557] CloseThemeData () returned 0x0 [0105.558] capGetDriverDescriptionA () returned 0x0 [0105.558] GetLastError () returned 0x0 [0105.558] SetLastError (dwErrCode=0x0) [0105.559] OpenThemeData () returned 0x2c70000 [0105.559] GetSystemMetrics (nIndex=32) returned 4 [0105.559] GetSystemMetrics (nIndex=33) returned 4 [0105.559] CloseThemeData () returned 0x0 [0105.559] capGetDriverDescriptionA () returned 0x0 [0105.560] GetLastError () returned 0x0 [0105.560] SetLastError (dwErrCode=0x0) [0105.560] OpenThemeData () returned 0x2c80000 [0105.561] GetSystemMetrics (nIndex=32) returned 4 [0105.561] GetSystemMetrics (nIndex=33) returned 4 [0105.561] CloseThemeData () returned 0x0 [0105.561] capGetDriverDescriptionA () returned 0x0 [0105.562] GetLastError () returned 0x0 [0105.562] SetLastError (dwErrCode=0x0) [0105.562] OpenThemeData () returned 0x2c90000 [0105.562] GetSystemMetrics (nIndex=32) returned 4 [0105.562] GetSystemMetrics (nIndex=33) returned 4 [0105.562] CloseThemeData () returned 0x0 [0105.563] capGetDriverDescriptionA () returned 0x0 [0105.563] GetLastError () returned 0x0 [0105.563] SetLastError (dwErrCode=0x0) [0105.563] OpenThemeData () returned 0x2ca0000 [0105.564] GetSystemMetrics (nIndex=32) returned 4 [0105.564] GetSystemMetrics (nIndex=33) returned 4 [0105.564] CloseThemeData () returned 0x0 [0105.564] capGetDriverDescriptionA () returned 0x0 [0105.565] GetLastError () returned 0x0 [0105.565] SetLastError (dwErrCode=0x0) [0105.565] OpenThemeData () returned 0x2cb0000 [0105.565] GetSystemMetrics (nIndex=32) returned 4 [0105.565] GetSystemMetrics (nIndex=33) returned 4 [0105.565] CloseThemeData () returned 0x0 [0105.566] capGetDriverDescriptionA () returned 0x0 [0105.566] GetLastError () returned 0x0 [0105.566] SetLastError (dwErrCode=0x0) [0105.566] OpenThemeData () returned 0x2cc0000 [0105.567] GetSystemMetrics (nIndex=32) returned 4 [0105.567] GetSystemMetrics (nIndex=33) returned 4 [0105.567] CloseThemeData () returned 0x0 [0105.567] capGetDriverDescriptionA () returned 0x0 [0105.568] GetLastError () returned 0x0 [0105.568] SetLastError (dwErrCode=0x0) [0105.568] OpenThemeData () returned 0x2cd0000 [0105.569] GetSystemMetrics (nIndex=32) returned 4 [0105.569] GetSystemMetrics (nIndex=33) returned 4 [0105.569] CloseThemeData () returned 0x0 [0105.569] capGetDriverDescriptionA () returned 0x0 [0105.570] GetLastError () returned 0x0 [0105.570] SetLastError (dwErrCode=0x0) [0105.570] OpenThemeData () returned 0x2ce0000 [0105.570] GetSystemMetrics (nIndex=32) returned 4 [0105.570] GetSystemMetrics (nIndex=33) returned 4 [0105.570] CloseThemeData () returned 0x0 [0105.571] capGetDriverDescriptionA () returned 0x0 [0105.571] GetLastError () returned 0x0 [0105.571] SetLastError (dwErrCode=0x0) [0105.571] OpenThemeData () returned 0x2cf0000 [0105.572] GetSystemMetrics (nIndex=32) returned 4 [0105.572] GetSystemMetrics (nIndex=33) returned 4 [0105.572] CloseThemeData () returned 0x0 [0105.572] capGetDriverDescriptionA () returned 0x0 [0105.573] GetLastError () returned 0x0 [0105.573] SetLastError (dwErrCode=0x0) [0105.573] OpenThemeData () returned 0x2d00000 [0105.574] GetSystemMetrics (nIndex=32) returned 4 [0105.574] GetSystemMetrics (nIndex=33) returned 4 [0105.574] CloseThemeData () returned 0x0 [0105.574] capGetDriverDescriptionA () returned 0x0 [0105.575] GetLastError () returned 0x0 [0105.575] SetLastError (dwErrCode=0x0) [0105.575] OpenThemeData () returned 0x2d10000 [0105.575] GetSystemMetrics (nIndex=32) returned 4 [0105.575] GetSystemMetrics (nIndex=33) returned 4 [0105.575] CloseThemeData () returned 0x0 [0105.576] capGetDriverDescriptionA () returned 0x0 [0105.576] GetLastError () returned 0x0 [0105.576] SetLastError (dwErrCode=0x0) [0105.576] OpenThemeData () returned 0x2d20000 [0105.577] GetSystemMetrics (nIndex=32) returned 4 [0105.577] GetSystemMetrics (nIndex=33) returned 4 [0105.577] CloseThemeData () returned 0x0 [0105.577] capGetDriverDescriptionA () returned 0x0 [0105.578] GetLastError () returned 0x0 [0105.578] SetLastError (dwErrCode=0x0) [0105.578] OpenThemeData () returned 0x2d30000 [0105.580] GetSystemMetrics (nIndex=32) returned 4 [0105.580] GetSystemMetrics (nIndex=33) returned 4 [0105.580] CloseThemeData () returned 0x0 [0105.580] capGetDriverDescriptionA () returned 0x0 [0105.581] GetLastError () returned 0x0 [0105.581] SetLastError (dwErrCode=0x0) [0105.581] OpenThemeData () returned 0x2d40000 [0105.581] GetSystemMetrics (nIndex=32) returned 4 [0105.581] GetSystemMetrics (nIndex=33) returned 4 [0105.581] CloseThemeData () returned 0x0 [0105.582] capGetDriverDescriptionA () returned 0x0 [0105.582] GetLastError () returned 0x0 [0105.582] SetLastError (dwErrCode=0x0) [0105.582] OpenThemeData () returned 0x2d50000 [0105.583] GetSystemMetrics (nIndex=32) returned 4 [0105.583] GetSystemMetrics (nIndex=33) returned 4 [0105.583] CloseThemeData () returned 0x0 [0105.583] capGetDriverDescriptionA () returned 0x0 [0105.584] GetLastError () returned 0x0 [0105.584] SetLastError (dwErrCode=0x0) [0105.584] OpenThemeData () returned 0x2d60000 [0105.585] GetSystemMetrics (nIndex=32) returned 4 [0105.585] GetSystemMetrics (nIndex=33) returned 4 [0105.585] CloseThemeData () returned 0x0 [0105.585] capGetDriverDescriptionA () returned 0x0 [0105.586] GetLastError () returned 0x0 [0105.586] SetLastError (dwErrCode=0x0) [0105.586] OpenThemeData () returned 0x2d70000 [0105.587] GetSystemMetrics (nIndex=32) returned 4 [0105.587] GetSystemMetrics (nIndex=33) returned 4 [0105.587] CloseThemeData () returned 0x0 [0105.587] capGetDriverDescriptionA () returned 0x0 [0105.588] GetLastError () returned 0x0 [0105.588] SetLastError (dwErrCode=0x0) [0105.588] OpenThemeData () returned 0x2d80000 [0105.588] GetSystemMetrics (nIndex=32) returned 4 [0105.588] GetSystemMetrics (nIndex=33) returned 4 [0105.588] CloseThemeData () returned 0x0 [0105.589] capGetDriverDescriptionA () returned 0x0 [0105.589] GetLastError () returned 0x0 [0105.589] SetLastError (dwErrCode=0x0) [0105.589] OpenThemeData () returned 0x2d90000 [0105.590] GetSystemMetrics (nIndex=32) returned 4 [0105.590] GetSystemMetrics (nIndex=33) returned 4 [0105.590] CloseThemeData () returned 0x0 [0105.590] capGetDriverDescriptionA () returned 0x0 [0105.591] GetLastError () returned 0x0 [0105.591] SetLastError (dwErrCode=0x0) [0105.591] OpenThemeData () returned 0x2da0000 [0105.592] GetSystemMetrics (nIndex=32) returned 4 [0105.592] GetSystemMetrics (nIndex=33) returned 4 [0105.592] CloseThemeData () returned 0x0 [0105.592] capGetDriverDescriptionA () returned 0x0 [0105.593] GetLastError () returned 0x0 [0105.593] SetLastError (dwErrCode=0x0) [0105.593] OpenThemeData () returned 0x2db0000 [0105.593] GetSystemMetrics (nIndex=32) returned 4 [0105.593] GetSystemMetrics (nIndex=33) returned 4 [0105.593] CloseThemeData () returned 0x0 [0105.594] capGetDriverDescriptionA () returned 0x0 [0105.594] GetLastError () returned 0x0 [0105.594] SetLastError (dwErrCode=0x0) [0105.594] OpenThemeData () returned 0x2dc0000 [0105.595] GetSystemMetrics (nIndex=32) returned 4 [0105.595] GetSystemMetrics (nIndex=33) returned 4 [0105.595] CloseThemeData () returned 0x0 [0105.595] capGetDriverDescriptionA () returned 0x0 [0105.596] GetLastError () returned 0x0 [0105.596] SetLastError (dwErrCode=0x0) [0105.596] OpenThemeData () returned 0x2dd0000 [0105.596] GetSystemMetrics (nIndex=32) returned 4 [0105.596] GetSystemMetrics (nIndex=33) returned 4 [0105.597] CloseThemeData () returned 0x0 [0105.597] capGetDriverDescriptionA () returned 0x0 [0105.597] GetLastError () returned 0x0 [0105.598] SetLastError (dwErrCode=0x0) [0105.598] OpenThemeData () returned 0x2de0000 [0105.598] GetSystemMetrics (nIndex=32) returned 4 [0105.598] GetSystemMetrics (nIndex=33) returned 4 [0105.598] CloseThemeData () returned 0x0 [0105.598] capGetDriverDescriptionA () returned 0x0 [0105.599] GetLastError () returned 0x0 [0105.599] SetLastError (dwErrCode=0x0) [0105.599] OpenThemeData () returned 0x2df0000 [0105.600] GetSystemMetrics (nIndex=32) returned 4 [0105.600] GetSystemMetrics (nIndex=33) returned 4 [0105.600] CloseThemeData () returned 0x0 [0105.600] capGetDriverDescriptionA () returned 0x0 [0106.216] GetLastError () returned 0x0 [0106.216] SetLastError (dwErrCode=0x0) [0106.216] OpenThemeData () returned 0x2e00000 [0106.217] GetSystemMetrics (nIndex=32) returned 4 [0106.217] GetSystemMetrics (nIndex=33) returned 4 [0106.217] CloseThemeData () returned 0x0 [0106.217] capGetDriverDescriptionA () returned 0x0 [0106.218] GetLastError () returned 0x0 [0106.218] SetLastError (dwErrCode=0x0) [0106.218] OpenThemeData () returned 0x2e10000 [0106.218] GetSystemMetrics (nIndex=32) returned 4 [0106.218] GetSystemMetrics (nIndex=33) returned 4 [0106.218] CloseThemeData () returned 0x0 [0106.219] capGetDriverDescriptionA () returned 0x0 [0106.219] GetLastError () returned 0x0 [0106.219] SetLastError (dwErrCode=0x0) [0106.219] OpenThemeData () returned 0x2e20000 [0106.220] GetSystemMetrics (nIndex=32) returned 4 [0106.220] GetSystemMetrics (nIndex=33) returned 4 [0106.220] CloseThemeData () returned 0x0 [0106.220] capGetDriverDescriptionA () returned 0x0 [0106.221] GetLastError () returned 0x0 [0106.221] SetLastError (dwErrCode=0x0) [0106.221] OpenThemeData () returned 0x2e30000 [0106.222] GetSystemMetrics (nIndex=32) returned 4 [0106.222] GetSystemMetrics (nIndex=33) returned 4 [0106.222] CloseThemeData () returned 0x0 [0106.226] capGetDriverDescriptionA () returned 0x0 [0106.227] GetLastError () returned 0x0 [0106.227] SetLastError (dwErrCode=0x0) [0106.227] OpenThemeData () returned 0x2e40000 [0106.228] GetSystemMetrics (nIndex=32) returned 4 [0106.228] GetSystemMetrics (nIndex=33) returned 4 [0106.228] CloseThemeData () returned 0x0 [0106.228] capGetDriverDescriptionA () returned 0x0 [0106.229] GetLastError () returned 0x0 [0106.229] SetLastError (dwErrCode=0x0) [0106.229] OpenThemeData () returned 0x2e50000 [0106.230] GetSystemMetrics (nIndex=32) returned 4 [0106.231] GetSystemMetrics (nIndex=33) returned 4 [0106.231] CloseThemeData () returned 0x0 [0106.231] capGetDriverDescriptionA () returned 0x0 [0106.232] GetLastError () returned 0x0 [0106.232] SetLastError (dwErrCode=0x0) [0106.232] OpenThemeData () returned 0x2e60000 [0106.232] GetSystemMetrics (nIndex=32) returned 4 [0106.232] GetSystemMetrics (nIndex=33) returned 4 [0106.232] CloseThemeData () returned 0x0 [0106.233] capGetDriverDescriptionA () returned 0x0 [0106.233] GetLastError () returned 0x0 [0106.233] SetLastError (dwErrCode=0x0) [0106.233] OpenThemeData () returned 0x2e70000 [0106.234] GetSystemMetrics (nIndex=32) returned 4 [0106.234] GetSystemMetrics (nIndex=33) returned 4 [0106.234] CloseThemeData () returned 0x0 [0106.234] capGetDriverDescriptionA () returned 0x0 [0106.235] GetLastError () returned 0x0 [0106.235] SetLastError (dwErrCode=0x0) [0106.235] OpenThemeData () returned 0x2e80000 [0106.236] GetSystemMetrics (nIndex=32) returned 4 [0106.236] GetSystemMetrics (nIndex=33) returned 4 [0106.236] CloseThemeData () returned 0x0 [0106.236] capGetDriverDescriptionA () returned 0x0 [0106.237] GetLastError () returned 0x0 [0106.237] SetLastError (dwErrCode=0x0) [0106.237] OpenThemeData () returned 0x2e90000 [0106.237] GetSystemMetrics (nIndex=32) returned 4 [0106.237] GetSystemMetrics (nIndex=33) returned 4 [0106.237] CloseThemeData () returned 0x0 [0106.238] capGetDriverDescriptionA () returned 0x0 [0106.238] GetLastError () returned 0x0 [0106.238] SetLastError (dwErrCode=0x0) [0106.238] OpenThemeData () returned 0x2ea0000 [0106.239] GetSystemMetrics (nIndex=32) returned 4 [0106.239] GetSystemMetrics (nIndex=33) returned 4 [0106.239] CloseThemeData () returned 0x0 [0106.239] capGetDriverDescriptionA () returned 0x0 [0106.240] GetLastError () returned 0x0 [0106.240] SetLastError (dwErrCode=0x0) [0106.240] OpenThemeData () returned 0x2eb0000 [0106.241] GetSystemMetrics (nIndex=32) returned 4 [0106.241] GetSystemMetrics (nIndex=33) returned 4 [0106.241] CloseThemeData () returned 0x0 [0106.241] lstrlenA (lpString="\x92\x07") returned 2 [0106.241] lstrlenA (lpString="\x92\x07") returned 2 [0106.241] lstrlenA (lpString="\x92\x07") returned 2 [0106.241] lstrlenA (lpString="\x92\x07") returned 2 [0106.241] lstrlenA (lpString="\x92\x07") returned 2 [0106.241] lstrlenA (lpString="\x92\x07") returned 2 [0106.242] capGetDriverDescriptionA () returned 0x0 [0106.242] GetLastError () returned 0x0 [0106.242] SetLastError (dwErrCode=0x0) [0106.242] OpenThemeData () returned 0x2ec0000 [0106.243] GetSystemMetrics (nIndex=32) returned 4 [0106.243] GetSystemMetrics (nIndex=33) returned 4 [0106.243] CloseThemeData () returned 0x0 [0106.243] lstrlenA (lpString="\x92\x07") returned 2 [0106.243] lstrlenA (lpString="\x92\x07") returned 2 [0106.243] lstrlenA (lpString="\x92\x07") returned 2 [0106.243] lstrlenA (lpString="\x92\x07") returned 2 [0106.243] lstrlenA (lpString="\x92\x07") returned 2 [0106.243] lstrlenA (lpString="\x92\x07") returned 2 [0106.243] capGetDriverDescriptionA () returned 0x0 [0106.244] GetLastError () returned 0x0 [0106.244] SetLastError (dwErrCode=0x0) [0106.244] OpenThemeData () returned 0x2ed0000 [0106.245] GetSystemMetrics (nIndex=32) returned 4 [0106.245] GetSystemMetrics (nIndex=33) returned 4 [0106.245] CloseThemeData () returned 0x0 [0106.245] lstrlenA (lpString="\x92\x07") returned 2 [0106.245] lstrlenA (lpString="\x92\x07") returned 2 [0106.245] lstrlenA (lpString="\x92\x07") returned 2 [0106.245] lstrlenA (lpString="\x92\x07") returned 2 [0106.245] lstrlenA (lpString="\x92\x07") returned 2 [0106.245] lstrlenA (lpString="\x92\x07") returned 2 [0106.245] capGetDriverDescriptionA () returned 0x0 [0106.246] GetLastError () returned 0x0 [0106.246] SetLastError (dwErrCode=0x0) [0106.246] OpenThemeData () returned 0x2ee0000 [0106.246] GetSystemMetrics (nIndex=32) returned 4 [0106.246] GetSystemMetrics (nIndex=33) returned 4 [0106.246] CloseThemeData () returned 0x0 [0106.247] lstrlenA (lpString="\x92\x07") returned 2 [0106.247] lstrlenA (lpString="\x92\x07") returned 2 [0106.247] lstrlenA (lpString="\x92\x07") returned 2 [0106.247] lstrlenA (lpString="\x92\x07") returned 2 [0106.247] lstrlenA (lpString="\x92\x07") returned 2 [0106.247] lstrlenA (lpString="\x92\x07") returned 2 [0106.247] capGetDriverDescriptionA () returned 0x0 [0106.248] GetLastError () returned 0x0 [0106.248] SetLastError (dwErrCode=0x0) [0106.248] OpenThemeData () returned 0x2ef0000 [0106.248] GetSystemMetrics (nIndex=32) returned 4 [0106.248] GetSystemMetrics (nIndex=33) returned 4 [0106.248] CloseThemeData () returned 0x0 [0106.249] lstrlenA (lpString="\x92\x07") returned 2 [0106.249] lstrlenA (lpString="\x92\x07") returned 2 [0106.249] lstrlenA (lpString="\x92\x07") returned 2 [0106.249] lstrlenA (lpString="\x92\x07") returned 2 [0106.249] lstrlenA (lpString="\x92\x07") returned 2 [0106.249] lstrlenA (lpString="\x92\x07") returned 2 [0106.249] capGetDriverDescriptionA () returned 0x0 [0106.249] GetLastError () returned 0x0 [0106.249] SetLastError (dwErrCode=0x0) [0106.249] OpenThemeData () returned 0x2f00000 [0106.250] GetSystemMetrics (nIndex=32) returned 4 [0106.250] GetSystemMetrics (nIndex=33) returned 4 [0106.250] CloseThemeData () returned 0x0 [0106.250] lstrlenA (lpString="\x92\x07") returned 2 [0106.250] lstrlenA (lpString="\x92\x07") returned 2 [0106.250] lstrlenA (lpString="\x92\x07") returned 2 [0106.250] lstrlenA (lpString="\x92\x07") returned 2 [0106.250] lstrlenA (lpString="\x92\x07") returned 2 [0106.250] lstrlenA (lpString="\x92\x07") returned 2 [0106.251] capGetDriverDescriptionA () returned 0x0 [0106.251] GetLastError () returned 0x0 [0106.251] SetLastError (dwErrCode=0x0) [0106.251] OpenThemeData () returned 0x2f10000 [0106.252] GetSystemMetrics (nIndex=32) returned 4 [0106.252] GetSystemMetrics (nIndex=33) returned 4 [0106.252] CloseThemeData () returned 0x0 [0106.540] lstrlenA (lpString="\x92\x07") returned 2 [0106.540] lstrlenA (lpString="\x92\x07") returned 2 [0106.540] lstrlenA (lpString="\x92\x07") returned 2 [0106.540] lstrlenA (lpString="\x92\x07") returned 2 [0106.540] lstrlenA (lpString="\x92\x07") returned 2 [0106.540] lstrlenA (lpString="\x92\x07") returned 2 [0106.540] capGetDriverDescriptionA () returned 0x0 [0106.540] GetLastError () returned 0x0 [0106.541] SetLastError (dwErrCode=0x0) [0106.541] OpenThemeData () returned 0x2f20000 [0106.541] GetSystemMetrics (nIndex=32) returned 4 [0106.541] GetSystemMetrics (nIndex=33) returned 4 [0106.541] CloseThemeData () returned 0x0 [0106.542] lstrlenA (lpString="\x92\x07") returned 2 [0106.542] lstrlenA (lpString="\x92\x07") returned 2 [0106.542] lstrlenA (lpString="\x92\x07") returned 2 [0106.542] lstrlenA (lpString="\x92\x07") returned 2 [0106.542] lstrlenA (lpString="\x92\x07") returned 2 [0106.542] lstrlenA (lpString="\x92\x07") returned 2 [0106.542] capGetDriverDescriptionA () returned 0x0 [0106.542] GetLastError () returned 0x0 [0106.542] SetLastError (dwErrCode=0x0) [0106.542] OpenThemeData () returned 0x2f30000 [0106.543] GetSystemMetrics (nIndex=32) returned 4 [0106.543] GetSystemMetrics (nIndex=33) returned 4 [0106.543] CloseThemeData () returned 0x0 [0106.543] lstrlenA (lpString="\x92\x07") returned 2 [0106.543] lstrlenA (lpString="\x92\x07") returned 2 [0106.543] lstrlenA (lpString="\x92\x07") returned 2 [0106.543] lstrlenA (lpString="\x92\x07") returned 2 [0106.543] lstrlenA (lpString="\x92\x07") returned 2 [0106.543] lstrlenA (lpString="\x92\x07") returned 2 [0106.544] capGetDriverDescriptionA () returned 0x0 [0106.544] GetLastError () returned 0x0 [0106.544] SetLastError (dwErrCode=0x0) [0106.544] OpenThemeData () returned 0x2f40000 [0106.545] GetSystemMetrics (nIndex=32) returned 4 [0106.545] GetSystemMetrics (nIndex=33) returned 4 [0106.545] CloseThemeData () returned 0x0 [0106.545] lstrlenA (lpString="\x92\x07") returned 2 [0106.545] lstrlenA (lpString="\x92\x07") returned 2 [0106.545] lstrlenA (lpString="\x92\x07") returned 2 [0106.545] lstrlenA (lpString="\x92\x07") returned 2 [0106.545] lstrlenA (lpString="\x92\x07") returned 2 [0106.545] lstrlenA (lpString="\x92\x07") returned 2 [0106.545] capGetDriverDescriptionA () returned 0x0 [0106.546] GetLastError () returned 0x0 [0106.546] SetLastError (dwErrCode=0x0) [0106.546] OpenThemeData () returned 0x2f50000 [0106.547] GetSystemMetrics (nIndex=32) returned 4 [0106.547] GetSystemMetrics (nIndex=33) returned 4 [0106.547] CloseThemeData () returned 0x0 [0106.547] lstrlenA (lpString="\x92\x07") returned 2 [0106.547] lstrlenA (lpString="\x92\x07") returned 2 [0106.547] lstrlenA (lpString="\x92\x07") returned 2 [0106.547] lstrlenA (lpString="\x92\x07") returned 2 [0106.547] lstrlenA (lpString="\x92\x07") returned 2 [0106.547] lstrlenA (lpString="\x92\x07") returned 2 [0106.547] capGetDriverDescriptionA () returned 0x0 [0106.548] GetLastError () returned 0x0 [0106.548] SetLastError (dwErrCode=0x0) [0106.548] OpenThemeData () returned 0x2f60000 [0106.548] GetSystemMetrics (nIndex=32) returned 4 [0106.548] GetSystemMetrics (nIndex=33) returned 4 [0106.548] CloseThemeData () returned 0x0 [0106.549] lstrlenA (lpString="\x92\x07") returned 2 [0106.549] lstrlenA (lpString="\x92\x07") returned 2 [0106.549] lstrlenA (lpString="\x92\x07") returned 2 [0106.549] lstrlenA (lpString="\x92\x07") returned 2 [0106.549] lstrlenA (lpString="\x92\x07") returned 2 [0106.549] lstrlenA (lpString="\x92\x07") returned 2 [0106.549] capGetDriverDescriptionA () returned 0x0 [0106.549] GetLastError () returned 0x0 [0106.549] SetLastError (dwErrCode=0x0) [0106.549] OpenThemeData () returned 0x2f70000 [0106.550] GetSystemMetrics (nIndex=32) returned 4 [0106.550] GetSystemMetrics (nIndex=33) returned 4 [0106.550] CloseThemeData () returned 0x0 [0106.550] lstrlenA (lpString="\x92\x07") returned 2 [0106.550] lstrlenA (lpString="\x92\x07") returned 2 [0106.550] lstrlenA (lpString="\x92\x07") returned 2 [0106.550] lstrlenA (lpString="\x92\x07") returned 2 [0106.550] lstrlenA (lpString="\x92\x07") returned 2 [0106.550] lstrlenA (lpString="\x92\x07") returned 2 [0106.550] capGetDriverDescriptionA () returned 0x0 [0106.551] GetLastError () returned 0x0 [0106.551] SetLastError (dwErrCode=0x0) [0106.551] OpenThemeData () returned 0x2f80000 [0106.552] GetSystemMetrics (nIndex=32) returned 4 [0106.552] GetSystemMetrics (nIndex=33) returned 4 [0106.552] CloseThemeData () returned 0x0 [0106.552] lstrlenA (lpString="\x92\x07") returned 2 [0106.552] lstrlenA (lpString="\x92\x07") returned 2 [0106.552] lstrlenA (lpString="\x92\x07") returned 2 [0106.552] lstrlenA (lpString="\x92\x07") returned 2 [0106.552] lstrlenA (lpString="\x92\x07") returned 2 [0106.552] lstrlenA (lpString="\x92\x07") returned 2 [0106.552] capGetDriverDescriptionA () returned 0x0 [0106.553] GetLastError () returned 0x0 [0106.553] SetLastError (dwErrCode=0x0) [0106.553] OpenThemeData () returned 0x2f90000 [0106.556] GetSystemMetrics (nIndex=32) returned 4 [0106.556] GetSystemMetrics (nIndex=33) returned 4 [0106.556] CloseThemeData () returned 0x0 [0106.556] lstrlenA (lpString="\x92\x07") returned 2 [0106.557] lstrlenA (lpString="\x92\x07") returned 2 [0106.557] lstrlenA (lpString="\x92\x07") returned 2 [0106.557] lstrlenA (lpString="\x92\x07") returned 2 [0106.557] lstrlenA (lpString="\x92\x07") returned 2 [0106.557] lstrlenA (lpString="\x92\x07") returned 2 [0106.557] capGetDriverDescriptionA () returned 0x0 [0106.557] GetLastError () returned 0x0 [0106.557] SetLastError (dwErrCode=0x0) [0106.557] OpenThemeData () returned 0x2fa0000 [0106.558] GetSystemMetrics (nIndex=32) returned 4 [0106.558] GetSystemMetrics (nIndex=33) returned 4 [0106.558] CloseThemeData () returned 0x0 [0106.558] lstrlenA (lpString="\x92\x07") returned 2 [0106.558] lstrlenA (lpString="\x92\x07") returned 2 [0106.558] lstrlenA (lpString="\x92\x07") returned 2 [0106.558] lstrlenA (lpString="\x92\x07") returned 2 [0106.558] lstrlenA (lpString="\x92\x07") returned 2 [0106.558] lstrlenA (lpString="\x92\x07") returned 2 [0106.558] capGetDriverDescriptionA () returned 0x0 [0106.559] GetLastError () returned 0x0 [0106.559] SetLastError (dwErrCode=0x0) [0106.559] OpenThemeData () returned 0x2fb0000 [0106.560] GetSystemMetrics (nIndex=32) returned 4 [0106.560] GetSystemMetrics (nIndex=33) returned 4 [0106.560] CloseThemeData () returned 0x0 [0106.560] lstrlenA (lpString="\x92\x07") returned 2 [0106.560] lstrlenA (lpString="\x92\x07") returned 2 [0106.560] lstrlenA (lpString="\x92\x07") returned 2 [0106.560] lstrlenA (lpString="\x92\x07") returned 2 [0106.560] lstrlenA (lpString="\x92\x07") returned 2 [0106.560] lstrlenA (lpString="\x92\x07") returned 2 [0106.560] capGetDriverDescriptionA () returned 0x0 [0106.561] GetLastError () returned 0x0 [0106.561] SetLastError (dwErrCode=0x0) [0106.561] OpenThemeData () returned 0x2fc0000 [0106.561] GetSystemMetrics (nIndex=32) returned 4 [0106.561] GetSystemMetrics (nIndex=33) returned 4 [0106.561] CloseThemeData () returned 0x0 [0106.562] lstrlenA (lpString="\x92\x07") returned 2 [0106.562] lstrlenA (lpString="\x92\x07") returned 2 [0106.562] lstrlenA (lpString="\x92\x07") returned 2 [0106.562] lstrlenA (lpString="\x92\x07") returned 2 [0106.562] lstrlenA (lpString="\x92\x07") returned 2 [0106.562] lstrlenA (lpString="\x92\x07") returned 2 [0106.562] capGetDriverDescriptionA () returned 0x0 [0106.563] GetLastError () returned 0x0 [0106.563] SetLastError (dwErrCode=0x0) [0106.563] OpenThemeData () returned 0x2fd0000 [0106.563] GetSystemMetrics (nIndex=32) returned 4 [0106.563] GetSystemMetrics (nIndex=33) returned 4 [0106.563] CloseThemeData () returned 0x0 [0106.563] lstrlenA (lpString="\x92\x07") returned 2 [0106.564] lstrlenA (lpString="\x92\x07") returned 2 [0106.564] lstrlenA (lpString="\x92\x07") returned 2 [0106.564] lstrlenA (lpString="\x92\x07") returned 2 [0106.564] lstrlenA (lpString="\x92\x07") returned 2 [0106.564] lstrlenA (lpString="\x92\x07") returned 2 [0106.564] capGetDriverDescriptionA () returned 0x0 [0106.564] GetLastError () returned 0x0 [0106.564] SetLastError (dwErrCode=0x0) [0106.564] OpenThemeData () returned 0x2fe0000 [0106.565] GetSystemMetrics (nIndex=32) returned 4 [0106.565] GetSystemMetrics (nIndex=33) returned 4 [0106.565] CloseThemeData () returned 0x0 [0106.565] lstrlenA (lpString="\x92\x07") returned 2 [0106.565] lstrlenA (lpString="\x92\x07") returned 2 [0106.565] lstrlenA (lpString="\x92\x07") returned 2 [0106.565] lstrlenA (lpString="\x92\x07") returned 2 [0106.565] lstrlenA (lpString="\x92\x07") returned 2 [0106.565] lstrlenA (lpString="\x92\x07") returned 2 [0106.566] capGetDriverDescriptionA () returned 0x0 [0106.566] GetLastError () returned 0x0 [0106.566] SetLastError (dwErrCode=0x0) [0106.566] OpenThemeData () returned 0x2ff0000 [0106.567] GetSystemMetrics (nIndex=32) returned 4 [0106.567] GetSystemMetrics (nIndex=33) returned 4 [0106.567] CloseThemeData () returned 0x0 [0106.567] lstrlenA (lpString="\x92\x07") returned 2 [0106.567] lstrlenA (lpString="\x92\x07") returned 2 [0106.567] lstrlenA (lpString="\x92\x07") returned 2 [0106.567] lstrlenA (lpString="\x92\x07") returned 2 [0106.567] lstrlenA (lpString="\x92\x07") returned 2 [0106.567] lstrlenA (lpString="\x92\x07") returned 2 [0106.567] capGetDriverDescriptionA () returned 0x0 [0106.568] GetLastError () returned 0x0 [0106.568] SetLastError (dwErrCode=0x0) [0106.568] OpenThemeData () returned 0x3000000 [0106.568] GetSystemMetrics (nIndex=32) returned 4 [0106.568] GetSystemMetrics (nIndex=33) returned 4 [0106.568] CloseThemeData () returned 0x0 [0106.569] lstrlenA (lpString="\x92\x07") returned 2 [0106.569] lstrlenA (lpString="\x92\x07") returned 2 [0106.569] lstrlenA (lpString="\x92\x07") returned 2 [0106.569] lstrlenA (lpString="\x92\x07") returned 2 [0106.569] lstrlenA (lpString="\x92\x07") returned 2 [0106.569] lstrlenA (lpString="\x92\x07") returned 2 [0106.569] capGetDriverDescriptionA () returned 0x0 [0106.570] GetLastError () returned 0x0 [0106.570] SetLastError (dwErrCode=0x0) [0106.570] OpenThemeData () returned 0x3010000 [0106.570] GetSystemMetrics (nIndex=32) returned 4 [0106.570] GetSystemMetrics (nIndex=33) returned 4 [0106.570] CloseThemeData () returned 0x0 [0106.571] lstrlenA (lpString="\x92\x07") returned 2 [0106.571] lstrlenA (lpString="\x92\x07") returned 2 [0106.571] lstrlenA (lpString="\x92\x07") returned 2 [0106.571] lstrlenA (lpString="\x92\x07") returned 2 [0106.571] lstrlenA (lpString="\x92\x07") returned 2 [0106.571] lstrlenA (lpString="\x92\x07") returned 2 [0106.571] capGetDriverDescriptionA () returned 0x0 [0106.572] GetLastError () returned 0x0 [0106.572] SetLastError (dwErrCode=0x0) [0106.572] OpenThemeData () returned 0x3020000 [0106.572] GetSystemMetrics (nIndex=32) returned 4 [0106.572] GetSystemMetrics (nIndex=33) returned 4 [0106.572] CloseThemeData () returned 0x0 [0106.573] lstrlenA (lpString="\x92\x07") returned 2 [0106.573] lstrlenA (lpString="\x92\x07") returned 2 [0106.573] lstrlenA (lpString="\x92\x07") returned 2 [0106.573] lstrlenA (lpString="\x92\x07") returned 2 [0106.573] lstrlenA (lpString="\x92\x07") returned 2 [0106.573] lstrlenA (lpString="\x92\x07") returned 2 [0106.573] capGetDriverDescriptionA () returned 0x0 [0106.573] GetLastError () returned 0x0 [0106.573] SetLastError (dwErrCode=0x0) [0106.573] OpenThemeData () returned 0x3030000 [0106.574] GetSystemMetrics (nIndex=32) returned 4 [0106.574] GetSystemMetrics (nIndex=33) returned 4 [0106.574] CloseThemeData () returned 0x0 [0106.574] lstrlenA (lpString="\x92\x07") returned 2 [0106.574] lstrlenA (lpString="\x92\x07") returned 2 [0106.574] lstrlenA (lpString="\x92\x07") returned 2 [0106.574] lstrlenA (lpString="\x92\x07") returned 2 [0106.574] lstrlenA (lpString="\x92\x07") returned 2 [0106.574] lstrlenA (lpString="\x92\x07") returned 2 [0106.574] capGetDriverDescriptionA () returned 0x0 [0106.575] GetLastError () returned 0x0 [0106.575] SetLastError (dwErrCode=0x0) [0106.575] OpenThemeData () returned 0x3040000 [0107.970] GetSystemMetrics (nIndex=32) returned 4 [0107.970] GetSystemMetrics (nIndex=33) returned 4 [0107.970] CloseThemeData () returned 0x0 [0107.970] lstrlenA (lpString="\x92\x07") returned 2 [0107.970] lstrlenA (lpString="\x92\x07") returned 2 [0107.970] lstrlenA (lpString="\x92\x07") returned 2 [0107.970] lstrlenA (lpString="\x92\x07") returned 2 [0107.970] lstrlenA (lpString="\x92\x07") returned 2 [0107.970] lstrlenA (lpString="\x92\x07") returned 2 [0107.970] capGetDriverDescriptionA () returned 0x0 [0107.971] GetLastError () returned 0x0 [0107.971] SetLastError (dwErrCode=0x0) [0107.971] OpenThemeData () returned 0x3050000 [0107.971] GetSystemMetrics (nIndex=32) returned 4 [0107.971] GetSystemMetrics (nIndex=33) returned 4 [0107.972] CloseThemeData () returned 0x0 [0107.972] lstrlenA (lpString="\x92\x07") returned 2 [0107.972] lstrlenA (lpString="\x92\x07") returned 2 [0107.972] lstrlenA (lpString="\x92\x07") returned 2 [0107.972] lstrlenA (lpString="\x92\x07") returned 2 [0107.972] lstrlenA (lpString="\x92\x07") returned 2 [0107.972] lstrlenA (lpString="\x92\x07") returned 2 [0107.972] capGetDriverDescriptionA () returned 0x0 [0107.973] GetLastError () returned 0x0 [0107.973] SetLastError (dwErrCode=0x0) [0107.973] OpenThemeData () returned 0x3060000 [0107.973] GetSystemMetrics (nIndex=32) returned 4 [0107.973] GetSystemMetrics (nIndex=33) returned 4 [0107.973] CloseThemeData () returned 0x0 [0107.974] lstrlenA (lpString="\x92\x07") returned 2 [0107.974] lstrlenA (lpString="\x92\x07") returned 2 [0107.974] lstrlenA (lpString="\x92\x07") returned 2 [0107.974] lstrlenA (lpString="\x92\x07") returned 2 [0107.974] lstrlenA (lpString="\x92\x07") returned 2 [0107.974] lstrlenA (lpString="\x92\x07") returned 2 [0107.974] capGetDriverDescriptionA () returned 0x0 [0107.974] GetLastError () returned 0x0 [0107.974] SetLastError (dwErrCode=0x0) [0107.974] OpenThemeData () returned 0x3070000 [0107.975] GetSystemMetrics (nIndex=32) returned 4 [0107.975] GetSystemMetrics (nIndex=33) returned 4 [0107.975] CloseThemeData () returned 0x0 [0107.975] lstrlenA (lpString="\x92\x07") returned 2 [0107.975] lstrlenA (lpString="\x92\x07") returned 2 [0107.975] lstrlenA (lpString="\x92\x07") returned 2 [0107.975] lstrlenA (lpString="\x92\x07") returned 2 [0107.975] lstrlenA (lpString="\x92\x07") returned 2 [0107.976] lstrlenA (lpString="\x92\x07") returned 2 [0107.976] capGetDriverDescriptionA () returned 0x0 [0107.976] GetLastError () returned 0x0 [0107.976] SetLastError (dwErrCode=0x0) [0107.976] OpenThemeData () returned 0x3080000 [0107.977] GetSystemMetrics (nIndex=32) returned 4 [0107.977] GetSystemMetrics (nIndex=33) returned 4 [0107.977] CloseThemeData () returned 0x0 [0107.977] lstrlenA (lpString="\x92\x07") returned 2 [0107.977] lstrlenA (lpString="\x92\x07") returned 2 [0107.977] lstrlenA (lpString="\x92\x07") returned 2 [0107.977] lstrlenA (lpString="\x92\x07") returned 2 [0107.977] lstrlenA (lpString="\x92\x07") returned 2 [0107.977] lstrlenA (lpString="\x92\x07") returned 2 [0107.977] capGetDriverDescriptionA () returned 0x0 [0107.978] GetLastError () returned 0x0 [0107.978] SetLastError (dwErrCode=0x0) [0107.978] OpenThemeData () returned 0x3090000 [0107.978] GetSystemMetrics (nIndex=32) returned 4 [0107.978] GetSystemMetrics (nIndex=33) returned 4 [0107.979] CloseThemeData () returned 0x0 [0107.979] lstrlenA (lpString="\x92\x07") returned 2 [0107.979] lstrlenA (lpString="\x92\x07") returned 2 [0107.979] lstrlenA (lpString="\x92\x07") returned 2 [0107.979] lstrlenA (lpString="\x92\x07") returned 2 [0107.979] lstrlenA (lpString="\x92\x07") returned 2 [0107.979] lstrlenA (lpString="\x92\x07") returned 2 [0107.979] capGetDriverDescriptionA () returned 0x0 [0107.980] GetLastError () returned 0x0 [0107.980] SetLastError (dwErrCode=0x0) [0107.980] OpenThemeData () returned 0x30a0000 [0107.980] GetSystemMetrics (nIndex=32) returned 4 [0107.980] GetSystemMetrics (nIndex=33) returned 4 [0107.980] CloseThemeData () returned 0x0 [0107.981] lstrlenA (lpString="\x92\x07") returned 2 [0107.981] lstrlenA (lpString="\x92\x07") returned 2 [0107.981] lstrlenA (lpString="\x92\x07") returned 2 [0107.981] lstrlenA (lpString="\x92\x07") returned 2 [0107.981] lstrlenA (lpString="\x92\x07") returned 2 [0107.981] lstrlenA (lpString="\x92\x07") returned 2 [0107.981] capGetDriverDescriptionA () returned 0x0 [0107.982] GetLastError () returned 0x0 [0107.982] SetLastError (dwErrCode=0x0) [0107.982] OpenThemeData () returned 0x30b0000 [0107.982] GetSystemMetrics (nIndex=32) returned 4 [0107.982] GetSystemMetrics (nIndex=33) returned 4 [0107.982] CloseThemeData () returned 0x0 [0107.983] lstrlenA (lpString="\x92\x07") returned 2 [0107.983] lstrlenA (lpString="\x92\x07") returned 2 [0107.983] lstrlenA (lpString="\x92\x07") returned 2 [0107.983] lstrlenA (lpString="\x92\x07") returned 2 [0107.983] lstrlenA (lpString="\x92\x07") returned 2 [0107.983] lstrlenA (lpString="\x92\x07") returned 2 [0107.983] capGetDriverDescriptionA () returned 0x0 [0107.983] GetLastError () returned 0x0 [0107.983] SetLastError (dwErrCode=0x0) [0107.983] OpenThemeData () returned 0x30c0000 [0107.984] GetSystemMetrics (nIndex=32) returned 4 [0107.984] GetSystemMetrics (nIndex=33) returned 4 [0107.984] CloseThemeData () returned 0x0 [0107.984] lstrlenA (lpString="\x92\x07") returned 2 [0107.984] lstrlenA (lpString="\x92\x07") returned 2 [0107.984] lstrlenA (lpString="\x92\x07") returned 2 [0107.984] lstrlenA (lpString="\x92\x07") returned 2 [0107.984] lstrlenA (lpString="\x92\x07") returned 2 [0107.984] lstrlenA (lpString="\x92\x07") returned 2 [0107.984] capGetDriverDescriptionA () returned 0x0 [0107.985] GetLastError () returned 0x0 [0107.985] SetLastError (dwErrCode=0x0) [0107.985] OpenThemeData () returned 0x30d0000 [0107.986] GetSystemMetrics (nIndex=32) returned 4 [0107.986] GetSystemMetrics (nIndex=33) returned 4 [0107.986] CloseThemeData () returned 0x0 [0107.986] lstrlenA (lpString="\x92\x07") returned 2 [0107.986] lstrlenA (lpString="\x92\x07") returned 2 [0107.986] lstrlenA (lpString="\x92\x07") returned 2 [0107.986] lstrlenA (lpString="\x92\x07") returned 2 [0107.986] lstrlenA (lpString="\x92\x07") returned 2 [0107.986] lstrlenA (lpString="\x92\x07") returned 2 [0107.986] capGetDriverDescriptionA () returned 0x0 [0107.987] GetLastError () returned 0x0 [0107.987] SetLastError (dwErrCode=0x0) [0107.987] OpenThemeData () returned 0x30e0000 [0107.988] GetSystemMetrics (nIndex=32) returned 4 [0107.988] GetSystemMetrics (nIndex=33) returned 4 [0107.988] CloseThemeData () returned 0x0 [0107.988] lstrlenA (lpString="\x92\x07") returned 2 [0107.988] lstrlenA (lpString="\x92\x07") returned 2 [0107.988] lstrlenA (lpString="\x92\x07") returned 2 [0107.988] lstrlenA (lpString="\x92\x07") returned 2 [0107.988] lstrlenA (lpString="\x92\x07") returned 2 [0107.988] lstrlenA (lpString="\x92\x07") returned 2 [0107.988] capGetDriverDescriptionA () returned 0x0 [0107.989] GetLastError () returned 0x0 [0107.989] SetLastError (dwErrCode=0x0) [0107.989] OpenThemeData () returned 0x30f0000 [0107.989] GetSystemMetrics (nIndex=32) returned 4 [0107.989] GetSystemMetrics (nIndex=33) returned 4 [0107.989] CloseThemeData () returned 0x0 [0107.990] lstrlenA (lpString="\x92\x07") returned 2 [0107.990] lstrlenA (lpString="\x92\x07") returned 2 [0107.990] lstrlenA (lpString="\x92\x07") returned 2 [0107.990] lstrlenA (lpString="\x92\x07") returned 2 [0107.990] lstrlenA (lpString="\x92\x07") returned 2 [0107.990] lstrlenA (lpString="\x92\x07") returned 2 [0107.990] capGetDriverDescriptionA () returned 0x0 [0107.990] GetLastError () returned 0x0 [0107.991] SetLastError (dwErrCode=0x0) [0107.991] OpenThemeData () returned 0x3100000 [0107.991] GetSystemMetrics (nIndex=32) returned 4 [0107.991] GetSystemMetrics (nIndex=33) returned 4 [0107.991] CloseThemeData () returned 0x0 [0107.992] lstrlenA (lpString="\x92\x07") returned 2 [0107.992] lstrlenA (lpString="\x92\x07") returned 2 [0107.992] lstrlenA (lpString="\x92\x07") returned 2 [0107.992] lstrlenA (lpString="\x92\x07") returned 2 [0107.992] lstrlenA (lpString="\x92\x07") returned 2 [0107.992] lstrlenA (lpString="\x92\x07") returned 2 [0107.992] capGetDriverDescriptionA () returned 0x0 [0107.992] GetLastError () returned 0x0 [0107.992] SetLastError (dwErrCode=0x0) [0107.992] OpenThemeData () returned 0x3110000 [0107.993] GetSystemMetrics (nIndex=32) returned 4 [0107.993] GetSystemMetrics (nIndex=33) returned 4 [0107.993] CloseThemeData () returned 0x0 [0107.993] lstrlenA (lpString="\x92\x07") returned 2 [0107.993] lstrlenA (lpString="\x92\x07") returned 2 [0107.993] lstrlenA (lpString="\x92\x07") returned 2 [0107.993] lstrlenA (lpString="\x92\x07") returned 2 [0107.993] lstrlenA (lpString="\x92\x07") returned 2 [0107.993] lstrlenA (lpString="\x92\x07") returned 2 [0107.993] capGetDriverDescriptionA () returned 0x0 [0107.994] GetLastError () returned 0x0 [0107.994] SetLastError (dwErrCode=0x0) [0107.994] OpenThemeData () returned 0x3120000 [0107.995] GetSystemMetrics (nIndex=32) returned 4 [0107.995] GetSystemMetrics (nIndex=33) returned 4 [0107.995] CloseThemeData () returned 0x0 [0107.995] lstrlenA (lpString="\x92\x07") returned 2 [0107.995] lstrlenA (lpString="\x92\x07") returned 2 [0107.995] lstrlenA (lpString="\x92\x07") returned 2 [0107.995] lstrlenA (lpString="\x92\x07") returned 2 [0107.995] lstrlenA (lpString="\x92\x07") returned 2 [0107.995] lstrlenA (lpString="\x92\x07") returned 2 [0107.995] capGetDriverDescriptionA () returned 0x0 [0107.996] GetLastError () returned 0x0 [0107.996] SetLastError (dwErrCode=0x0) [0107.996] OpenThemeData () returned 0x3130000 [0107.996] GetSystemMetrics (nIndex=32) returned 4 [0107.996] GetSystemMetrics (nIndex=33) returned 4 [0107.996] CloseThemeData () returned 0x0 [0107.997] lstrlenA (lpString="\x92\x07") returned 2 [0107.997] lstrlenA (lpString="\x92\x07") returned 2 [0107.997] lstrlenA (lpString="\x92\x07") returned 2 [0107.997] lstrlenA (lpString="\x92\x07") returned 2 [0107.997] lstrlenA (lpString="\x92\x07") returned 2 [0107.997] lstrlenA (lpString="\x92\x07") returned 2 [0107.997] capGetDriverDescriptionA () returned 0x0 [0107.998] GetLastError () returned 0x0 [0107.998] SetLastError (dwErrCode=0x0) [0107.998] OpenThemeData () returned 0x3140000 [0107.998] GetSystemMetrics (nIndex=32) returned 4 [0107.998] GetSystemMetrics (nIndex=33) returned 4 [0107.998] CloseThemeData () returned 0x0 [0107.998] lstrlenA (lpString="\x92\x07") returned 2 [0107.999] lstrlenA (lpString="\x92\x07") returned 2 [0107.999] lstrlenA (lpString="\x92\x07") returned 2 [0107.999] lstrlenA (lpString="\x92\x07") returned 2 [0107.999] lstrlenA (lpString="\x92\x07") returned 2 [0107.999] lstrlenA (lpString="\x92\x07") returned 2 [0107.999] capGetDriverDescriptionA () returned 0x0 [0107.999] GetLastError () returned 0x0 [0107.999] SetLastError (dwErrCode=0x0) [0107.999] OpenThemeData () returned 0x3150000 [0108.000] GetSystemMetrics (nIndex=32) returned 4 [0108.000] GetSystemMetrics (nIndex=33) returned 4 [0108.000] CloseThemeData () returned 0x0 [0108.000] lstrlenA (lpString="\x92\x07") returned 2 [0108.000] lstrlenA (lpString="\x92\x07") returned 2 [0108.000] lstrlenA (lpString="\x92\x07") returned 2 [0108.000] lstrlenA (lpString="\x92\x07") returned 2 [0108.000] lstrlenA (lpString="\x92\x07") returned 2 [0108.000] lstrlenA (lpString="\x92\x07") returned 2 [0108.000] capGetDriverDescriptionA () returned 0x0 [0108.001] GetLastError () returned 0x0 [0108.001] SetLastError (dwErrCode=0x0) [0108.197] OpenThemeData () returned 0x3160000 [0108.201] GetSystemMetrics (nIndex=32) returned 4 [0108.201] GetSystemMetrics (nIndex=33) returned 4 [0108.201] CloseThemeData () returned 0x0 [0108.206] lstrlenA (lpString="\x92\x07") returned 2 [0108.206] lstrlenA (lpString="\x92\x07") returned 2 [0108.206] lstrlenA (lpString="\x92\x07") returned 2 [0108.206] lstrlenA (lpString="\x92\x07") returned 2 [0108.206] lstrlenA (lpString="\x92\x07") returned 2 [0108.206] lstrlenA (lpString="\x92\x07") returned 2 [0108.216] capGetDriverDescriptionA () returned 0x0 [0108.229] GetLastError () returned 0x0 [0108.233] SetLastError (dwErrCode=0x0) [0108.233] OpenThemeData () returned 0x3170000 [0108.236] GetSystemMetrics (nIndex=32) returned 4 [0108.236] GetSystemMetrics (nIndex=33) returned 4 [0108.236] CloseThemeData () returned 0x0 [0108.237] lstrlenA (lpString="\x92\x07") returned 2 [0108.237] lstrlenA (lpString="\x92\x07") returned 2 [0108.237] lstrlenA (lpString="\x92\x07") returned 2 [0108.237] lstrlenA (lpString="\x92\x07") returned 2 [0108.237] lstrlenA (lpString="\x92\x07") returned 2 [0108.237] lstrlenA (lpString="\x92\x07") returned 2 [0108.237] capGetDriverDescriptionA () returned 0x0 [0108.237] GetLastError () returned 0x0 [0108.237] SetLastError (dwErrCode=0x0) [0108.237] OpenThemeData () returned 0x3180000 [0108.238] GetSystemMetrics (nIndex=32) returned 4 [0108.238] GetSystemMetrics (nIndex=33) returned 4 [0108.238] CloseThemeData () returned 0x0 [0108.239] lstrlenA (lpString="\x92\x07") returned 2 [0108.239] lstrlenA (lpString="\x92\x07") returned 2 [0108.239] lstrlenA (lpString="\x92\x07") returned 2 [0108.239] lstrlenA (lpString="\x92\x07") returned 2 [0108.239] lstrlenA (lpString="\x92\x07") returned 2 [0108.239] lstrlenA (lpString="\x92\x07") returned 2 [0108.239] capGetDriverDescriptionA () returned 0x0 [0108.240] GetLastError () returned 0x0 [0108.240] SetLastError (dwErrCode=0x0) [0108.240] OpenThemeData () returned 0x3190000 [0108.240] GetSystemMetrics (nIndex=32) returned 4 [0108.240] GetSystemMetrics (nIndex=33) returned 4 [0108.240] CloseThemeData () returned 0x0 [0108.241] lstrlenA (lpString="\x92\x07") returned 2 [0108.241] lstrlenA (lpString="\x92\x07") returned 2 [0108.241] lstrlenA (lpString="\x92\x07") returned 2 [0108.241] lstrlenA (lpString="\x92\x07") returned 2 [0108.241] lstrlenA (lpString="\x92\x07") returned 2 [0108.241] lstrlenA (lpString="\x92\x07") returned 2 [0108.241] capGetDriverDescriptionA () returned 0x0 [0108.241] GetLastError () returned 0x0 [0108.241] SetLastError (dwErrCode=0x0) [0108.241] OpenThemeData () returned 0x31a0000 [0108.242] GetSystemMetrics (nIndex=32) returned 4 [0108.242] GetSystemMetrics (nIndex=33) returned 4 [0108.242] CloseThemeData () returned 0x0 [0108.242] lstrlenA (lpString="\x92\x07") returned 2 [0108.242] lstrlenA (lpString="\x92\x07") returned 2 [0108.242] lstrlenA (lpString="\x92\x07") returned 2 [0108.242] lstrlenA (lpString="\x92\x07") returned 2 [0108.242] lstrlenA (lpString="\x92\x07") returned 2 [0108.243] lstrlenA (lpString="\x92\x07") returned 2 [0108.243] capGetDriverDescriptionA () returned 0x0 [0108.243] GetLastError () returned 0x0 [0108.243] SetLastError (dwErrCode=0x0) [0108.243] OpenThemeData () returned 0x31b0000 [0108.244] GetSystemMetrics (nIndex=32) returned 4 [0108.244] GetSystemMetrics (nIndex=33) returned 4 [0108.244] CloseThemeData () returned 0x0 [0108.244] lstrlenA (lpString="\x92\x07") returned 2 [0108.244] lstrlenA (lpString="\x92\x07") returned 2 [0108.244] lstrlenA (lpString="\x92\x07") returned 2 [0108.244] lstrlenA (lpString="\x92\x07") returned 2 [0108.244] lstrlenA (lpString="\x92\x07") returned 2 [0108.244] lstrlenA (lpString="\x92\x07") returned 2 [0108.244] capGetDriverDescriptionA () returned 0x0 [0108.245] GetLastError () returned 0x0 [0108.245] SetLastError (dwErrCode=0x0) [0108.245] OpenThemeData () returned 0x31c0000 [0108.246] GetSystemMetrics (nIndex=32) returned 4 [0108.246] GetSystemMetrics (nIndex=33) returned 4 [0108.246] CloseThemeData () returned 0x0 [0108.246] lstrlenA (lpString="\x92\x07") returned 2 [0108.246] lstrlenA (lpString="\x92\x07") returned 2 [0108.246] lstrlenA (lpString="\x92\x07") returned 2 [0108.246] lstrlenA (lpString="\x92\x07") returned 2 [0108.246] lstrlenA (lpString="\x92\x07") returned 2 [0108.246] lstrlenA (lpString="\x92\x07") returned 2 [0108.246] capGetDriverDescriptionA () returned 0x0 [0108.247] GetLastError () returned 0x0 [0108.247] SetLastError (dwErrCode=0x0) [0108.247] OpenThemeData () returned 0x31d0000 [0108.247] GetSystemMetrics (nIndex=32) returned 4 [0108.247] GetSystemMetrics (nIndex=33) returned 4 [0108.247] CloseThemeData () returned 0x0 [0108.248] lstrlenA (lpString="\x92\x07") returned 2 [0108.248] lstrlenA (lpString="\x92\x07") returned 2 [0108.248] lstrlenA (lpString="\x92\x07") returned 2 [0108.248] lstrlenA (lpString="\x92\x07") returned 2 [0108.248] lstrlenA (lpString="\x92\x07") returned 2 [0108.248] lstrlenA (lpString="\x92\x07") returned 2 [0108.248] capGetDriverDescriptionA () returned 0x0 [0108.248] GetLastError () returned 0x0 [0108.248] SetLastError (dwErrCode=0x0) [0108.248] OpenThemeData () returned 0x31e0000 [0108.249] GetSystemMetrics (nIndex=32) returned 4 [0108.249] GetSystemMetrics (nIndex=33) returned 4 [0108.249] CloseThemeData () returned 0x0 [0108.250] lstrlenA (lpString="\x92\x07") returned 2 [0108.250] lstrlenA (lpString="\x92\x07") returned 2 [0108.250] lstrlenA (lpString="\x92\x07") returned 2 [0108.250] lstrlenA (lpString="\x92\x07") returned 2 [0108.250] lstrlenA (lpString="\x92\x07") returned 2 [0108.250] lstrlenA (lpString="\x92\x07") returned 2 [0108.250] capGetDriverDescriptionA () returned 0x0 [0108.251] GetLastError () returned 0x0 [0108.251] SetLastError (dwErrCode=0x0) [0108.251] OpenThemeData () returned 0x31f0000 [0108.251] GetSystemMetrics (nIndex=32) returned 4 [0108.251] GetSystemMetrics (nIndex=33) returned 4 [0108.251] CloseThemeData () returned 0x0 [0108.252] lstrlenA (lpString="\x92\x07") returned 2 [0108.252] lstrlenA (lpString="\x92\x07") returned 2 [0108.252] lstrlenA (lpString="\x92\x07") returned 2 [0108.252] lstrlenA (lpString="\x92\x07") returned 2 [0108.252] lstrlenA (lpString="\x92\x07") returned 2 [0108.252] lstrlenA (lpString="\x92\x07") returned 2 [0108.252] capGetDriverDescriptionA () returned 0x0 [0108.252] GetLastError () returned 0x0 [0108.253] SetLastError (dwErrCode=0x0) [0108.253] OpenThemeData () returned 0x3200000 [0108.253] GetSystemMetrics (nIndex=32) returned 4 [0108.253] GetSystemMetrics (nIndex=33) returned 4 [0108.253] CloseThemeData () returned 0x0 [0108.253] lstrlenA (lpString="\x92\x07") returned 2 [0108.253] lstrlenA (lpString="\x92\x07") returned 2 [0108.253] lstrlenA (lpString="\x92\x07") returned 2 [0108.254] lstrlenA (lpString="\x92\x07") returned 2 [0108.254] lstrlenA (lpString="\x92\x07") returned 2 [0108.254] lstrlenA (lpString="\x92\x07") returned 2 [0108.254] capGetDriverDescriptionA () returned 0x0 [0108.254] GetLastError () returned 0x0 [0108.254] SetLastError (dwErrCode=0x0) [0108.254] OpenThemeData () returned 0x3210000 [0108.255] GetSystemMetrics (nIndex=32) returned 4 [0108.255] GetSystemMetrics (nIndex=33) returned 4 [0108.255] CloseThemeData () returned 0x0 [0108.255] lstrlenA (lpString="\x92\x07") returned 2 [0108.255] lstrlenA (lpString="\x92\x07") returned 2 [0108.255] lstrlenA (lpString="\x92\x07") returned 2 [0108.255] lstrlenA (lpString="\x92\x07") returned 2 [0108.255] lstrlenA (lpString="\x92\x07") returned 2 [0108.255] lstrlenA (lpString="\x92\x07") returned 2 [0108.255] capGetDriverDescriptionA () returned 0x0 [0108.256] GetLastError () returned 0x0 [0108.256] SetLastError (dwErrCode=0x0) [0108.256] OpenThemeData () returned 0x3220000 [0108.257] GetSystemMetrics (nIndex=32) returned 4 [0108.257] GetSystemMetrics (nIndex=33) returned 4 [0108.257] CloseThemeData () returned 0x0 [0108.257] lstrlenA (lpString="\x92\x07") returned 2 [0108.257] lstrlenA (lpString="\x92\x07") returned 2 [0108.257] lstrlenA (lpString="\x92\x07") returned 2 [0108.257] lstrlenA (lpString="\x92\x07") returned 2 [0108.257] lstrlenA (lpString="\x92\x07") returned 2 [0108.257] lstrlenA (lpString="\x92\x07") returned 2 [0108.257] capGetDriverDescriptionA () returned 0x0 [0108.258] GetLastError () returned 0x0 [0108.258] SetLastError (dwErrCode=0x0) [0108.258] OpenThemeData () returned 0x3230000 [0108.258] GetSystemMetrics (nIndex=32) returned 4 [0108.258] GetSystemMetrics (nIndex=33) returned 4 [0108.258] CloseThemeData () returned 0x0 [0108.259] lstrlenA (lpString="\x92\x07") returned 2 [0108.259] lstrlenA (lpString="\x92\x07") returned 2 [0108.259] lstrlenA (lpString="\x92\x07") returned 2 [0108.259] lstrlenA (lpString="\x92\x07") returned 2 [0108.259] lstrlenA (lpString="\x92\x07") returned 2 [0108.259] lstrlenA (lpString="\x92\x07") returned 2 [0108.259] capGetDriverDescriptionA () returned 0x0 [0108.259] GetLastError () returned 0x0 [0108.259] SetLastError (dwErrCode=0x0) [0108.259] OpenThemeData () returned 0x3240000 [0108.260] GetSystemMetrics (nIndex=32) returned 4 [0108.260] GetSystemMetrics (nIndex=33) returned 4 [0108.260] CloseThemeData () returned 0x0 [0108.260] lstrlenA (lpString="\x92\x07") returned 2 [0108.261] lstrlenA (lpString="\x92\x07") returned 2 [0108.261] lstrlenA (lpString="\x92\x07") returned 2 [0108.261] lstrlenA (lpString="\x92\x07") returned 2 [0108.261] lstrlenA (lpString="\x92\x07") returned 2 [0108.261] lstrlenA (lpString="\x92\x07") returned 2 [0108.261] capGetDriverDescriptionA () returned 0x0 [0108.261] GetLastError () returned 0x0 [0108.261] SetLastError (dwErrCode=0x0) [0108.261] OpenThemeData () returned 0x3250000 [0108.262] GetSystemMetrics (nIndex=32) returned 4 [0108.262] GetSystemMetrics (nIndex=33) returned 4 [0108.262] CloseThemeData () returned 0x0 [0108.262] lstrlenA (lpString="\x92\x07") returned 2 [0108.262] lstrlenA (lpString="\x92\x07") returned 2 [0108.262] lstrlenA (lpString="\x92\x07") returned 2 [0108.262] lstrlenA (lpString="\x92\x07") returned 2 [0108.262] lstrlenA (lpString="\x92\x07") returned 2 [0108.262] lstrlenA (lpString="\x92\x07") returned 2 [0108.262] capGetDriverDescriptionA () returned 0x0 [0108.263] GetLastError () returned 0x0 [0108.263] SetLastError (dwErrCode=0x0) [0108.263] OpenThemeData () returned 0x3260000 [0108.264] GetSystemMetrics (nIndex=32) returned 4 [0108.264] GetSystemMetrics (nIndex=33) returned 4 [0108.264] CloseThemeData () returned 0x0 [0108.264] lstrlenA (lpString="\x92\x07") returned 2 [0108.264] lstrlenA (lpString="\x92\x07") returned 2 [0108.264] lstrlenA (lpString="\x92\x07") returned 2 [0108.264] lstrlenA (lpString="\x92\x07") returned 2 [0108.264] lstrlenA (lpString="\x92\x07") returned 2 [0108.264] lstrlenA (lpString="\x92\x07") returned 2 [0108.264] capGetDriverDescriptionA () returned 0x0 [0108.265] GetLastError () returned 0x0 [0108.265] SetLastError (dwErrCode=0x0) [0108.265] OpenThemeData () returned 0x3270000 [0108.265] GetSystemMetrics (nIndex=32) returned 4 [0108.265] GetSystemMetrics (nIndex=33) returned 4 [0108.265] CloseThemeData () returned 0x0 [0108.663] lstrlenA (lpString="\x92\x07") returned 2 [0108.663] lstrlenA (lpString="\x92\x07") returned 2 [0108.663] lstrlenA (lpString="\x92\x07") returned 2 [0108.663] lstrlenA (lpString="\x92\x07") returned 2 [0108.663] lstrlenA (lpString="\x92\x07") returned 2 [0108.663] lstrlenA (lpString="\x92\x07") returned 2 [0108.664] capGetDriverDescriptionA () returned 0x0 [0108.686] GetLastError () returned 0x0 [0108.686] SetLastError (dwErrCode=0x0) [0108.686] OpenThemeData () returned 0x3280000 [0108.694] GetSystemMetrics (nIndex=32) returned 4 [0108.694] GetSystemMetrics (nIndex=33) returned 4 [0108.694] CloseThemeData () returned 0x0 [0108.701] lstrlenA (lpString="\x92\x07") returned 2 [0108.701] lstrlenA (lpString="\x92\x07") returned 2 [0108.701] lstrlenA (lpString="\x92\x07") returned 2 [0108.701] lstrlenA (lpString="\x92\x07") returned 2 [0108.701] lstrlenA (lpString="\x92\x07") returned 2 [0108.701] lstrlenA (lpString="\x92\x07") returned 2 [0108.701] capGetDriverDescriptionA () returned 0x0 [0108.702] GetLastError () returned 0x0 [0108.702] SetLastError (dwErrCode=0x0) [0108.702] OpenThemeData () returned 0x3290000 [0108.702] GetSystemMetrics (nIndex=32) returned 4 [0108.702] GetSystemMetrics (nIndex=33) returned 4 [0108.702] CloseThemeData () returned 0x0 [0108.703] lstrlenA (lpString="\x92\x07") returned 2 [0108.703] lstrlenA (lpString="\x92\x07") returned 2 [0108.703] lstrlenA (lpString="\x92\x07") returned 2 [0108.703] lstrlenA (lpString="\x92\x07") returned 2 [0108.703] lstrlenA (lpString="\x92\x07") returned 2 [0108.703] lstrlenA (lpString="\x92\x07") returned 2 [0108.703] capGetDriverDescriptionA () returned 0x0 [0108.704] GetLastError () returned 0x0 [0108.704] SetLastError (dwErrCode=0x0) [0108.704] OpenThemeData () returned 0x32a0000 [0108.704] GetSystemMetrics (nIndex=32) returned 4 [0108.704] GetSystemMetrics (nIndex=33) returned 4 [0108.704] CloseThemeData () returned 0x0 [0108.705] lstrlenA (lpString="\x92\x07") returned 2 [0108.705] lstrlenA (lpString="\x92\x07") returned 2 [0108.705] lstrlenA (lpString="\x92\x07") returned 2 [0108.705] lstrlenA (lpString="\x92\x07") returned 2 [0108.705] lstrlenA (lpString="\x92\x07") returned 2 [0108.705] lstrlenA (lpString="\x92\x07") returned 2 [0108.705] capGetDriverDescriptionA () returned 0x0 [0108.705] GetLastError () returned 0x0 [0108.705] SetLastError (dwErrCode=0x0) [0108.705] OpenThemeData () returned 0x32b0000 [0108.706] GetSystemMetrics (nIndex=32) returned 4 [0108.706] GetSystemMetrics (nIndex=33) returned 4 [0108.706] CloseThemeData () returned 0x0 [0108.706] lstrlenA (lpString="\x92\x07") returned 2 [0108.706] lstrlenA (lpString="\x92\x07") returned 2 [0108.706] lstrlenA (lpString="\x92\x07") returned 2 [0108.706] lstrlenA (lpString="\x92\x07") returned 2 [0108.706] lstrlenA (lpString="\x92\x07") returned 2 [0108.706] lstrlenA (lpString="\x92\x07") returned 2 [0108.707] capGetDriverDescriptionA () returned 0x0 [0108.707] GetLastError () returned 0x0 [0108.707] SetLastError (dwErrCode=0x0) [0108.707] OpenThemeData () returned 0x32c0000 [0108.708] GetSystemMetrics (nIndex=32) returned 4 [0108.708] GetSystemMetrics (nIndex=33) returned 4 [0108.708] CloseThemeData () returned 0x0 [0108.708] lstrlenA (lpString="\x92\x07") returned 2 [0108.708] lstrlenA (lpString="\x92\x07") returned 2 [0108.708] lstrlenA (lpString="\x92\x07") returned 2 [0108.708] lstrlenA (lpString="\x92\x07") returned 2 [0108.708] lstrlenA (lpString="\x92\x07") returned 2 [0108.708] lstrlenA (lpString="\x92\x07") returned 2 [0108.708] capGetDriverDescriptionA () returned 0x0 [0108.709] GetLastError () returned 0x0 [0108.709] SetLastError (dwErrCode=0x0) [0108.709] OpenThemeData () returned 0x32d0000 [0108.709] GetSystemMetrics (nIndex=32) returned 4 [0108.709] GetSystemMetrics (nIndex=33) returned 4 [0108.709] CloseThemeData () returned 0x0 [0108.710] lstrlenA (lpString="\x92\x07") returned 2 [0108.710] lstrlenA (lpString="\x92\x07") returned 2 [0108.710] lstrlenA (lpString="\x92\x07") returned 2 [0108.710] lstrlenA (lpString="\x92\x07") returned 2 [0108.710] lstrlenA (lpString="\x92\x07") returned 2 [0108.710] lstrlenA (lpString="\x92\x07") returned 2 [0108.710] capGetDriverDescriptionA () returned 0x0 [0108.710] GetLastError () returned 0x0 [0108.710] SetLastError (dwErrCode=0x0) [0108.711] OpenThemeData () returned 0x32e0000 [0108.712] GetSystemMetrics (nIndex=32) returned 4 [0108.712] GetSystemMetrics (nIndex=33) returned 4 [0108.712] CloseThemeData () returned 0x0 [0108.712] lstrlenA (lpString="\x92\x07") returned 2 [0108.712] lstrlenA (lpString="\x92\x07") returned 2 [0108.712] lstrlenA (lpString="\x92\x07") returned 2 [0108.712] lstrlenA (lpString="\x92\x07") returned 2 [0108.712] lstrlenA (lpString="\x92\x07") returned 2 [0108.712] lstrlenA (lpString="\x92\x07") returned 2 [0108.712] capGetDriverDescriptionA () returned 0x0 [0108.713] GetLastError () returned 0x0 [0108.713] SetLastError (dwErrCode=0x0) [0108.713] OpenThemeData () returned 0x32f0000 [0108.713] GetSystemMetrics (nIndex=32) returned 4 [0108.713] GetSystemMetrics (nIndex=33) returned 4 [0108.713] CloseThemeData () returned 0x0 [0108.714] lstrlenA (lpString="\x92\x07") returned 2 [0108.714] lstrlenA (lpString="\x92\x07") returned 2 [0108.714] lstrlenA (lpString="\x92\x07") returned 2 [0108.714] lstrlenA (lpString="\x92\x07") returned 2 [0108.714] lstrlenA (lpString="\x92\x07") returned 2 [0108.714] lstrlenA (lpString="\x92\x07") returned 2 [0108.714] capGetDriverDescriptionA () returned 0x0 [0108.714] GetLastError () returned 0x0 [0108.714] SetLastError (dwErrCode=0x0) [0108.714] OpenThemeData () returned 0x3300000 [0108.715] GetSystemMetrics (nIndex=32) returned 4 [0108.715] GetSystemMetrics (nIndex=33) returned 4 [0108.715] CloseThemeData () returned 0x0 [0108.715] lstrlenA (lpString="\x92\x07") returned 2 [0108.715] lstrlenA (lpString="\x92\x07") returned 2 [0108.715] lstrlenA (lpString="\x92\x07") returned 2 [0108.715] lstrlenA (lpString="\x92\x07") returned 2 [0108.715] lstrlenA (lpString="\x92\x07") returned 2 [0108.715] lstrlenA (lpString="\x92\x07") returned 2 [0108.716] capGetDriverDescriptionA () returned 0x0 [0108.716] GetLastError () returned 0x0 [0108.716] SetLastError (dwErrCode=0x0) [0108.716] OpenThemeData () returned 0x3310000 [0108.717] GetSystemMetrics (nIndex=32) returned 4 [0108.717] GetSystemMetrics (nIndex=33) returned 4 [0108.717] CloseThemeData () returned 0x0 [0108.717] lstrlenA (lpString="\x92\x07") returned 2 [0108.717] lstrlenA (lpString="\x92\x07") returned 2 [0108.717] lstrlenA (lpString="\x92\x07") returned 2 [0108.717] lstrlenA (lpString="\x92\x07") returned 2 [0108.717] lstrlenA (lpString="\x92\x07") returned 2 [0108.717] lstrlenA (lpString="\x92\x07") returned 2 [0108.717] capGetDriverDescriptionA () returned 0x0 [0108.718] GetLastError () returned 0x0 [0108.718] SetLastError (dwErrCode=0x0) [0108.718] OpenThemeData () returned 0x3320000 [0108.719] GetSystemMetrics (nIndex=32) returned 4 [0108.719] GetSystemMetrics (nIndex=33) returned 4 [0108.719] CloseThemeData () returned 0x0 [0108.719] lstrlenA (lpString="\x92\x07") returned 2 [0108.719] lstrlenA (lpString="\x92\x07") returned 2 [0108.719] lstrlenA (lpString="\x92\x07") returned 2 [0108.719] lstrlenA (lpString="\x92\x07") returned 2 [0108.719] lstrlenA (lpString="\x92\x07") returned 2 [0108.719] lstrlenA (lpString="\x92\x07") returned 2 [0108.719] capGetDriverDescriptionA () returned 0x0 [0108.720] GetLastError () returned 0x0 [0108.720] SetLastError (dwErrCode=0x0) [0108.720] OpenThemeData () returned 0x3330000 [0108.720] GetSystemMetrics (nIndex=32) returned 4 [0108.720] GetSystemMetrics (nIndex=33) returned 4 [0108.720] CloseThemeData () returned 0x0 [0108.721] lstrlenA (lpString="\x92\x07") returned 2 [0108.721] lstrlenA (lpString="\x92\x07") returned 2 [0108.721] lstrlenA (lpString="\x92\x07") returned 2 [0108.721] lstrlenA (lpString="\x92\x07") returned 2 [0108.721] lstrlenA (lpString="\x92\x07") returned 2 [0108.721] lstrlenA (lpString="\x92\x07") returned 2 [0108.721] capGetDriverDescriptionA () returned 0x0 [0108.721] GetLastError () returned 0x0 [0108.721] SetLastError (dwErrCode=0x0) [0108.721] OpenThemeData () returned 0x3340000 [0108.722] GetSystemMetrics (nIndex=32) returned 4 [0108.722] GetSystemMetrics (nIndex=33) returned 4 [0108.722] CloseThemeData () returned 0x0 [0108.722] lstrlenA (lpString="\x92\x07") returned 2 [0108.722] lstrlenA (lpString="\x92\x07") returned 2 [0108.722] lstrlenA (lpString="\x92\x07") returned 2 [0108.723] lstrlenA (lpString="\x92\x07") returned 2 [0108.723] lstrlenA (lpString="\x92\x07") returned 2 [0108.723] lstrlenA (lpString="\x92\x07") returned 2 [0108.723] capGetDriverDescriptionA () returned 0x0 [0108.723] GetLastError () returned 0x0 [0108.723] SetLastError (dwErrCode=0x0) [0108.723] OpenThemeData () returned 0x3350000 [0108.724] GetSystemMetrics (nIndex=32) returned 4 [0108.724] GetSystemMetrics (nIndex=33) returned 4 [0108.724] CloseThemeData () returned 0x0 [0108.724] lstrlenA (lpString="\x92\x07") returned 2 [0108.724] lstrlenA (lpString="\x92\x07") returned 2 [0108.724] lstrlenA (lpString="\x92\x07") returned 2 [0108.724] lstrlenA (lpString="\x92\x07") returned 2 [0108.724] lstrlenA (lpString="\x92\x07") returned 2 [0108.724] lstrlenA (lpString="\x92\x07") returned 2 [0108.724] capGetDriverDescriptionA () returned 0x0 [0108.725] GetLastError () returned 0x0 [0108.725] SetLastError (dwErrCode=0x0) [0108.725] OpenThemeData () returned 0x3360000 [0108.726] GetSystemMetrics (nIndex=32) returned 4 [0108.726] GetSystemMetrics (nIndex=33) returned 4 [0108.726] CloseThemeData () returned 0x0 [0108.726] lstrlenA (lpString="\x92\x07") returned 2 [0108.726] lstrlenA (lpString="\x92\x07") returned 2 [0108.726] lstrlenA (lpString="\x92\x07") returned 2 [0108.726] lstrlenA (lpString="\x92\x07") returned 2 [0108.726] lstrlenA (lpString="\x92\x07") returned 2 [0108.726] lstrlenA (lpString="\x92\x07") returned 2 [0108.726] capGetDriverDescriptionA () returned 0x0 [0108.727] GetLastError () returned 0x0 [0108.727] SetLastError (dwErrCode=0x0) [0108.727] OpenThemeData () returned 0x3370000 [0108.728] GetSystemMetrics (nIndex=32) returned 4 [0108.728] GetSystemMetrics (nIndex=33) returned 4 [0108.728] CloseThemeData () returned 0x0 [0108.728] lstrlenA (lpString="\x92\x07") returned 2 [0108.728] lstrlenA (lpString="\x92\x07") returned 2 [0108.728] lstrlenA (lpString="\x92\x07") returned 2 [0108.728] lstrlenA (lpString="\x92\x07") returned 2 [0108.728] lstrlenA (lpString="\x92\x07") returned 2 [0108.728] lstrlenA (lpString="\x92\x07") returned 2 [0108.728] capGetDriverDescriptionA () returned 0x0 [0108.729] GetLastError () returned 0x0 [0108.729] SetLastError (dwErrCode=0x0) [0108.729] OpenThemeData () returned 0x3380000 [0108.730] GetSystemMetrics (nIndex=32) returned 4 [0108.730] GetSystemMetrics (nIndex=33) returned 4 [0108.730] CloseThemeData () returned 0x0 [0108.730] lstrlenA (lpString="\x92\x07") returned 2 [0108.730] lstrlenA (lpString="\x92\x07") returned 2 [0108.730] lstrlenA (lpString="\x92\x07") returned 2 [0108.730] lstrlenA (lpString="\x92\x07") returned 2 [0108.730] lstrlenA (lpString="\x92\x07") returned 2 [0108.731] lstrlenA (lpString="\x92\x07") returned 2 [0108.731] capGetDriverDescriptionA () returned 0x0 [0108.731] GetLastError () returned 0x0 [0108.731] SetLastError (dwErrCode=0x0) [0108.731] OpenThemeData () returned 0x3390000 [0108.732] GetSystemMetrics (nIndex=32) returned 4 [0108.732] GetSystemMetrics (nIndex=33) returned 4 [0108.732] CloseThemeData () returned 0x0 [0108.732] lstrlenA (lpString="\x92\x07") returned 2 [0108.732] lstrlenA (lpString="\x92\x07") returned 2 [0108.732] lstrlenA (lpString="\x92\x07") returned 2 [0108.732] lstrlenA (lpString="\x92\x07") returned 2 [0108.732] lstrlenA (lpString="\x92\x07") returned 2 [0108.732] lstrlenA (lpString="\x92\x07") returned 2 [0108.732] capGetDriverDescriptionA () returned 0x0 [0108.733] GetLastError () returned 0x0 [0108.733] SetLastError (dwErrCode=0x0) [0108.733] OpenThemeData () returned 0x33a0000 [0109.086] GetSystemMetrics (nIndex=32) returned 4 [0109.086] GetSystemMetrics (nIndex=33) returned 4 [0109.086] CloseThemeData () returned 0x0 [0109.087] lstrlenA (lpString="\x92\x07") returned 2 [0109.087] lstrlenA (lpString="\x92\x07") returned 2 [0109.087] lstrlenA (lpString="\x92\x07") returned 2 [0109.087] lstrlenA (lpString="\x92\x07") returned 2 [0109.087] lstrlenA (lpString="\x92\x07") returned 2 [0109.087] lstrlenA (lpString="\x92\x07") returned 2 [0109.087] capGetDriverDescriptionA () returned 0x0 [0109.088] GetLastError () returned 0x0 [0109.088] SetLastError (dwErrCode=0x0) [0109.088] OpenThemeData () returned 0x33b0000 [0109.088] GetSystemMetrics (nIndex=32) returned 4 [0109.088] GetSystemMetrics (nIndex=33) returned 4 [0109.088] CloseThemeData () returned 0x0 [0109.089] lstrlenA (lpString="\x92\x07") returned 2 [0109.089] lstrlenA (lpString="\x92\x07") returned 2 [0109.089] lstrlenA (lpString="\x92\x07") returned 2 [0109.089] lstrlenA (lpString="\x92\x07") returned 2 [0109.089] lstrlenA (lpString="\x92\x07") returned 2 [0109.089] lstrlenA (lpString="\x92\x07") returned 2 [0109.089] capGetDriverDescriptionA () returned 0x0 [0109.089] GetLastError () returned 0x0 [0109.089] SetLastError (dwErrCode=0x0) [0109.089] OpenThemeData () returned 0x33c0000 [0109.090] GetSystemMetrics (nIndex=32) returned 4 [0109.090] GetSystemMetrics (nIndex=33) returned 4 [0109.090] CloseThemeData () returned 0x0 [0109.090] lstrlenA (lpString="\x92\x07") returned 2 [0109.090] lstrlenA (lpString="\x92\x07") returned 2 [0109.090] lstrlenA (lpString="\x92\x07") returned 2 [0109.091] lstrlenA (lpString="\x92\x07") returned 2 [0109.091] lstrlenA (lpString="\x92\x07") returned 2 [0109.091] lstrlenA (lpString="\x92\x07") returned 2 [0109.091] capGetDriverDescriptionA () returned 0x0 [0109.091] GetLastError () returned 0x0 [0109.091] SetLastError (dwErrCode=0x0) [0109.091] OpenThemeData () returned 0x33d0000 [0109.092] GetSystemMetrics (nIndex=32) returned 4 [0109.092] GetSystemMetrics (nIndex=33) returned 4 [0109.092] CloseThemeData () returned 0x0 [0109.092] lstrlenA (lpString="\x92\x07") returned 2 [0109.092] lstrlenA (lpString="\x92\x07") returned 2 [0109.092] lstrlenA (lpString="\x92\x07") returned 2 [0109.092] lstrlenA (lpString="\x92\x07") returned 2 [0109.092] lstrlenA (lpString="\x92\x07") returned 2 [0109.092] lstrlenA (lpString="\x92\x07") returned 2 [0109.092] capGetDriverDescriptionA () returned 0x0 [0109.093] GetLastError () returned 0x0 [0109.093] SetLastError (dwErrCode=0x0) [0109.093] OpenThemeData () returned 0x33e0000 [0109.094] GetSystemMetrics (nIndex=32) returned 4 [0109.094] GetSystemMetrics (nIndex=33) returned 4 [0109.094] CloseThemeData () returned 0x0 [0109.094] lstrlenA (lpString="\x92\x07") returned 2 [0109.094] lstrlenA (lpString="\x92\x07") returned 2 [0109.094] lstrlenA (lpString="\x92\x07") returned 2 [0109.094] lstrlenA (lpString="\x92\x07") returned 2 [0109.094] lstrlenA (lpString="\x92\x07") returned 2 [0109.094] lstrlenA (lpString="\x92\x07") returned 2 [0109.094] capGetDriverDescriptionA () returned 0x0 [0109.095] GetLastError () returned 0x0 [0109.095] SetLastError (dwErrCode=0x0) [0109.095] OpenThemeData () returned 0x33f0000 [0109.095] GetSystemMetrics (nIndex=32) returned 4 [0109.095] GetSystemMetrics (nIndex=33) returned 4 [0109.095] CloseThemeData () returned 0x0 [0109.096] lstrlenA (lpString="\x92\x07") returned 2 [0109.096] lstrlenA (lpString="\x92\x07") returned 2 [0109.096] lstrlenA (lpString="\x92\x07") returned 2 [0109.096] lstrlenA (lpString="\x92\x07") returned 2 [0109.096] lstrlenA (lpString="\x92\x07") returned 2 [0109.096] lstrlenA (lpString="\x92\x07") returned 2 [0109.096] capGetDriverDescriptionA () returned 0x0 [0109.097] GetLastError () returned 0x0 [0109.097] SetLastError (dwErrCode=0x0) [0109.097] OpenThemeData () returned 0x3400000 [0109.097] GetSystemMetrics (nIndex=32) returned 4 [0109.097] GetSystemMetrics (nIndex=33) returned 4 [0109.097] CloseThemeData () returned 0x0 [0109.097] lstrlenA (lpString="\x92\x07") returned 2 [0109.098] lstrlenA (lpString="\x92\x07") returned 2 [0109.098] lstrlenA (lpString="\x92\x07") returned 2 [0109.098] lstrlenA (lpString="\x92\x07") returned 2 [0109.098] lstrlenA (lpString="\x92\x07") returned 2 [0109.098] lstrlenA (lpString="\x92\x07") returned 2 [0109.098] capGetDriverDescriptionA () returned 0x0 [0109.098] GetLastError () returned 0x0 [0109.098] SetLastError (dwErrCode=0x0) [0109.098] OpenThemeData () returned 0x3410000 [0109.099] GetSystemMetrics (nIndex=32) returned 4 [0109.099] GetSystemMetrics (nIndex=33) returned 4 [0109.099] CloseThemeData () returned 0x0 [0109.099] lstrlenA (lpString="\x92\x07") returned 2 [0109.099] lstrlenA (lpString="\x92\x07") returned 2 [0109.099] lstrlenA (lpString="\x92\x07") returned 2 [0109.099] lstrlenA (lpString="\x92\x07") returned 2 [0109.099] lstrlenA (lpString="\x92\x07") returned 2 [0109.099] lstrlenA (lpString="\x92\x07") returned 2 [0109.099] capGetDriverDescriptionA () returned 0x0 [0109.100] GetLastError () returned 0x0 [0109.100] SetLastError (dwErrCode=0x0) [0109.100] OpenThemeData () returned 0x3420000 [0109.101] GetSystemMetrics (nIndex=32) returned 4 [0109.101] GetSystemMetrics (nIndex=33) returned 4 [0109.101] CloseThemeData () returned 0x0 [0109.101] lstrlenA (lpString="\x92\x07") returned 2 [0109.101] lstrlenA (lpString="\x92\x07") returned 2 [0109.101] lstrlenA (lpString="\x92\x07") returned 2 [0109.101] lstrlenA (lpString="\x92\x07") returned 2 [0109.101] lstrlenA (lpString="\x92\x07") returned 2 [0109.101] lstrlenA (lpString="\x92\x07") returned 2 [0109.101] capGetDriverDescriptionA () returned 0x0 [0109.102] GetLastError () returned 0x0 [0109.102] SetLastError (dwErrCode=0x0) [0109.102] OpenThemeData () returned 0x3430000 [0109.103] GetSystemMetrics (nIndex=32) returned 4 [0109.103] GetSystemMetrics (nIndex=33) returned 4 [0109.103] CloseThemeData () returned 0x0 [0109.103] lstrlenA (lpString="\x92\x07") returned 2 [0109.103] lstrlenA (lpString="\x92\x07") returned 2 [0109.103] lstrlenA (lpString="\x92\x07") returned 2 [0109.103] lstrlenA (lpString="\x92\x07") returned 2 [0109.103] lstrlenA (lpString="\x92\x07") returned 2 [0109.103] lstrlenA (lpString="\x92\x07") returned 2 [0109.103] capGetDriverDescriptionA () returned 0x0 [0109.104] GetLastError () returned 0x0 [0109.104] SetLastError (dwErrCode=0x0) [0109.104] OpenThemeData () returned 0x3440000 [0109.104] GetSystemMetrics (nIndex=32) returned 4 [0109.104] GetSystemMetrics (nIndex=33) returned 4 [0109.105] CloseThemeData () returned 0x0 [0109.105] lstrlenA (lpString="\x92\x07") returned 2 [0109.105] lstrlenA (lpString="\x92\x07") returned 2 [0109.105] lstrlenA (lpString="\x92\x07") returned 2 [0109.105] lstrlenA (lpString="\x92\x07") returned 2 [0109.105] lstrlenA (lpString="\x92\x07") returned 2 [0109.105] lstrlenA (lpString="\x92\x07") returned 2 [0109.105] capGetDriverDescriptionA () returned 0x0 [0109.106] GetLastError () returned 0x0 [0109.106] SetLastError (dwErrCode=0x0) [0109.106] OpenThemeData () returned 0x3450000 [0109.106] GetSystemMetrics (nIndex=32) returned 4 [0109.106] GetSystemMetrics (nIndex=33) returned 4 [0109.106] CloseThemeData () returned 0x0 [0109.107] lstrlenA (lpString="\x92\x07") returned 2 [0109.107] lstrlenA (lpString="\x92\x07") returned 2 [0109.107] lstrlenA (lpString="\x92\x07") returned 2 [0109.107] lstrlenA (lpString="\x92\x07") returned 2 [0109.107] lstrlenA (lpString="\x92\x07") returned 2 [0109.107] lstrlenA (lpString="\x92\x07") returned 2 [0109.107] capGetDriverDescriptionA () returned 0x0 [0109.107] GetLastError () returned 0x0 [0109.107] SetLastError (dwErrCode=0x0) [0109.107] OpenThemeData () returned 0x3460000 [0109.108] GetSystemMetrics (nIndex=32) returned 4 [0109.108] GetSystemMetrics (nIndex=33) returned 4 [0109.108] CloseThemeData () returned 0x0 [0109.108] lstrlenA (lpString="\x92\x07") returned 2 [0109.108] lstrlenA (lpString="\x92\x07") returned 2 [0109.108] lstrlenA (lpString="\x92\x07") returned 2 [0109.109] lstrlenA (lpString="\x92\x07") returned 2 [0109.109] lstrlenA (lpString="\x92\x07") returned 2 [0109.109] lstrlenA (lpString="\x92\x07") returned 2 [0109.109] capGetDriverDescriptionA () returned 0x0 [0109.109] GetLastError () returned 0x0 [0109.109] SetLastError (dwErrCode=0x0) [0109.109] OpenThemeData () returned 0x3470000 [0109.110] GetSystemMetrics (nIndex=32) returned 4 [0109.110] GetSystemMetrics (nIndex=33) returned 4 [0109.110] CloseThemeData () returned 0x0 [0109.110] lstrlenA (lpString="\x92\x07") returned 2 [0109.110] lstrlenA (lpString="\x92\x07") returned 2 [0109.110] lstrlenA (lpString="\x92\x07") returned 2 [0109.110] lstrlenA (lpString="\x92\x07") returned 2 [0109.110] lstrlenA (lpString="\x92\x07") returned 2 [0109.110] lstrlenA (lpString="\x92\x07") returned 2 [0109.110] capGetDriverDescriptionA () returned 0x0 [0109.111] GetLastError () returned 0x0 [0109.111] SetLastError (dwErrCode=0x0) [0109.111] OpenThemeData () returned 0x3480000 [0109.111] GetSystemMetrics (nIndex=32) returned 4 [0109.111] GetSystemMetrics (nIndex=33) returned 4 [0109.111] CloseThemeData () returned 0x0 [0109.112] lstrlenA (lpString="\x92\x07") returned 2 [0109.112] lstrlenA (lpString="\x92\x07") returned 2 [0109.112] lstrlenA (lpString="\x92\x07") returned 2 [0109.112] lstrlenA (lpString="\x92\x07") returned 2 [0109.112] lstrlenA (lpString="\x92\x07") returned 2 [0109.112] lstrlenA (lpString="\x92\x07") returned 2 [0109.112] capGetDriverDescriptionA () returned 0x0 [0109.113] GetLastError () returned 0x0 [0109.113] SetLastError (dwErrCode=0x0) [0109.113] OpenThemeData () returned 0x3490000 [0109.113] GetSystemMetrics (nIndex=32) returned 4 [0109.113] GetSystemMetrics (nIndex=33) returned 4 [0109.113] CloseThemeData () returned 0x0 [0109.114] lstrlenA (lpString="\x92\x07") returned 2 [0109.114] lstrlenA (lpString="\x92\x07") returned 2 [0109.114] lstrlenA (lpString="\x92\x07") returned 2 [0109.114] lstrlenA (lpString="\x92\x07") returned 2 [0109.114] lstrlenA (lpString="\x92\x07") returned 2 [0109.114] lstrlenA (lpString="\x92\x07") returned 2 [0109.114] capGetDriverDescriptionA () returned 0x0 [0109.114] GetLastError () returned 0x0 [0109.114] SetLastError (dwErrCode=0x0) [0109.114] OpenThemeData () returned 0x34a0000 [0109.115] GetSystemMetrics (nIndex=32) returned 4 [0109.115] GetSystemMetrics (nIndex=33) returned 4 [0109.115] CloseThemeData () returned 0x0 [0109.115] lstrlenA (lpString="\x92\x07") returned 2 [0109.115] lstrlenA (lpString="\x92\x07") returned 2 [0109.115] lstrlenA (lpString="\x92\x07") returned 2 [0109.115] lstrlenA (lpString="\x92\x07") returned 2 [0109.115] lstrlenA (lpString="\x92\x07") returned 2 [0109.115] lstrlenA (lpString="\x92\x07") returned 2 [0109.116] capGetDriverDescriptionA () returned 0x0 [0109.116] GetLastError () returned 0x0 [0109.116] SetLastError (dwErrCode=0x0) [0109.116] OpenThemeData () returned 0x34b0000 [0109.117] GetSystemMetrics (nIndex=32) returned 4 [0109.117] GetSystemMetrics (nIndex=33) returned 4 [0109.117] CloseThemeData () returned 0x0 [0109.117] lstrlenA (lpString="\x92\x07") returned 2 [0109.117] lstrlenA (lpString="\x92\x07") returned 2 [0109.117] lstrlenA (lpString="\x92\x07") returned 2 [0109.117] lstrlenA (lpString="\x92\x07") returned 2 [0109.117] lstrlenA (lpString="\x92\x07") returned 2 [0109.118] lstrlenA (lpString="\x92\x07") returned 2 [0109.118] capGetDriverDescriptionA () returned 0x0 [0109.119] GetLastError () returned 0x0 [0109.119] SetLastError (dwErrCode=0x0) [0109.119] OpenThemeData () returned 0x34c0000 [0109.119] GetSystemMetrics (nIndex=32) returned 4 [0109.119] GetSystemMetrics (nIndex=33) returned 4 [0109.119] CloseThemeData () returned 0x0 [0109.120] lstrlenA (lpString="\x92\x07") returned 2 [0109.120] lstrlenA (lpString="\x92\x07") returned 2 [0109.120] lstrlenA (lpString="\x92\x07") returned 2 [0109.120] lstrlenA (lpString="\x92\x07") returned 2 [0109.120] lstrlenA (lpString="\x92\x07") returned 2 [0109.120] lstrlenA (lpString="\x92\x07") returned 2 [0109.120] capGetDriverDescriptionA () returned 0x0 [0109.120] GetLastError () returned 0x0 [0109.120] SetLastError (dwErrCode=0x0) [0109.120] OpenThemeData () returned 0x34d0000 [0109.121] GetSystemMetrics (nIndex=32) returned 4 [0109.121] GetSystemMetrics (nIndex=33) returned 4 [0109.121] CloseThemeData () returned 0x0 [0109.121] lstrlenA (lpString="\x92\x07") returned 2 [0109.121] lstrlenA (lpString="\x92\x07") returned 2 [0109.121] lstrlenA (lpString="\x92\x07") returned 2 [0109.121] lstrlenA (lpString="\x92\x07") returned 2 [0109.121] lstrlenA (lpString="\x92\x07") returned 2 [0109.121] lstrlenA (lpString="\x92\x07") returned 2 [0109.121] capGetDriverDescriptionA () returned 0x0 [0109.122] GetLastError () returned 0x0 [0109.122] SetLastError (dwErrCode=0x0) [0109.122] OpenThemeData () returned 0x34e0000 [0109.123] GetSystemMetrics (nIndex=32) returned 4 [0109.123] GetSystemMetrics (nIndex=33) returned 4 [0109.123] CloseThemeData () returned 0x0 [0109.664] lstrlenA (lpString="\x92\x07") returned 2 [0109.670] lstrlenA (lpString="\x92\x07") returned 2 [0109.671] lstrlenA (lpString="\x92\x07") returned 2 [0109.671] lstrlenA (lpString="\x92\x07") returned 2 [0109.671] lstrlenA (lpString="\x92\x07") returned 2 [0109.671] lstrlenA (lpString="\x92\x07") returned 2 [0109.671] capGetDriverDescriptionA () returned 0x0 [0109.684] GetLastError () returned 0x0 [0109.684] SetLastError (dwErrCode=0x0) [0109.684] OpenThemeData () returned 0x34f0000 [0109.691] GetSystemMetrics (nIndex=32) returned 4 [0109.691] GetSystemMetrics (nIndex=33) returned 4 [0109.691] CloseThemeData () returned 0x0 [0109.691] lstrlenA (lpString="\x92\x07") returned 2 [0109.691] lstrlenA (lpString="\x92\x07") returned 2 [0109.691] lstrlenA (lpString="\x92\x07") returned 2 [0109.691] lstrlenA (lpString="\x92\x07") returned 2 [0109.691] lstrlenA (lpString="\x92\x07") returned 2 [0109.691] lstrlenA (lpString="\x92\x07") returned 2 [0109.691] capGetDriverDescriptionA () returned 0x0 [0109.692] GetLastError () returned 0x0 [0109.692] SetLastError (dwErrCode=0x0) [0109.692] OpenThemeData () returned 0x3500000 [0109.693] GetSystemMetrics (nIndex=32) returned 4 [0109.693] GetSystemMetrics (nIndex=33) returned 4 [0109.693] CloseThemeData () returned 0x0 [0109.693] lstrlenA (lpString="\x92\x07") returned 2 [0109.693] lstrlenA (lpString="\x92\x07") returned 2 [0109.693] lstrlenA (lpString="\x92\x07") returned 2 [0109.693] lstrlenA (lpString="\x92\x07") returned 2 [0109.693] lstrlenA (lpString="\x92\x07") returned 2 [0109.693] lstrlenA (lpString="\x92\x07") returned 2 [0109.693] capGetDriverDescriptionA () returned 0x0 [0109.694] GetLastError () returned 0x0 [0109.694] SetLastError (dwErrCode=0x0) [0109.694] OpenThemeData () returned 0x3510000 [0109.694] GetSystemMetrics (nIndex=32) returned 4 [0109.694] GetSystemMetrics (nIndex=33) returned 4 [0109.694] CloseThemeData () returned 0x0 [0109.695] lstrlenA (lpString="\x92\x07") returned 2 [0109.695] lstrlenA (lpString="\x92\x07") returned 2 [0109.695] lstrlenA (lpString="\x92\x07") returned 2 [0109.695] lstrlenA (lpString="\x92\x07") returned 2 [0109.695] lstrlenA (lpString="\x92\x07") returned 2 [0109.695] lstrlenA (lpString="\x92\x07") returned 2 [0109.695] capGetDriverDescriptionA () returned 0x0 [0109.696] GetLastError () returned 0x0 [0109.696] SetLastError (dwErrCode=0x0) [0109.696] OpenThemeData () returned 0x3520000 [0109.696] GetSystemMetrics (nIndex=32) returned 4 [0109.696] GetSystemMetrics (nIndex=33) returned 4 [0109.696] CloseThemeData () returned 0x0 [0109.697] lstrlenA (lpString="\x92\x07") returned 2 [0109.697] lstrlenA (lpString="\x92\x07") returned 2 [0109.697] lstrlenA (lpString="\x92\x07") returned 2 [0109.697] lstrlenA (lpString="\x92\x07") returned 2 [0109.697] lstrlenA (lpString="\x92\x07") returned 2 [0109.697] lstrlenA (lpString="\x92\x07") returned 2 [0109.697] capGetDriverDescriptionA () returned 0x0 [0109.697] GetLastError () returned 0x0 [0109.697] SetLastError (dwErrCode=0x0) [0109.697] OpenThemeData () returned 0x3530000 [0109.698] GetSystemMetrics (nIndex=32) returned 4 [0109.698] GetSystemMetrics (nIndex=33) returned 4 [0109.698] CloseThemeData () returned 0x0 [0109.698] lstrlenA (lpString="\x92\x07") returned 2 [0109.698] lstrlenA (lpString="\x92\x07") returned 2 [0109.698] lstrlenA (lpString="\x92\x07") returned 2 [0109.698] lstrlenA (lpString="\x92\x07") returned 2 [0109.698] lstrlenA (lpString="\x92\x07") returned 2 [0109.698] lstrlenA (lpString="\x92\x07") returned 2 [0109.698] capGetDriverDescriptionA () returned 0x0 [0109.699] GetLastError () returned 0x0 [0109.699] SetLastError (dwErrCode=0x0) [0109.699] OpenThemeData () returned 0x3540000 [0109.700] GetSystemMetrics (nIndex=32) returned 4 [0109.700] GetSystemMetrics (nIndex=33) returned 4 [0109.700] CloseThemeData () returned 0x0 [0109.700] lstrlenA (lpString="\x92\x07") returned 2 [0109.700] lstrlenA (lpString="\x92\x07") returned 2 [0109.700] lstrlenA (lpString="\x92\x07") returned 2 [0109.700] lstrlenA (lpString="\x92\x07") returned 2 [0109.700] lstrlenA (lpString="\x92\x07") returned 2 [0109.700] lstrlenA (lpString="\x92\x07") returned 2 [0109.700] capGetDriverDescriptionA () returned 0x0 [0109.701] GetLastError () returned 0x0 [0109.701] SetLastError (dwErrCode=0x0) [0109.701] OpenThemeData () returned 0x3550000 [0109.701] GetSystemMetrics (nIndex=32) returned 4 [0109.701] GetSystemMetrics (nIndex=33) returned 4 [0109.701] CloseThemeData () returned 0x0 [0109.702] lstrlenA (lpString="\x92\x07") returned 2 [0109.702] lstrlenA (lpString="\x92\x07") returned 2 [0109.702] lstrlenA (lpString="\x92\x07") returned 2 [0109.702] lstrlenA (lpString="\x92\x07") returned 2 [0109.702] lstrlenA (lpString="\x92\x07") returned 2 [0109.702] lstrlenA (lpString="\x92\x07") returned 2 [0109.702] capGetDriverDescriptionA () returned 0x0 [0109.702] GetLastError () returned 0x0 [0109.702] SetLastError (dwErrCode=0x0) [0109.702] OpenThemeData () returned 0x3560000 [0109.703] GetSystemMetrics (nIndex=32) returned 4 [0109.703] GetSystemMetrics (nIndex=33) returned 4 [0109.703] CloseThemeData () returned 0x0 [0109.703] lstrlenA (lpString="\x92\x07") returned 2 [0109.703] lstrlenA (lpString="\x92\x07") returned 2 [0109.703] lstrlenA (lpString="\x92\x07") returned 2 [0109.703] lstrlenA (lpString="\x92\x07") returned 2 [0109.703] lstrlenA (lpString="\x92\x07") returned 2 [0109.703] lstrlenA (lpString="\x92\x07") returned 2 [0109.704] capGetDriverDescriptionA () returned 0x0 [0109.704] GetLastError () returned 0x0 [0109.704] SetLastError (dwErrCode=0x0) [0109.704] OpenThemeData () returned 0x3570000 [0109.705] GetSystemMetrics (nIndex=32) returned 4 [0109.705] GetSystemMetrics (nIndex=33) returned 4 [0109.705] CloseThemeData () returned 0x0 [0109.705] lstrlenA (lpString="\x92\x07") returned 2 [0109.705] lstrlenA (lpString="\x92\x07") returned 2 [0109.705] lstrlenA (lpString="\x92\x07") returned 2 [0109.705] lstrlenA (lpString="\x92\x07") returned 2 [0109.705] lstrlenA (lpString="\x92\x07") returned 2 [0109.705] lstrlenA (lpString="\x92\x07") returned 2 [0109.705] capGetDriverDescriptionA () returned 0x0 [0109.706] GetLastError () returned 0x0 [0109.706] SetLastError (dwErrCode=0x0) [0109.706] OpenThemeData () returned 0x3580000 [0109.706] GetSystemMetrics (nIndex=32) returned 4 [0109.706] GetSystemMetrics (nIndex=33) returned 4 [0109.706] CloseThemeData () returned 0x0 [0109.707] lstrlenA (lpString="\x92\x07") returned 2 [0109.707] lstrlenA (lpString="\x92\x07") returned 2 [0109.707] lstrlenA (lpString="\x92\x07") returned 2 [0109.707] lstrlenA (lpString="\x92\x07") returned 2 [0109.707] lstrlenA (lpString="\x92\x07") returned 2 [0109.707] lstrlenA (lpString="\x92\x07") returned 2 [0109.707] capGetDriverDescriptionA () returned 0x0 [0109.707] GetLastError () returned 0x0 [0109.708] SetLastError (dwErrCode=0x0) [0109.708] OpenThemeData () returned 0x3590000 [0109.708] GetSystemMetrics (nIndex=32) returned 4 [0109.708] GetSystemMetrics (nIndex=33) returned 4 [0109.708] CloseThemeData () returned 0x0 [0109.708] lstrlenA (lpString="\x92\x07") returned 2 [0109.708] lstrlenA (lpString="\x92\x07") returned 2 [0109.708] lstrlenA (lpString="\x92\x07") returned 2 [0109.708] lstrlenA (lpString="\x92\x07") returned 2 [0109.709] lstrlenA (lpString="\x92\x07") returned 2 [0109.709] lstrlenA (lpString="\x92\x07") returned 2 [0109.709] capGetDriverDescriptionA () returned 0x0 [0109.709] GetLastError () returned 0x0 [0109.709] SetLastError (dwErrCode=0x0) [0109.709] OpenThemeData () returned 0x35a0000 [0109.710] GetSystemMetrics (nIndex=32) returned 4 [0109.710] GetSystemMetrics (nIndex=33) returned 4 [0109.710] CloseThemeData () returned 0x0 [0109.710] lstrlenA (lpString="\x92\x07") returned 2 [0109.710] lstrlenA (lpString="\x92\x07") returned 2 [0109.710] lstrlenA (lpString="\x92\x07") returned 2 [0109.710] lstrlenA (lpString="\x92\x07") returned 2 [0109.710] lstrlenA (lpString="\x92\x07") returned 2 [0109.710] lstrlenA (lpString="\x92\x07") returned 2 [0109.710] capGetDriverDescriptionA () returned 0x0 [0109.711] GetLastError () returned 0x0 [0109.711] SetLastError (dwErrCode=0x0) [0109.711] OpenThemeData () returned 0x35b0000 [0109.712] GetSystemMetrics (nIndex=32) returned 4 [0109.712] GetSystemMetrics (nIndex=33) returned 4 [0109.712] CloseThemeData () returned 0x0 [0109.712] lstrlenA (lpString="\x92\x07") returned 2 [0109.712] lstrlenA (lpString="\x92\x07") returned 2 [0109.712] lstrlenA (lpString="\x92\x07") returned 2 [0109.712] lstrlenA (lpString="\x92\x07") returned 2 [0109.712] lstrlenA (lpString="\x92\x07") returned 2 [0109.712] lstrlenA (lpString="\x92\x07") returned 2 [0109.712] capGetDriverDescriptionA () returned 0x0 [0109.713] GetLastError () returned 0x0 [0109.713] SetLastError (dwErrCode=0x0) [0109.713] OpenThemeData () returned 0x35c0000 [0109.713] GetSystemMetrics (nIndex=32) returned 4 [0109.713] GetSystemMetrics (nIndex=33) returned 4 [0109.713] CloseThemeData () returned 0x0 [0109.714] lstrlenA (lpString="\x92\x07") returned 2 [0109.714] lstrlenA (lpString="\x92\x07") returned 2 [0109.714] lstrlenA (lpString="\x92\x07") returned 2 [0109.714] lstrlenA (lpString="\x92\x07") returned 2 [0109.714] lstrlenA (lpString="\x92\x07") returned 2 [0109.714] lstrlenA (lpString="\x92\x07") returned 2 [0109.714] capGetDriverDescriptionA () returned 0x0 [0109.714] GetLastError () returned 0x0 [0109.715] SetLastError (dwErrCode=0x0) [0109.715] OpenThemeData () returned 0x35d0000 [0109.715] GetSystemMetrics (nIndex=32) returned 4 [0109.715] GetSystemMetrics (nIndex=33) returned 4 [0109.715] CloseThemeData () returned 0x0 [0109.715] lstrlenA (lpString="\x92\x07") returned 2 [0109.715] lstrlenA (lpString="\x92\x07") returned 2 [0109.715] lstrlenA (lpString="\x92\x07") returned 2 [0109.715] lstrlenA (lpString="\x92\x07") returned 2 [0109.715] lstrlenA (lpString="\x92\x07") returned 2 [0109.716] lstrlenA (lpString="\x92\x07") returned 2 [0109.716] capGetDriverDescriptionA () returned 0x0 [0109.716] GetLastError () returned 0x0 [0109.716] SetLastError (dwErrCode=0x0) [0109.716] OpenThemeData () returned 0x35e0000 [0109.717] GetSystemMetrics (nIndex=32) returned 4 [0109.717] GetSystemMetrics (nIndex=33) returned 4 [0109.717] CloseThemeData () returned 0x0 [0109.717] lstrlenA (lpString="\x92\x07") returned 2 [0109.717] lstrlenA (lpString="\x92\x07") returned 2 [0109.717] lstrlenA (lpString="\x92\x07") returned 2 [0109.717] lstrlenA (lpString="\x92\x07") returned 2 [0109.717] lstrlenA (lpString="\x92\x07") returned 2 [0109.717] lstrlenA (lpString="\x92\x07") returned 2 [0109.717] capGetDriverDescriptionA () returned 0x0 [0109.718] GetLastError () returned 0x0 [0109.718] SetLastError (dwErrCode=0x0) [0109.718] OpenThemeData () returned 0x35f0000 [0109.718] GetSystemMetrics (nIndex=32) returned 4 [0109.718] GetSystemMetrics (nIndex=33) returned 4 [0109.718] CloseThemeData () returned 0x0 [0109.719] lstrlenA (lpString="\x92\x07") returned 2 [0109.719] lstrlenA (lpString="\x92\x07") returned 2 [0109.719] lstrlenA (lpString="\x92\x07") returned 2 [0109.719] lstrlenA (lpString="\x92\x07") returned 2 [0109.719] lstrlenA (lpString="\x92\x07") returned 2 [0109.719] lstrlenA (lpString="\x92\x07") returned 2 [0109.719] capGetDriverDescriptionA () returned 0x0 [0109.720] GetLastError () returned 0x0 [0109.720] SetLastError (dwErrCode=0x0) [0109.720] OpenThemeData () returned 0x3600000 [0109.720] GetSystemMetrics (nIndex=32) returned 4 [0109.720] GetSystemMetrics (nIndex=33) returned 4 [0109.720] CloseThemeData () returned 0x0 [0109.720] lstrlenA (lpString="\x92\x07") returned 2 [0109.720] lstrlenA (lpString="\x92\x07") returned 2 [0109.721] lstrlenA (lpString="\x92\x07") returned 2 [0109.721] capGetDriverDescriptionA () returned 0x0 [0109.721] GetLastError () returned 0x0 [0109.721] SetLastError (dwErrCode=0x0) [0109.721] OpenThemeData () returned 0x3610000 [0109.722] GetSystemMetrics (nIndex=32) returned 4 [0109.722] GetSystemMetrics (nIndex=33) returned 4 [0109.722] CloseThemeData () returned 0x0 [0109.722] capGetDriverDescriptionA () returned 0x0 [0109.723] GetLastError () returned 0x0 [0109.723] SetLastError (dwErrCode=0x0) [0109.723] OpenThemeData () returned 0x3620000 [0109.723] GetSystemMetrics (nIndex=32) returned 4 [0109.723] GetSystemMetrics (nIndex=33) returned 4 [0109.723] CloseThemeData () returned 0x0 [0109.724] capGetDriverDescriptionA () returned 0x0 [0109.724] GetLastError () returned 0x0 [0109.724] SetLastError (dwErrCode=0x0) [0109.724] OpenThemeData () returned 0x3630000 [0109.725] GetSystemMetrics (nIndex=32) returned 4 [0109.725] GetSystemMetrics (nIndex=33) returned 4 [0109.725] CloseThemeData () returned 0x0 [0109.725] capGetDriverDescriptionA () returned 0x0 [0109.726] GetLastError () returned 0x0 [0109.726] SetLastError (dwErrCode=0x0) [0109.726] OpenThemeData () returned 0x3640000 [0109.726] GetSystemMetrics (nIndex=32) returned 4 [0109.726] GetSystemMetrics (nIndex=33) returned 4 [0109.726] CloseThemeData () returned 0x0 [0110.081] capGetDriverDescriptionA () returned 0x0 [0110.082] GetLastError () returned 0x0 [0110.082] SetLastError (dwErrCode=0x0) [0110.082] OpenThemeData () returned 0x3650000 [0110.083] GetSystemMetrics (nIndex=32) returned 4 [0110.083] GetSystemMetrics (nIndex=33) returned 4 [0110.083] CloseThemeData () returned 0x0 [0110.083] capGetDriverDescriptionA () returned 0x0 [0110.084] GetLastError () returned 0x0 [0110.084] SetLastError (dwErrCode=0x0) [0110.084] OpenThemeData () returned 0x3660000 [0110.084] GetSystemMetrics (nIndex=32) returned 4 [0110.084] GetSystemMetrics (nIndex=33) returned 4 [0110.084] CloseThemeData () returned 0x0 [0110.085] capGetDriverDescriptionA () returned 0x0 [0110.085] GetLastError () returned 0x0 [0110.085] SetLastError (dwErrCode=0x0) [0110.085] OpenThemeData () returned 0x3670000 [0110.086] GetSystemMetrics (nIndex=32) returned 4 [0110.086] GetSystemMetrics (nIndex=33) returned 4 [0110.086] CloseThemeData () returned 0x0 [0110.086] capGetDriverDescriptionA () returned 0x0 [0110.087] GetLastError () returned 0x0 [0110.087] SetLastError (dwErrCode=0x0) [0110.087] OpenThemeData () returned 0x3680000 [0110.088] GetSystemMetrics (nIndex=32) returned 4 [0110.088] GetSystemMetrics (nIndex=33) returned 4 [0110.088] CloseThemeData () returned 0x0 [0110.091] capGetDriverDescriptionA () returned 0x0 [0110.091] GetLastError () returned 0x0 [0110.091] SetLastError (dwErrCode=0x0) [0110.091] OpenThemeData () returned 0x3690000 [0110.092] GetSystemMetrics (nIndex=32) returned 4 [0110.092] GetSystemMetrics (nIndex=33) returned 4 [0110.092] CloseThemeData () returned 0x0 [0110.092] capGetDriverDescriptionA () returned 0x0 [0110.093] GetLastError () returned 0x0 [0110.093] SetLastError (dwErrCode=0x0) [0110.093] OpenThemeData () returned 0x36a0000 [0110.093] GetSystemMetrics (nIndex=32) returned 4 [0110.093] GetSystemMetrics (nIndex=33) returned 4 [0110.093] CloseThemeData () returned 0x0 [0110.094] capGetDriverDescriptionA () returned 0x0 [0110.094] GetLastError () returned 0x0 [0110.094] SetLastError (dwErrCode=0x0) [0110.094] OpenThemeData () returned 0x36b0000 [0110.095] GetSystemMetrics (nIndex=32) returned 4 [0110.095] GetSystemMetrics (nIndex=33) returned 4 [0110.095] CloseThemeData () returned 0x0 [0110.095] capGetDriverDescriptionA () returned 0x0 [0110.096] GetLastError () returned 0x0 [0110.096] SetLastError (dwErrCode=0x0) [0110.096] OpenThemeData () returned 0x36c0000 [0110.097] GetSystemMetrics (nIndex=32) returned 4 [0110.097] GetSystemMetrics (nIndex=33) returned 4 [0110.097] CloseThemeData () returned 0x0 [0110.097] capGetDriverDescriptionA () returned 0x0 [0110.098] GetLastError () returned 0x0 [0110.098] SetLastError (dwErrCode=0x0) [0110.098] OpenThemeData () returned 0x36d0000 [0110.098] GetSystemMetrics (nIndex=32) returned 4 [0110.098] GetSystemMetrics (nIndex=33) returned 4 [0110.098] CloseThemeData () returned 0x0 [0110.099] capGetDriverDescriptionA () returned 0x0 [0110.099] GetLastError () returned 0x0 [0110.099] SetLastError (dwErrCode=0x0) [0110.099] OpenThemeData () returned 0x36e0000 [0110.100] GetSystemMetrics (nIndex=32) returned 4 [0110.100] GetSystemMetrics (nIndex=33) returned 4 [0110.100] CloseThemeData () returned 0x0 [0110.100] capGetDriverDescriptionA () returned 0x0 [0110.101] GetLastError () returned 0x0 [0110.101] SetLastError (dwErrCode=0x0) [0110.101] OpenThemeData () returned 0x36f0000 [0110.101] GetSystemMetrics (nIndex=32) returned 4 [0110.101] GetSystemMetrics (nIndex=33) returned 4 [0110.101] CloseThemeData () returned 0x0 [0110.102] capGetDriverDescriptionA () returned 0x0 [0110.102] GetLastError () returned 0x0 [0110.103] SetLastError (dwErrCode=0x0) [0110.103] OpenThemeData () returned 0x3700000 [0110.103] GetSystemMetrics (nIndex=32) returned 4 [0110.103] GetSystemMetrics (nIndex=33) returned 4 [0110.103] CloseThemeData () returned 0x0 [0110.103] capGetDriverDescriptionA () returned 0x0 [0110.104] GetLastError () returned 0x0 [0110.104] SetLastError (dwErrCode=0x0) [0110.104] OpenThemeData () returned 0x3710000 [0110.105] GetSystemMetrics (nIndex=32) returned 4 [0110.105] GetSystemMetrics (nIndex=33) returned 4 [0110.105] CloseThemeData () returned 0x0 [0110.105] capGetDriverDescriptionA () returned 0x0 [0110.106] GetLastError () returned 0x0 [0110.106] SetLastError (dwErrCode=0x0) [0110.106] OpenThemeData () returned 0x3720000 [0110.106] GetSystemMetrics (nIndex=32) returned 4 [0110.106] GetSystemMetrics (nIndex=33) returned 4 [0110.106] CloseThemeData () returned 0x0 [0110.107] capGetDriverDescriptionA () returned 0x0 [0110.107] GetLastError () returned 0x0 [0110.107] SetLastError (dwErrCode=0x0) [0110.107] OpenThemeData () returned 0x3730000 [0110.108] GetSystemMetrics (nIndex=32) returned 4 [0110.108] GetSystemMetrics (nIndex=33) returned 4 [0110.108] CloseThemeData () returned 0x0 [0110.108] capGetDriverDescriptionA () returned 0x0 [0110.109] GetLastError () returned 0x0 [0110.109] SetLastError (dwErrCode=0x0) [0110.109] OpenThemeData () returned 0x3740000 [0110.109] GetSystemMetrics (nIndex=32) returned 4 [0110.109] GetSystemMetrics (nIndex=33) returned 4 [0110.109] CloseThemeData () returned 0x0 [0110.110] capGetDriverDescriptionA () returned 0x0 [0110.110] GetLastError () returned 0x0 [0110.110] SetLastError (dwErrCode=0x0) [0110.110] OpenThemeData () returned 0x3750000 [0110.111] GetSystemMetrics (nIndex=32) returned 4 [0110.111] GetSystemMetrics (nIndex=33) returned 4 [0110.111] CloseThemeData () returned 0x0 [0110.111] capGetDriverDescriptionA () returned 0x0 [0110.112] GetLastError () returned 0x0 [0110.112] SetLastError (dwErrCode=0x0) [0110.112] OpenThemeData () returned 0x3760000 [0110.113] GetSystemMetrics (nIndex=32) returned 4 [0110.113] GetSystemMetrics (nIndex=33) returned 4 [0110.113] CloseThemeData () returned 0x0 [0110.113] capGetDriverDescriptionA () returned 0x0 [0110.114] GetLastError () returned 0x0 [0110.114] SetLastError (dwErrCode=0x0) [0110.114] OpenThemeData () returned 0x3770000 [0110.114] GetSystemMetrics (nIndex=32) returned 4 [0110.114] GetSystemMetrics (nIndex=33) returned 4 [0110.114] CloseThemeData () returned 0x0 [0110.115] capGetDriverDescriptionA () returned 0x0 [0110.115] GetLastError () returned 0x0 [0110.115] SetLastError (dwErrCode=0x0) [0110.115] OpenThemeData () returned 0x3780000 [0110.116] GetSystemMetrics (nIndex=32) returned 4 [0110.116] GetSystemMetrics (nIndex=33) returned 4 [0110.116] CloseThemeData () returned 0x0 [0110.116] capGetDriverDescriptionA () returned 0x0 [0110.117] GetLastError () returned 0x0 [0110.117] SetLastError (dwErrCode=0x0) [0110.117] OpenThemeData () returned 0x3790000 [0110.465] GetSystemMetrics (nIndex=32) returned 4 [0110.465] GetSystemMetrics (nIndex=33) returned 4 [0110.465] CloseThemeData () returned 0x0 [0110.474] capGetDriverDescriptionA () returned 0x0 [0110.488] GetLastError () returned 0x0 [0110.488] SetLastError (dwErrCode=0x0) [0110.488] OpenThemeData () returned 0x37a0000 [0110.491] GetSystemMetrics (nIndex=32) returned 4 [0110.491] GetSystemMetrics (nIndex=33) returned 4 [0110.491] CloseThemeData () returned 0x0 [0110.491] lstrlenA (lpString="\x92\x07") returned 2 [0110.491] lstrlenA (lpString="\x92\x07") returned 2 [0110.492] lstrlenA (lpString="\x92\x07") returned 2 [0110.492] lstrlenA (lpString="\x92\x07") returned 2 [0110.492] lstrlenA (lpString="\x92\x07") returned 2 [0110.492] lstrlenA (lpString="\x92\x07") returned 2 [0110.492] capGetDriverDescriptionA () returned 0x0 [0110.492] GetLastError () returned 0x0 [0110.493] SetLastError (dwErrCode=0x0) [0110.493] OpenThemeData () returned 0x37b0000 [0110.493] GetSystemMetrics (nIndex=32) returned 4 [0110.493] GetSystemMetrics (nIndex=33) returned 4 [0110.493] CloseThemeData () returned 0x0 [0110.494] lstrlenA (lpString="\x92\x07") returned 2 [0110.494] lstrlenA (lpString="\x92\x07") returned 2 [0110.494] lstrlenA (lpString="\x92\x07") returned 2 [0110.494] lstrlenA (lpString="\x92\x07") returned 2 [0110.494] lstrlenA (lpString="\x92\x07") returned 2 [0110.494] lstrlenA (lpString="\x92\x07") returned 2 [0110.494] capGetDriverDescriptionA () returned 0x0 [0110.494] GetLastError () returned 0x0 [0110.495] SetLastError (dwErrCode=0x0) [0110.495] OpenThemeData () returned 0x37c0000 [0110.495] GetSystemMetrics (nIndex=32) returned 4 [0110.495] GetSystemMetrics (nIndex=33) returned 4 [0110.495] CloseThemeData () returned 0x0 [0110.495] lstrlenA (lpString="\x92\x07") returned 2 [0110.495] lstrlenA (lpString="\x92\x07") returned 2 [0110.495] lstrlenA (lpString="\x92\x07") returned 2 [0110.495] lstrlenA (lpString="\x92\x07") returned 2 [0110.495] lstrlenA (lpString="\x92\x07") returned 2 [0110.496] lstrlenA (lpString="\x92\x07") returned 2 [0110.496] capGetDriverDescriptionA () returned 0x0 [0110.496] GetLastError () returned 0x0 [0110.496] SetLastError (dwErrCode=0x0) [0110.496] OpenThemeData () returned 0x37d0000 [0110.497] GetSystemMetrics (nIndex=32) returned 4 [0110.497] GetSystemMetrics (nIndex=33) returned 4 [0110.497] CloseThemeData () returned 0x0 [0110.497] lstrlenA (lpString="\x92\x07") returned 2 [0110.497] lstrlenA (lpString="\x92\x07") returned 2 [0110.497] lstrlenA (lpString="\x92\x07") returned 2 [0110.497] lstrlenA (lpString="\x92\x07") returned 2 [0110.497] lstrlenA (lpString="\x92\x07") returned 2 [0110.497] lstrlenA (lpString="\x92\x07") returned 2 [0110.497] capGetDriverDescriptionA () returned 0x0 [0110.498] GetLastError () returned 0x0 [0110.498] SetLastError (dwErrCode=0x0) [0110.498] OpenThemeData () returned 0x37e0000 [0110.498] GetSystemMetrics (nIndex=32) returned 4 [0110.498] GetSystemMetrics (nIndex=33) returned 4 [0110.498] CloseThemeData () returned 0x0 [0110.499] lstrlenA (lpString="\x92\x07") returned 2 [0110.499] lstrlenA (lpString="\x92\x07") returned 2 [0110.499] lstrlenA (lpString="\x92\x07") returned 2 [0110.499] lstrlenA (lpString="\x92\x07") returned 2 [0110.499] lstrlenA (lpString="\x92\x07") returned 2 [0110.499] lstrlenA (lpString="\x92\x07") returned 2 [0110.499] capGetDriverDescriptionA () returned 0x0 [0110.499] GetLastError () returned 0x0 [0110.500] SetLastError (dwErrCode=0x0) [0110.500] OpenThemeData () returned 0x37f0000 [0110.500] GetSystemMetrics (nIndex=32) returned 4 [0110.500] GetSystemMetrics (nIndex=33) returned 4 [0110.500] CloseThemeData () returned 0x0 [0110.500] lstrlenA (lpString="\x92\x07") returned 2 [0110.500] lstrlenA (lpString="\x92\x07") returned 2 [0110.500] lstrlenA (lpString="\x92\x07") returned 2 [0110.501] lstrlenA (lpString="\x92\x07") returned 2 [0110.501] lstrlenA (lpString="\x92\x07") returned 2 [0110.501] lstrlenA (lpString="\x92\x07") returned 2 [0110.501] capGetDriverDescriptionA () returned 0x0 [0110.501] GetLastError () returned 0x0 [0110.501] SetLastError (dwErrCode=0x0) [0110.501] OpenThemeData () returned 0x3800000 [0110.502] GetSystemMetrics (nIndex=32) returned 4 [0110.502] GetSystemMetrics (nIndex=33) returned 4 [0110.502] CloseThemeData () returned 0x0 [0110.502] lstrlenA (lpString="\x92\x07") returned 2 [0110.502] lstrlenA (lpString="\x92\x07") returned 2 [0110.502] lstrlenA (lpString="\x92\x07") returned 2 [0110.502] lstrlenA (lpString="\x92\x07") returned 2 [0110.502] lstrlenA (lpString="\x92\x07") returned 2 [0110.502] lstrlenA (lpString="\x92\x07") returned 2 [0110.502] capGetDriverDescriptionA () returned 0x0 [0110.503] GetLastError () returned 0x0 [0110.503] SetLastError (dwErrCode=0x0) [0110.503] OpenThemeData () returned 0x3810000 [0110.503] GetSystemMetrics (nIndex=32) returned 4 [0110.503] GetSystemMetrics (nIndex=33) returned 4 [0110.503] CloseThemeData () returned 0x0 [0110.504] lstrlenA (lpString="\x92\x07") returned 2 [0110.504] lstrlenA (lpString="\x92\x07") returned 2 [0110.504] lstrlenA (lpString="\x92\x07") returned 2 [0110.504] lstrlenA (lpString="\x92\x07") returned 2 [0110.504] lstrlenA (lpString="\x92\x07") returned 2 [0110.504] lstrlenA (lpString="\x92\x07") returned 2 [0110.504] capGetDriverDescriptionA () returned 0x0 [0110.505] GetLastError () returned 0x0 [0110.505] SetLastError (dwErrCode=0x0) [0110.505] OpenThemeData () returned 0x3820000 [0110.505] GetSystemMetrics (nIndex=32) returned 4 [0110.505] GetSystemMetrics (nIndex=33) returned 4 [0110.505] CloseThemeData () returned 0x0 [0110.505] lstrlenA (lpString="\x92\x07") returned 2 [0110.505] lstrlenA (lpString="\x92\x07") returned 2 [0110.505] lstrlenA (lpString="\x92\x07") returned 2 [0110.505] lstrlenA (lpString="\x92\x07") returned 2 [0110.505] lstrlenA (lpString="\x92\x07") returned 2 [0110.506] lstrlenA (lpString="\x92\x07") returned 2 [0110.506] capGetDriverDescriptionA () returned 0x0 [0110.506] GetLastError () returned 0x0 [0110.506] SetLastError (dwErrCode=0x0) [0110.506] OpenThemeData () returned 0x3830000 [0110.507] GetSystemMetrics (nIndex=32) returned 4 [0110.507] GetSystemMetrics (nIndex=33) returned 4 [0110.507] CloseThemeData () returned 0x0 [0110.507] lstrlenA (lpString="\x92\x07") returned 2 [0110.507] lstrlenA (lpString="\x92\x07") returned 2 [0110.507] lstrlenA (lpString="\x92\x07") returned 2 [0110.507] lstrlenA (lpString="\x92\x07") returned 2 [0110.507] lstrlenA (lpString="\x92\x07") returned 2 [0110.507] lstrlenA (lpString="\x92\x07") returned 2 [0110.507] capGetDriverDescriptionA () returned 0x0 [0110.508] GetLastError () returned 0x0 [0110.508] SetLastError (dwErrCode=0x0) [0110.620] OpenThemeData () returned 0x3840000 [0110.620] GetSystemMetrics (nIndex=32) returned 4 [0110.620] GetSystemMetrics (nIndex=33) returned 4 [0110.620] CloseThemeData () returned 0x0 [0110.621] lstrlenA (lpString="\x92\x07") returned 2 [0110.621] lstrlenA (lpString="\x92\x07") returned 2 [0110.621] lstrlenA (lpString="\x92\x07") returned 2 [0110.621] lstrlenA (lpString="\x92\x07") returned 2 [0110.621] lstrlenA (lpString="\x92\x07") returned 2 [0110.621] lstrlenA (lpString="\x92\x07") returned 2 [0110.621] capGetDriverDescriptionA () returned 0x0 [0110.621] GetLastError () returned 0x0 [0110.621] SetLastError (dwErrCode=0x0) [0110.621] OpenThemeData () returned 0x3850000 [0110.622] GetSystemMetrics (nIndex=32) returned 4 [0110.622] GetSystemMetrics (nIndex=33) returned 4 [0110.622] CloseThemeData () returned 0x0 [0110.622] lstrlenA (lpString="\x92\x07") returned 2 [0110.622] lstrlenA (lpString="\x92\x07") returned 2 [0110.622] lstrlenA (lpString="\x92\x07") returned 2 [0110.622] lstrlenA (lpString="\x92\x07") returned 2 [0110.622] lstrlenA (lpString="\x92\x07") returned 2 [0110.622] lstrlenA (lpString="\x92\x07") returned 2 [0110.622] capGetDriverDescriptionA () returned 0x0 [0110.623] GetLastError () returned 0x0 [0110.623] SetLastError (dwErrCode=0x0) [0110.623] OpenThemeData () returned 0x3860000 [0110.624] GetSystemMetrics (nIndex=32) returned 4 [0110.624] GetSystemMetrics (nIndex=33) returned 4 [0110.624] CloseThemeData () returned 0x0 [0110.624] lstrlenA (lpString="\x92\x07") returned 2 [0110.624] lstrlenA (lpString="\x92\x07") returned 2 [0110.624] lstrlenA (lpString="\x92\x07") returned 2 [0110.624] lstrlenA (lpString="\x92\x07") returned 2 [0110.624] lstrlenA (lpString="\x92\x07") returned 2 [0110.624] lstrlenA (lpString="\x92\x07") returned 2 [0110.624] capGetDriverDescriptionA () returned 0x0 [0110.625] GetLastError () returned 0x0 [0110.625] SetLastError (dwErrCode=0x0) [0110.625] OpenThemeData () returned 0x3870000 [0110.625] GetSystemMetrics (nIndex=32) returned 4 [0110.625] GetSystemMetrics (nIndex=33) returned 4 [0110.625] CloseThemeData () returned 0x0 [0110.626] lstrlenA (lpString="\x92\x07") returned 2 [0110.626] lstrlenA (lpString="\x92\x07") returned 2 [0110.626] lstrlenA (lpString="\x92\x07") returned 2 [0110.626] lstrlenA (lpString="\x92\x07") returned 2 [0110.626] lstrlenA (lpString="\x92\x07") returned 2 [0110.626] lstrlenA (lpString="\x92\x07") returned 2 [0110.626] capGetDriverDescriptionA () returned 0x0 [0110.626] GetLastError () returned 0x0 [0110.627] SetLastError (dwErrCode=0x0) [0110.627] OpenThemeData () returned 0x3880000 [0110.627] GetSystemMetrics (nIndex=32) returned 4 [0110.627] GetSystemMetrics (nIndex=33) returned 4 [0110.627] CloseThemeData () returned 0x0 [0110.627] lstrlenA (lpString="\x92\x07") returned 2 [0110.627] lstrlenA (lpString="\x92\x07") returned 2 [0110.627] lstrlenA (lpString="\x92\x07") returned 2 [0110.627] lstrlenA (lpString="\x92\x07") returned 2 [0110.627] lstrlenA (lpString="\x92\x07") returned 2 [0110.628] lstrlenA (lpString="\x92\x07") returned 2 [0110.628] capGetDriverDescriptionA () returned 0x0 [0110.628] GetLastError () returned 0x0 [0110.628] SetLastError (dwErrCode=0x0) [0110.628] OpenThemeData () returned 0x3890000 [0110.629] GetSystemMetrics (nIndex=32) returned 4 [0110.629] GetSystemMetrics (nIndex=33) returned 4 [0110.629] CloseThemeData () returned 0x0 [0110.629] lstrlenA (lpString="\x92\x07") returned 2 [0110.629] lstrlenA (lpString="\x92\x07") returned 2 [0110.629] lstrlenA (lpString="\x92\x07") returned 2 [0110.629] lstrlenA (lpString="\x92\x07") returned 2 [0110.629] lstrlenA (lpString="\x92\x07") returned 2 [0110.629] lstrlenA (lpString="\x92\x07") returned 2 [0110.629] capGetDriverDescriptionA () returned 0x0 [0110.630] GetLastError () returned 0x0 [0110.630] SetLastError (dwErrCode=0x0) [0110.630] OpenThemeData () returned 0x38a0000 [0110.630] GetSystemMetrics (nIndex=32) returned 4 [0110.630] GetSystemMetrics (nIndex=33) returned 4 [0110.630] CloseThemeData () returned 0x0 [0110.631] lstrlenA (lpString="\x92\x07") returned 2 [0110.631] lstrlenA (lpString="\x92\x07") returned 2 [0110.631] lstrlenA (lpString="\x92\x07") returned 2 [0110.631] lstrlenA (lpString="\x92\x07") returned 2 [0110.631] lstrlenA (lpString="\x92\x07") returned 2 [0110.631] lstrlenA (lpString="\x92\x07") returned 2 [0110.631] capGetDriverDescriptionA () returned 0x0 [0110.632] GetLastError () returned 0x0 [0110.632] SetLastError (dwErrCode=0x0) [0110.632] OpenThemeData () returned 0x38b0000 [0110.632] GetSystemMetrics (nIndex=32) returned 4 [0110.632] GetSystemMetrics (nIndex=33) returned 4 [0110.632] CloseThemeData () returned 0x0 [0110.632] lstrlenA (lpString="\x92\x07") returned 2 [0110.632] lstrlenA (lpString="\x92\x07") returned 2 [0110.632] lstrlenA (lpString="\x92\x07") returned 2 [0110.633] lstrlenA (lpString="\x92\x07") returned 2 [0110.633] lstrlenA (lpString="\x92\x07") returned 2 [0110.633] lstrlenA (lpString="\x92\x07") returned 2 [0110.633] capGetDriverDescriptionA () returned 0x0 [0111.049] GetLastError () returned 0x0 [0111.053] SetLastError (dwErrCode=0x0) [0111.054] OpenThemeData () returned 0x38c0000 [0111.055] GetSystemMetrics (nIndex=32) returned 4 [0111.055] GetSystemMetrics (nIndex=33) returned 4 [0111.055] CloseThemeData () returned 0x0 [0111.055] lstrlenA (lpString="\x92\x07") returned 2 [0111.055] lstrlenA (lpString="\x92\x07") returned 2 [0111.055] lstrlenA (lpString="\x92\x07") returned 2 [0111.055] lstrlenA (lpString="\x92\x07") returned 2 [0111.055] lstrlenA (lpString="\x92\x07") returned 2 [0111.055] lstrlenA (lpString="\x92\x07") returned 2 [0111.055] capGetDriverDescriptionA () returned 0x0 [0111.056] GetLastError () returned 0x0 [0111.056] SetLastError (dwErrCode=0x0) [0111.056] OpenThemeData () returned 0x38d0000 [0111.057] GetSystemMetrics (nIndex=32) returned 4 [0111.057] GetSystemMetrics (nIndex=33) returned 4 [0111.057] CloseThemeData () returned 0x0 [0111.057] lstrlenA (lpString="\x92\x07") returned 2 [0111.057] lstrlenA (lpString="\x92\x07") returned 2 [0111.057] lstrlenA (lpString="\x92\x07") returned 2 [0111.057] lstrlenA (lpString="\x92\x07") returned 2 [0111.057] lstrlenA (lpString="\x92\x07") returned 2 [0111.057] lstrlenA (lpString="\x92\x07") returned 2 [0111.057] capGetDriverDescriptionA () returned 0x0 [0111.058] GetLastError () returned 0x0 [0111.058] SetLastError (dwErrCode=0x0) [0111.058] OpenThemeData () returned 0x38e0000 [0111.058] GetSystemMetrics (nIndex=32) returned 4 [0111.059] GetSystemMetrics (nIndex=33) returned 4 [0111.059] CloseThemeData () returned 0x0 [0111.059] lstrlenA (lpString="\x92\x07") returned 2 [0111.059] lstrlenA (lpString="\x92\x07") returned 2 [0111.059] lstrlenA (lpString="\x92\x07") returned 2 [0111.059] lstrlenA (lpString="\x92\x07") returned 2 [0111.059] lstrlenA (lpString="\x92\x07") returned 2 [0111.059] lstrlenA (lpString="\x92\x07") returned 2 [0111.059] capGetDriverDescriptionA () returned 0x0 [0111.060] GetLastError () returned 0x0 [0111.060] SetLastError (dwErrCode=0x0) [0111.060] OpenThemeData () returned 0x38f0000 [0111.060] GetSystemMetrics (nIndex=32) returned 4 [0111.060] GetSystemMetrics (nIndex=33) returned 4 [0111.060] CloseThemeData () returned 0x0 [0111.061] lstrlenA (lpString="\x92\x07") returned 2 [0111.061] lstrlenA (lpString="\x92\x07") returned 2 [0111.061] lstrlenA (lpString="\x92\x07") returned 2 [0111.061] lstrlenA (lpString="\x92\x07") returned 2 [0111.061] lstrlenA (lpString="\x92\x07") returned 2 [0111.061] lstrlenA (lpString="\x92\x07") returned 2 [0111.061] capGetDriverDescriptionA () returned 0x0 [0111.061] GetLastError () returned 0x0 [0111.061] SetLastError (dwErrCode=0x0) [0111.061] OpenThemeData () returned 0x3900000 [0111.062] GetSystemMetrics (nIndex=32) returned 4 [0111.062] GetSystemMetrics (nIndex=33) returned 4 [0111.062] CloseThemeData () returned 0x0 [0111.062] lstrlenA (lpString="\x92\x07") returned 2 [0111.062] lstrlenA (lpString="\x92\x07") returned 2 [0111.062] lstrlenA (lpString="\x92\x07") returned 2 [0111.062] lstrlenA (lpString="\x92\x07") returned 2 [0111.062] lstrlenA (lpString="\x92\x07") returned 2 [0111.062] lstrlenA (lpString="\x92\x07") returned 2 [0111.063] capGetDriverDescriptionA () returned 0x0 [0111.063] GetLastError () returned 0x0 [0111.063] SetLastError (dwErrCode=0x0) [0111.063] OpenThemeData () returned 0x3910000 [0111.064] GetSystemMetrics (nIndex=32) returned 4 [0111.064] GetSystemMetrics (nIndex=33) returned 4 [0111.064] CloseThemeData () returned 0x0 [0111.064] lstrlenA (lpString="\x92\x07") returned 2 [0111.064] lstrlenA (lpString="\x92\x07") returned 2 [0111.064] lstrlenA (lpString="\x92\x07") returned 2 [0111.064] lstrlenA (lpString="\x92\x07") returned 2 [0111.064] lstrlenA (lpString="\x92\x07") returned 2 [0111.064] lstrlenA (lpString="\x92\x07") returned 2 [0111.064] capGetDriverDescriptionA () returned 0x0 [0111.065] GetLastError () returned 0x0 [0111.065] SetLastError (dwErrCode=0x0) [0111.065] OpenThemeData () returned 0x3920000 [0111.065] GetSystemMetrics (nIndex=32) returned 4 [0111.065] GetSystemMetrics (nIndex=33) returned 4 [0111.065] CloseThemeData () returned 0x0 [0111.066] lstrlenA (lpString="\x92\x07") returned 2 [0111.066] lstrlenA (lpString="\x92\x07") returned 2 [0111.066] lstrlenA (lpString="\x92\x07") returned 2 [0111.066] lstrlenA (lpString="\x92\x07") returned 2 [0111.066] lstrlenA (lpString="\x92\x07") returned 2 [0111.066] lstrlenA (lpString="\x92\x07") returned 2 [0111.066] capGetDriverDescriptionA () returned 0x0 [0111.067] GetLastError () returned 0x0 [0111.067] SetLastError (dwErrCode=0x0) [0111.067] OpenThemeData () returned 0x3930000 [0111.067] GetSystemMetrics (nIndex=32) returned 4 [0111.067] GetSystemMetrics (nIndex=33) returned 4 [0111.067] CloseThemeData () returned 0x0 [0111.068] lstrlenA (lpString="\x92\x07") returned 2 [0111.068] lstrlenA (lpString="\x92\x07") returned 2 [0111.068] lstrlenA (lpString="\x92\x07") returned 2 [0111.068] lstrlenA (lpString="\x92\x07") returned 2 [0111.068] lstrlenA (lpString="\x92\x07") returned 2 [0111.068] lstrlenA (lpString="\x92\x07") returned 2 [0111.068] capGetDriverDescriptionA () returned 0x0 [0111.068] GetLastError () returned 0x0 [0111.068] SetLastError (dwErrCode=0x0) [0111.068] OpenThemeData () returned 0x3940000 [0111.069] GetSystemMetrics (nIndex=32) returned 4 [0111.069] GetSystemMetrics (nIndex=33) returned 4 [0111.069] CloseThemeData () returned 0x0 [0111.069] lstrlenA (lpString="\x92\x07") returned 2 [0111.069] lstrlenA (lpString="\x92\x07") returned 2 [0111.069] lstrlenA (lpString="\x92\x07") returned 2 [0111.069] lstrlenA (lpString="\x92\x07") returned 2 [0111.069] lstrlenA (lpString="\x92\x07") returned 2 [0111.069] lstrlenA (lpString="\x92\x07") returned 2 [0111.069] capGetDriverDescriptionA () returned 0x0 [0111.070] GetLastError () returned 0x0 [0111.070] SetLastError (dwErrCode=0x0) [0111.070] OpenThemeData () returned 0x3950000 [0111.071] GetSystemMetrics (nIndex=32) returned 4 [0111.071] GetSystemMetrics (nIndex=33) returned 4 [0111.071] CloseThemeData () returned 0x0 [0111.071] lstrlenA (lpString="\x92\x07") returned 2 [0111.071] lstrlenA (lpString="\x92\x07") returned 2 [0111.071] lstrlenA (lpString="\x92\x07") returned 2 [0111.071] lstrlenA (lpString="\x92\x07") returned 2 [0111.071] lstrlenA (lpString="\x92\x07") returned 2 [0111.071] lstrlenA (lpString="\x92\x07") returned 2 [0111.072] capGetDriverDescriptionA () returned 0x0 [0111.072] GetLastError () returned 0x0 [0111.072] SetLastError (dwErrCode=0x0) [0111.072] OpenThemeData () returned 0x3960000 [0111.073] GetSystemMetrics (nIndex=32) returned 4 [0111.073] GetSystemMetrics (nIndex=33) returned 4 [0111.073] CloseThemeData () returned 0x0 [0111.073] lstrlenA (lpString="\x92\x07") returned 2 [0111.073] lstrlenA (lpString="\x92\x07") returned 2 [0111.073] lstrlenA (lpString="\x92\x07") returned 2 [0111.073] lstrlenA (lpString="\x92\x07") returned 2 [0111.073] lstrlenA (lpString="\x92\x07") returned 2 [0111.073] lstrlenA (lpString="\x92\x07") returned 2 [0111.073] capGetDriverDescriptionA () returned 0x0 [0111.074] GetLastError () returned 0x0 [0111.074] SetLastError (dwErrCode=0x0) [0111.074] OpenThemeData () returned 0x3970000 [0111.074] GetSystemMetrics (nIndex=32) returned 4 [0111.074] GetSystemMetrics (nIndex=33) returned 4 [0111.074] CloseThemeData () returned 0x0 [0111.075] lstrlenA (lpString="\x92\x07") returned 2 [0111.075] lstrlenA (lpString="\x92\x07") returned 2 [0111.075] lstrlenA (lpString="\x92\x07") returned 2 [0111.075] lstrlenA (lpString="\x92\x07") returned 2 [0111.075] lstrlenA (lpString="\x92\x07") returned 2 [0111.075] lstrlenA (lpString="\x92\x07") returned 2 [0111.075] capGetDriverDescriptionA () returned 0x0 [0111.076] GetLastError () returned 0x0 [0111.076] SetLastError (dwErrCode=0x0) [0111.076] OpenThemeData () returned 0x3980000 [0111.076] GetSystemMetrics (nIndex=32) returned 4 [0111.076] GetSystemMetrics (nIndex=33) returned 4 [0111.076] CloseThemeData () returned 0x0 [0111.077] lstrlenA (lpString="\x92\x07") returned 2 [0111.077] lstrlenA (lpString="\x92\x07") returned 2 [0111.077] lstrlenA (lpString="\x92\x07") returned 2 [0111.077] lstrlenA (lpString="\x92\x07") returned 2 [0111.077] lstrlenA (lpString="\x92\x07") returned 2 [0111.077] lstrlenA (lpString="\x92\x07") returned 2 [0111.077] capGetDriverDescriptionA () returned 0x0 [0111.077] GetLastError () returned 0x0 [0111.077] SetLastError (dwErrCode=0x0) [0111.077] OpenThemeData () returned 0x3990000 [0111.078] GetSystemMetrics (nIndex=32) returned 4 [0111.078] GetSystemMetrics (nIndex=33) returned 4 [0111.078] CloseThemeData () returned 0x0 [0111.078] lstrlenA (lpString="\x92\x07") returned 2 [0111.078] lstrlenA (lpString="\x92\x07") returned 2 [0111.078] lstrlenA (lpString="\x92\x07") returned 2 [0111.078] lstrlenA (lpString="\x92\x07") returned 2 [0111.078] lstrlenA (lpString="\x92\x07") returned 2 [0111.079] lstrlenA (lpString="\x92\x07") returned 2 [0111.079] capGetDriverDescriptionA () returned 0x0 [0111.079] GetLastError () returned 0x0 [0111.079] SetLastError (dwErrCode=0x0) [0111.079] OpenThemeData () returned 0x39a0000 [0111.080] GetSystemMetrics (nIndex=32) returned 4 [0111.080] GetSystemMetrics (nIndex=33) returned 4 [0111.080] CloseThemeData () returned 0x0 [0111.080] lstrlenA (lpString="\x92\x07") returned 2 [0111.080] lstrlenA (lpString="\x92\x07") returned 2 [0111.080] lstrlenA (lpString="\x92\x07") returned 2 [0111.080] lstrlenA (lpString="\x92\x07") returned 2 [0111.080] lstrlenA (lpString="\x92\x07") returned 2 [0111.080] lstrlenA (lpString="\x92\x07") returned 2 [0111.080] capGetDriverDescriptionA () returned 0x0 [0111.081] GetLastError () returned 0x0 [0111.081] SetLastError (dwErrCode=0x0) [0111.081] OpenThemeData () returned 0x39b0000 [0111.081] GetSystemMetrics (nIndex=32) returned 4 [0111.082] GetSystemMetrics (nIndex=33) returned 4 [0111.082] CloseThemeData () returned 0x0 [0111.082] lstrlenA (lpString="\x92\x07") returned 2 [0111.082] lstrlenA (lpString="\x92\x07") returned 2 [0111.082] lstrlenA (lpString="\x92\x07") returned 2 [0111.082] lstrlenA (lpString="\x92\x07") returned 2 [0111.082] lstrlenA (lpString="\x92\x07") returned 2 [0111.082] lstrlenA (lpString="\x92\x07") returned 2 [0111.082] capGetDriverDescriptionA () returned 0x0 [0111.083] GetLastError () returned 0x0 [0111.083] SetLastError (dwErrCode=0x0) [0111.083] OpenThemeData () returned 0x39c0000 [0111.083] GetSystemMetrics (nIndex=32) returned 4 [0111.083] GetSystemMetrics (nIndex=33) returned 4 [0111.083] CloseThemeData () returned 0x0 [0111.084] lstrlenA (lpString="\x92\x07") returned 2 [0111.084] lstrlenA (lpString="\x92\x07") returned 2 [0111.084] lstrlenA (lpString="\x92\x07") returned 2 [0111.084] lstrlenA (lpString="\x92\x07") returned 2 [0111.084] lstrlenA (lpString="\x92\x07") returned 2 [0111.084] lstrlenA (lpString="\x92\x07") returned 2 [0111.084] capGetDriverDescriptionA () returned 0x0 [0111.084] GetLastError () returned 0x0 [0111.084] SetLastError (dwErrCode=0x0) [0111.084] OpenThemeData () returned 0x39d0000 [0111.085] GetSystemMetrics (nIndex=32) returned 4 [0111.085] GetSystemMetrics (nIndex=33) returned 4 [0111.085] CloseThemeData () returned 0x0 [0111.085] lstrlenA (lpString="\x92\x07") returned 2 [0111.085] lstrlenA (lpString="\x92\x07") returned 2 [0111.085] lstrlenA (lpString="\x92\x07") returned 2 [0111.085] lstrlenA (lpString="\x92\x07") returned 2 [0111.085] lstrlenA (lpString="\x92\x07") returned 2 [0111.085] lstrlenA (lpString="\x92\x07") returned 2 [0111.086] capGetDriverDescriptionA () returned 0x0 [0111.759] GetLastError () returned 0x0 [0111.759] SetLastError (dwErrCode=0x0) [0111.759] OpenThemeData () returned 0x39e0000 [0111.760] GetSystemMetrics (nIndex=32) returned 4 [0111.760] GetSystemMetrics (nIndex=33) returned 4 [0111.760] CloseThemeData () returned 0x0 [0111.760] lstrlenA (lpString="\x92\x07") returned 2 [0111.760] lstrlenA (lpString="\x92\x07") returned 2 [0111.760] lstrlenA (lpString="\x92\x07") returned 2 [0111.760] lstrlenA (lpString="\x92\x07") returned 2 [0111.760] lstrlenA (lpString="\x92\x07") returned 2 [0111.760] lstrlenA (lpString="\x92\x07") returned 2 [0111.760] capGetDriverDescriptionA () returned 0x0 [0111.761] GetLastError () returned 0x0 [0111.761] SetLastError (dwErrCode=0x0) [0111.761] OpenThemeData () returned 0x39f0000 [0111.762] GetSystemMetrics (nIndex=32) returned 4 [0111.762] GetSystemMetrics (nIndex=33) returned 4 [0111.762] CloseThemeData () returned 0x0 [0111.762] lstrlenA (lpString="\x92\x07") returned 2 [0111.762] lstrlenA (lpString="\x92\x07") returned 2 [0111.762] lstrlenA (lpString="\x92\x07") returned 2 [0111.762] lstrlenA (lpString="\x92\x07") returned 2 [0111.762] lstrlenA (lpString="\x92\x07") returned 2 [0111.762] lstrlenA (lpString="\x92\x07") returned 2 [0111.762] capGetDriverDescriptionA () returned 0x0 [0111.763] GetLastError () returned 0x0 [0111.763] SetLastError (dwErrCode=0x0) [0111.763] OpenThemeData () returned 0x3a00000 [0111.763] GetSystemMetrics (nIndex=32) returned 4 [0111.763] GetSystemMetrics (nIndex=33) returned 4 [0111.763] CloseThemeData () returned 0x0 [0111.764] lstrlenA (lpString="\x92\x07") returned 2 [0111.764] lstrlenA (lpString="\x92\x07") returned 2 [0111.764] lstrlenA (lpString="\x92\x07") returned 2 [0111.764] lstrlenA (lpString="\x92\x07") returned 2 [0111.764] lstrlenA (lpString="\x92\x07") returned 2 [0111.764] lstrlenA (lpString="\x92\x07") returned 2 [0111.764] capGetDriverDescriptionA () returned 0x0 [0111.765] GetLastError () returned 0x0 [0111.765] SetLastError (dwErrCode=0x0) [0111.765] OpenThemeData () returned 0x3a10000 [0111.765] GetSystemMetrics (nIndex=32) returned 4 [0111.765] GetSystemMetrics (nIndex=33) returned 4 [0111.765] CloseThemeData () returned 0x0 [0111.765] lstrlenA (lpString="\x92\x07") returned 2 [0111.766] lstrlenA (lpString="\x92\x07") returned 2 [0111.766] lstrlenA (lpString="\x92\x07") returned 2 [0111.766] lstrlenA (lpString="\x92\x07") returned 2 [0111.766] lstrlenA (lpString="\x92\x07") returned 2 [0111.766] lstrlenA (lpString="\x92\x07") returned 2 [0111.766] capGetDriverDescriptionA () returned 0x0 [0111.766] GetLastError () returned 0x0 [0111.766] SetLastError (dwErrCode=0x0) [0111.766] OpenThemeData () returned 0x3a20000 [0111.767] GetSystemMetrics (nIndex=32) returned 4 [0111.767] GetSystemMetrics (nIndex=33) returned 4 [0111.767] CloseThemeData () returned 0x0 [0111.767] lstrlenA (lpString="\x92\x07") returned 2 [0111.767] lstrlenA (lpString="\x92\x07") returned 2 [0111.767] lstrlenA (lpString="\x92\x07") returned 2 [0111.767] lstrlenA (lpString="\x92\x07") returned 2 [0111.767] lstrlenA (lpString="\x92\x07") returned 2 [0111.767] lstrlenA (lpString="\x92\x07") returned 2 [0111.767] capGetDriverDescriptionA () returned 0x0 [0111.768] GetLastError () returned 0x0 [0111.768] SetLastError (dwErrCode=0x0) [0111.768] OpenThemeData () returned 0x3a30000 [0111.768] GetSystemMetrics (nIndex=32) returned 4 [0111.769] GetSystemMetrics (nIndex=33) returned 4 [0111.769] CloseThemeData () returned 0x0 [0111.769] lstrlenA (lpString="\x92\x07") returned 2 [0111.769] lstrlenA (lpString="\x92\x07") returned 2 [0111.769] lstrlenA (lpString="\x92\x07") returned 2 [0111.769] lstrlenA (lpString="\x92\x07") returned 2 [0111.769] lstrlenA (lpString="\x92\x07") returned 2 [0111.769] lstrlenA (lpString="\x92\x07") returned 2 [0111.769] capGetDriverDescriptionA () returned 0x0 [0111.770] GetLastError () returned 0x0 [0111.770] SetLastError (dwErrCode=0x0) [0111.770] OpenThemeData () returned 0x3a40000 [0111.770] GetSystemMetrics (nIndex=32) returned 4 [0111.770] GetSystemMetrics (nIndex=33) returned 4 [0111.770] CloseThemeData () returned 0x0 [0111.771] lstrlenA (lpString="\x92\x07") returned 2 [0111.771] lstrlenA (lpString="\x92\x07") returned 2 [0111.771] lstrlenA (lpString="\x92\x07") returned 2 [0111.771] lstrlenA (lpString="\x92\x07") returned 2 [0111.771] lstrlenA (lpString="\x92\x07") returned 2 [0111.771] lstrlenA (lpString="\x92\x07") returned 2 [0111.771] capGetDriverDescriptionA () returned 0x0 [0111.771] GetLastError () returned 0x0 [0111.771] SetLastError (dwErrCode=0x0) [0111.771] OpenThemeData () returned 0x3a50000 [0111.772] GetSystemMetrics (nIndex=32) returned 4 [0111.772] GetSystemMetrics (nIndex=33) returned 4 [0111.772] CloseThemeData () returned 0x0 [0111.772] lstrlenA (lpString="\x92\x07") returned 2 [0111.772] lstrlenA (lpString="\x92\x07") returned 2 [0111.772] lstrlenA (lpString="\x92\x07") returned 2 [0111.772] lstrlenA (lpString="\x92\x07") returned 2 [0111.772] lstrlenA (lpString="\x92\x07") returned 2 [0111.772] lstrlenA (lpString="\x92\x07") returned 2 [0111.772] capGetDriverDescriptionA () returned 0x0 [0111.773] GetLastError () returned 0x0 [0111.773] SetLastError (dwErrCode=0x0) [0111.773] OpenThemeData () returned 0x3a60000 [0111.774] GetSystemMetrics (nIndex=32) returned 4 [0111.774] GetSystemMetrics (nIndex=33) returned 4 [0111.774] CloseThemeData () returned 0x0 [0111.774] lstrlenA (lpString="\x92\x07") returned 2 [0111.774] lstrlenA (lpString="\x92\x07") returned 2 [0111.774] lstrlenA (lpString="\x92\x07") returned 2 [0111.774] lstrlenA (lpString="\x92\x07") returned 2 [0111.774] lstrlenA (lpString="\x92\x07") returned 2 [0111.774] lstrlenA (lpString="\x92\x07") returned 2 [0111.774] capGetDriverDescriptionA () returned 0x0 [0111.775] GetLastError () returned 0x0 [0111.775] SetLastError (dwErrCode=0x0) [0111.775] OpenThemeData () returned 0x3a70000 [0111.776] GetSystemMetrics (nIndex=32) returned 4 [0111.776] GetSystemMetrics (nIndex=33) returned 4 [0111.776] CloseThemeData () returned 0x0 [0111.776] lstrlenA (lpString="\x92\x07") returned 2 [0111.776] lstrlenA (lpString="\x92\x07") returned 2 [0111.776] lstrlenA (lpString="\x92\x07") returned 2 [0111.776] lstrlenA (lpString="\x92\x07") returned 2 [0111.776] lstrlenA (lpString="\x92\x07") returned 2 [0111.776] lstrlenA (lpString="\x92\x07") returned 2 [0111.776] capGetDriverDescriptionA () returned 0x0 [0111.777] GetLastError () returned 0x0 [0111.777] SetLastError (dwErrCode=0x0) [0111.777] OpenThemeData () returned 0x3a80000 [0111.777] GetSystemMetrics (nIndex=32) returned 4 [0111.777] GetSystemMetrics (nIndex=33) returned 4 [0111.777] CloseThemeData () returned 0x0 [0111.778] lstrlenA (lpString="\x92\x07") returned 2 [0111.778] lstrlenA (lpString="\x92\x07") returned 2 [0111.778] lstrlenA (lpString="\x92\x07") returned 2 [0111.778] lstrlenA (lpString="\x92\x07") returned 2 [0111.778] lstrlenA (lpString="\x92\x07") returned 2 [0111.778] lstrlenA (lpString="\x92\x07") returned 2 [0111.778] capGetDriverDescriptionA () returned 0x0 [0111.778] GetLastError () returned 0x0 [0111.778] SetLastError (dwErrCode=0x0) [0111.778] OpenThemeData () returned 0x3a90000 [0111.779] GetSystemMetrics (nIndex=32) returned 4 [0111.779] GetSystemMetrics (nIndex=33) returned 4 [0111.779] CloseThemeData () returned 0x0 [0111.779] lstrlenA (lpString="\x92\x07") returned 2 [0111.779] lstrlenA (lpString="\x92\x07") returned 2 [0111.780] lstrlenA (lpString="\x92\x07") returned 2 [0111.780] lstrlenA (lpString="\x92\x07") returned 2 [0111.780] lstrlenA (lpString="\x92\x07") returned 2 [0111.780] lstrlenA (lpString="\x92\x07") returned 2 [0111.780] capGetDriverDescriptionA () returned 0x0 [0111.780] GetLastError () returned 0x0 [0111.780] SetLastError (dwErrCode=0x0) [0111.780] OpenThemeData () returned 0x3aa0000 [0111.781] GetSystemMetrics (nIndex=32) returned 4 [0111.781] GetSystemMetrics (nIndex=33) returned 4 [0111.781] CloseThemeData () returned 0x0 [0111.781] lstrlenA (lpString="\x92\x07") returned 2 [0111.781] lstrlenA (lpString="\x92\x07") returned 2 [0111.781] lstrlenA (lpString="\x92\x07") returned 2 [0111.781] lstrlenA (lpString="\x92\x07") returned 2 [0111.781] lstrlenA (lpString="\x92\x07") returned 2 [0111.781] lstrlenA (lpString="\x92\x07") returned 2 [0111.781] capGetDriverDescriptionA () returned 0x0 [0111.782] GetLastError () returned 0x0 [0111.782] SetLastError (dwErrCode=0x0) [0111.782] OpenThemeData () returned 0x3ab0000 [0111.782] GetSystemMetrics (nIndex=32) returned 4 [0111.783] GetSystemMetrics (nIndex=33) returned 4 [0111.783] CloseThemeData () returned 0x0 [0111.783] lstrlenA (lpString="\x92\x07") returned 2 [0111.783] lstrlenA (lpString="\x92\x07") returned 2 [0111.783] lstrlenA (lpString="\x92\x07") returned 2 [0111.783] lstrlenA (lpString="\x92\x07") returned 2 [0111.783] lstrlenA (lpString="\x92\x07") returned 2 [0111.783] lstrlenA (lpString="\x92\x07") returned 2 [0111.783] capGetDriverDescriptionA () returned 0x0 [0111.784] GetLastError () returned 0x0 [0111.784] SetLastError (dwErrCode=0x0) [0111.784] OpenThemeData () returned 0x3ac0000 [0111.784] GetSystemMetrics (nIndex=32) returned 4 [0111.784] GetSystemMetrics (nIndex=33) returned 4 [0111.784] CloseThemeData () returned 0x0 [0111.785] lstrlenA (lpString="\x92\x07") returned 2 [0111.785] lstrlenA (lpString="\x92\x07") returned 2 [0111.785] lstrlenA (lpString="\x92\x07") returned 2 [0111.785] lstrlenA (lpString="\x92\x07") returned 2 [0111.785] lstrlenA (lpString="\x92\x07") returned 2 [0111.785] lstrlenA (lpString="\x92\x07") returned 2 [0111.785] capGetDriverDescriptionA () returned 0x0 [0111.785] GetLastError () returned 0x0 [0111.786] SetLastError (dwErrCode=0x0) [0111.786] OpenThemeData () returned 0x3ad0000 [0111.786] GetSystemMetrics (nIndex=32) returned 4 [0111.786] GetSystemMetrics (nIndex=33) returned 4 [0111.786] CloseThemeData () returned 0x0 [0111.786] lstrlenA (lpString="\x92\x07") returned 2 [0111.786] lstrlenA (lpString="\x92\x07") returned 2 [0111.786] lstrlenA (lpString="\x92\x07") returned 2 [0111.786] lstrlenA (lpString="\x92\x07") returned 2 [0111.786] lstrlenA (lpString="\x92\x07") returned 2 [0111.787] lstrlenA (lpString="\x92\x07") returned 2 [0111.787] capGetDriverDescriptionA () returned 0x0 [0111.787] GetLastError () returned 0x0 [0111.787] SetLastError (dwErrCode=0x0) [0111.787] OpenThemeData () returned 0x3ae0000 [0111.788] GetSystemMetrics (nIndex=32) returned 4 [0111.788] GetSystemMetrics (nIndex=33) returned 4 [0111.788] CloseThemeData () returned 0x0 [0111.788] lstrlenA (lpString="\x92\x07") returned 2 [0111.788] lstrlenA (lpString="\x92\x07") returned 2 [0111.788] lstrlenA (lpString="\x92\x07") returned 2 [0111.788] lstrlenA (lpString="\x92\x07") returned 2 [0111.788] lstrlenA (lpString="\x92\x07") returned 2 [0111.788] lstrlenA (lpString="\x92\x07") returned 2 [0111.788] capGetDriverDescriptionA () returned 0x0 [0111.789] GetLastError () returned 0x0 [0111.789] SetLastError (dwErrCode=0x0) [0111.789] OpenThemeData () returned 0x3af0000 [0111.790] GetSystemMetrics (nIndex=32) returned 4 [0111.790] GetSystemMetrics (nIndex=33) returned 4 [0111.790] CloseThemeData () returned 0x0 [0111.790] lstrlenA (lpString="\x92\x07") returned 2 [0111.790] lstrlenA (lpString="\x92\x07") returned 2 [0111.790] lstrlenA (lpString="\x92\x07") returned 2 [0111.790] lstrlenA (lpString="\x92\x07") returned 2 [0111.790] lstrlenA (lpString="\x92\x07") returned 2 [0111.790] lstrlenA (lpString="\x92\x07") returned 2 [0111.790] capGetDriverDescriptionA () returned 0x0 [0111.791] GetLastError () returned 0x0 [0111.791] SetLastError (dwErrCode=0x0) [0111.791] OpenThemeData () returned 0x3b00000 [0111.791] GetSystemMetrics (nIndex=32) returned 4 [0111.791] GetSystemMetrics (nIndex=33) returned 4 [0111.791] CloseThemeData () returned 0x0 [0111.792] lstrlenA (lpString="\x92\x07") returned 2 [0111.792] lstrlenA (lpString="\x92\x07") returned 2 [0111.792] lstrlenA (lpString="\x92\x07") returned 2 [0111.792] lstrlenA (lpString="\x92\x07") returned 2 [0111.792] lstrlenA (lpString="\x92\x07") returned 2 [0111.792] lstrlenA (lpString="\x92\x07") returned 2 [0111.792] capGetDriverDescriptionA () returned 0x0 [0111.793] GetLastError () returned 0x0 [0111.793] SetLastError (dwErrCode=0x0) [0111.793] OpenThemeData () returned 0x3b10000 [0111.793] GetSystemMetrics (nIndex=32) returned 4 [0111.793] GetSystemMetrics (nIndex=33) returned 4 [0111.793] CloseThemeData () returned 0x0 [0111.793] lstrlenA (lpString="\x92\x07") returned 2 [0111.794] lstrlenA (lpString="\x92\x07") returned 2 [0111.794] lstrlenA (lpString="\x92\x07") returned 2 [0111.794] lstrlenA (lpString="\x92\x07") returned 2 [0111.794] lstrlenA (lpString="\x92\x07") returned 2 [0111.794] lstrlenA (lpString="\x92\x07") returned 2 [0111.794] capGetDriverDescriptionA () returned 0x0 [0111.794] GetLastError () returned 0x0 [0111.794] SetLastError (dwErrCode=0x0) [0111.794] OpenThemeData () returned 0x3b20000 [0111.795] GetSystemMetrics (nIndex=32) returned 4 [0111.795] GetSystemMetrics (nIndex=33) returned 4 [0111.795] CloseThemeData () returned 0x0 [0112.095] lstrlenA (lpString="\x92\x07") returned 2 [0112.095] lstrlenA (lpString="\x92\x07") returned 2 [0112.095] lstrlenA (lpString="\x92\x07") returned 2 [0112.112] lstrlenA (lpString="\x92\x07") returned 2 [0112.112] lstrlenA (lpString="\x92\x07") returned 2 [0112.113] lstrlenA (lpString="\x92\x07") returned 2 [0112.115] capGetDriverDescriptionA () returned 0x0 [0112.117] GetLastError () returned 0x0 [0112.117] SetLastError (dwErrCode=0x0) [0112.117] OpenThemeData () returned 0x3b30000 [0112.118] GetSystemMetrics (nIndex=32) returned 4 [0112.118] GetSystemMetrics (nIndex=33) returned 4 [0112.118] CloseThemeData () returned 0x0 [0112.118] lstrlenA (lpString="\x92\x07") returned 2 [0112.118] lstrlenA (lpString="\x92\x07") returned 2 [0112.118] lstrlenA (lpString="\x92\x07") returned 2 [0112.118] lstrlenA (lpString="\x92\x07") returned 2 [0112.118] lstrlenA (lpString="\x92\x07") returned 2 [0112.118] lstrlenA (lpString="\x92\x07") returned 2 [0112.119] capGetDriverDescriptionA () returned 0x0 [0112.119] GetLastError () returned 0x0 [0112.119] SetLastError (dwErrCode=0x0) [0112.119] OpenThemeData () returned 0x3b40000 [0112.120] GetSystemMetrics (nIndex=32) returned 4 [0112.120] GetSystemMetrics (nIndex=33) returned 4 [0112.120] CloseThemeData () returned 0x0 [0112.120] lstrlenA (lpString="\x92\x07") returned 2 [0112.120] lstrlenA (lpString="\x92\x07") returned 2 [0112.121] lstrlenA (lpString="\x92\x07") returned 2 [0112.121] lstrlenA (lpString="\x92\x07") returned 2 [0112.121] lstrlenA (lpString="\x92\x07") returned 2 [0112.121] lstrlenA (lpString="\x92\x07") returned 2 [0112.121] capGetDriverDescriptionA () returned 0x0 [0112.121] GetLastError () returned 0x0 [0112.121] SetLastError (dwErrCode=0x0) [0112.121] OpenThemeData () returned 0x3b50000 [0112.122] GetSystemMetrics (nIndex=32) returned 4 [0112.122] GetSystemMetrics (nIndex=33) returned 4 [0112.122] CloseThemeData () returned 0x0 [0112.123] lstrlenA (lpString="\x92\x07") returned 2 [0112.123] lstrlenA (lpString="\x92\x07") returned 2 [0112.123] lstrlenA (lpString="\x92\x07") returned 2 [0112.123] lstrlenA (lpString="\x92\x07") returned 2 [0112.123] lstrlenA (lpString="\x92\x07") returned 2 [0112.123] lstrlenA (lpString="\x92\x07") returned 2 [0112.123] capGetDriverDescriptionA () returned 0x0 [0112.123] GetLastError () returned 0x0 [0112.123] SetLastError (dwErrCode=0x0) [0112.124] OpenThemeData () returned 0x3b60000 [0112.124] GetSystemMetrics (nIndex=32) returned 4 [0112.124] GetSystemMetrics (nIndex=33) returned 4 [0112.124] CloseThemeData () returned 0x0 [0112.124] lstrlenA (lpString="\x92\x07") returned 2 [0112.125] lstrlenA (lpString="\x92\x07") returned 2 [0112.125] lstrlenA (lpString="\x92\x07") returned 2 [0112.125] lstrlenA (lpString="\x92\x07") returned 2 [0112.125] lstrlenA (lpString="\x92\x07") returned 2 [0112.125] lstrlenA (lpString="\x92\x07") returned 2 [0112.125] capGetDriverDescriptionA () returned 0x0 [0112.125] GetLastError () returned 0x0 [0112.125] SetLastError (dwErrCode=0x0) [0112.125] OpenThemeData () returned 0x3b70000 [0112.126] GetSystemMetrics (nIndex=32) returned 4 [0112.126] GetSystemMetrics (nIndex=33) returned 4 [0112.126] CloseThemeData () returned 0x0 [0112.127] lstrlenA (lpString="\x92\x07") returned 2 [0112.127] lstrlenA (lpString="\x92\x07") returned 2 [0112.127] lstrlenA (lpString="\x92\x07") returned 2 [0112.127] lstrlenA (lpString="\x92\x07") returned 2 [0112.127] lstrlenA (lpString="\x92\x07") returned 2 [0112.127] lstrlenA (lpString="\x92\x07") returned 2 [0112.128] capGetDriverDescriptionA () returned 0x0 [0112.128] GetLastError () returned 0x0 [0112.128] SetLastError (dwErrCode=0x0) [0112.128] OpenThemeData () returned 0x3b80000 [0112.132] GetSystemMetrics (nIndex=32) returned 4 [0112.132] GetSystemMetrics (nIndex=33) returned 4 [0112.132] CloseThemeData () returned 0x0 [0112.132] lstrlenA (lpString="\x92\x07") returned 2 [0112.132] lstrlenA (lpString="\x92\x07") returned 2 [0112.132] lstrlenA (lpString="\x92\x07") returned 2 [0112.132] lstrlenA (lpString="\x92\x07") returned 2 [0112.132] lstrlenA (lpString="\x92\x07") returned 2 [0112.132] lstrlenA (lpString="\x92\x07") returned 2 [0112.132] capGetDriverDescriptionA () returned 0x0 [0112.133] GetLastError () returned 0x0 [0112.133] SetLastError (dwErrCode=0x0) [0112.133] OpenThemeData () returned 0x3b90000 [0112.135] GetSystemMetrics (nIndex=32) returned 4 [0112.135] GetSystemMetrics (nIndex=33) returned 4 [0112.135] CloseThemeData () returned 0x0 [0112.135] lstrlenA (lpString="\x92\x07") returned 2 [0112.135] lstrlenA (lpString="\x92\x07") returned 2 [0112.135] lstrlenA (lpString="\x92\x07") returned 2 [0112.135] lstrlenA (lpString="\x92\x07") returned 2 [0112.135] lstrlenA (lpString="\x92\x07") returned 2 [0112.135] lstrlenA (lpString="\x92\x07") returned 2 [0112.135] capGetDriverDescriptionA () returned 0x0 [0112.136] GetLastError () returned 0x0 [0112.136] SetLastError (dwErrCode=0x0) [0112.136] OpenThemeData () returned 0x3ba0000 [0112.193] GetSystemMetrics (nIndex=32) returned 4 [0112.193] GetSystemMetrics (nIndex=33) returned 4 [0112.193] CloseThemeData () returned 0x0 [0112.193] lstrlenA (lpString="\x92\x07") returned 2 [0112.193] lstrlenA (lpString="\x92\x07") returned 2 [0112.193] lstrlenA (lpString="\x92\x07") returned 2 [0112.193] lstrlenA (lpString="\x92\x07") returned 2 [0112.193] lstrlenA (lpString="\x92\x07") returned 2 [0112.193] lstrlenA (lpString="\x92\x07") returned 2 [0112.193] capGetDriverDescriptionA () returned 0x0 [0112.194] GetLastError () returned 0x0 [0112.194] SetLastError (dwErrCode=0x0) [0112.194] OpenThemeData () returned 0x3bb0000 [0112.195] GetSystemMetrics (nIndex=32) returned 4 [0112.195] GetSystemMetrics (nIndex=33) returned 4 [0112.195] CloseThemeData () returned 0x0 [0112.195] lstrlenA (lpString="\x92\x07") returned 2 [0112.195] lstrlenA (lpString="\x92\x07") returned 2 [0112.195] lstrlenA (lpString="\x92\x07") returned 2 [0112.195] lstrlenA (lpString="\x92\x07") returned 2 [0112.195] lstrlenA (lpString="\x92\x07") returned 2 [0112.195] lstrlenA (lpString="\x92\x07") returned 2 [0112.195] capGetDriverDescriptionA () returned 0x0 [0112.196] GetLastError () returned 0x0 [0112.196] SetLastError (dwErrCode=0x0) [0112.196] OpenThemeData () returned 0x3bc0000 [0112.196] GetSystemMetrics (nIndex=32) returned 4 [0112.196] GetSystemMetrics (nIndex=33) returned 4 [0112.196] CloseThemeData () returned 0x0 [0112.197] lstrlenA (lpString="\x92\x07") returned 2 [0112.197] lstrlenA (lpString="\x92\x07") returned 2 [0112.197] lstrlenA (lpString="\x92\x07") returned 2 [0112.197] lstrlenA (lpString="\x92\x07") returned 2 [0112.197] lstrlenA (lpString="\x92\x07") returned 2 [0112.197] lstrlenA (lpString="\x92\x07") returned 2 [0112.197] capGetDriverDescriptionA () returned 0x0 [0112.197] GetLastError () returned 0x0 [0112.198] SetLastError (dwErrCode=0x0) [0112.198] OpenThemeData () returned 0x3bd0000 [0112.198] GetSystemMetrics (nIndex=32) returned 4 [0112.198] GetSystemMetrics (nIndex=33) returned 4 [0112.198] CloseThemeData () returned 0x0 [0112.198] lstrlenA (lpString="\x92\x07") returned 2 [0112.198] lstrlenA (lpString="\x92\x07") returned 2 [0112.198] lstrlenA (lpString="\x92\x07") returned 2 [0112.199] lstrlenA (lpString="\x92\x07") returned 2 [0112.199] lstrlenA (lpString="\x92\x07") returned 2 [0112.199] lstrlenA (lpString="\x92\x07") returned 2 [0112.199] capGetDriverDescriptionA () returned 0x0 [0112.199] GetLastError () returned 0x0 [0112.199] SetLastError (dwErrCode=0x0) [0112.199] OpenThemeData () returned 0x3be0000 [0112.200] GetSystemMetrics (nIndex=32) returned 4 [0112.200] GetSystemMetrics (nIndex=33) returned 4 [0112.200] CloseThemeData () returned 0x0 [0112.200] lstrlenA (lpString="\x92\x07") returned 2 [0112.200] lstrlenA (lpString="\x92\x07") returned 2 [0112.200] lstrlenA (lpString="\x92\x07") returned 2 [0112.200] lstrlenA (lpString="\x92\x07") returned 2 [0112.200] lstrlenA (lpString="\x92\x07") returned 2 [0112.200] lstrlenA (lpString="\x92\x07") returned 2 [0112.200] capGetDriverDescriptionA () returned 0x0 [0112.201] GetLastError () returned 0x0 [0112.201] SetLastError (dwErrCode=0x0) [0112.201] OpenThemeData () returned 0x3bf0000 [0112.202] GetSystemMetrics (nIndex=32) returned 4 [0112.202] GetSystemMetrics (nIndex=33) returned 4 [0112.202] CloseThemeData () returned 0x0 [0112.202] lstrlenA (lpString="\x92\x07") returned 2 [0112.202] lstrlenA (lpString="\x92\x07") returned 2 [0112.202] lstrlenA (lpString="\x92\x07") returned 2 [0112.202] lstrlenA (lpString="\x92\x07") returned 2 [0112.202] lstrlenA (lpString="\x92\x07") returned 2 [0112.202] lstrlenA (lpString="\x92\x07") returned 2 [0112.202] capGetDriverDescriptionA () returned 0x0 [0112.203] GetLastError () returned 0x0 [0112.203] SetLastError (dwErrCode=0x0) [0112.203] OpenThemeData () returned 0x3c00000 [0112.203] GetSystemMetrics (nIndex=32) returned 4 [0112.203] GetSystemMetrics (nIndex=33) returned 4 [0112.203] CloseThemeData () returned 0x0 [0112.204] lstrlenA (lpString="\x92\x07") returned 2 [0112.204] lstrlenA (lpString="\x92\x07") returned 2 [0112.204] lstrlenA (lpString="\x92\x07") returned 2 [0112.204] lstrlenA (lpString="\x92\x07") returned 2 [0112.204] lstrlenA (lpString="\x92\x07") returned 2 [0112.204] lstrlenA (lpString="\x92\x07") returned 2 [0112.204] capGetDriverDescriptionA () returned 0x0 [0112.204] GetLastError () returned 0x0 [0112.205] SetLastError (dwErrCode=0x0) [0112.205] OpenThemeData () returned 0x3c10000 [0112.205] GetSystemMetrics (nIndex=32) returned 4 [0112.205] GetSystemMetrics (nIndex=33) returned 4 [0112.205] CloseThemeData () returned 0x0 [0112.206] lstrlenA (lpString="\x92\x07") returned 2 [0112.206] lstrlenA (lpString="\x92\x07") returned 2 [0112.206] lstrlenA (lpString="\x92\x07") returned 2 [0112.206] lstrlenA (lpString="\x92\x07") returned 2 [0112.206] lstrlenA (lpString="\x92\x07") returned 2 [0112.206] lstrlenA (lpString="\x92\x07") returned 2 [0112.206] capGetDriverDescriptionA () returned 0x0 [0112.206] GetLastError () returned 0x0 [0112.206] SetLastError (dwErrCode=0x0) [0112.206] OpenThemeData () returned 0x3c20000 [0112.207] GetSystemMetrics (nIndex=32) returned 4 [0112.207] GetSystemMetrics (nIndex=33) returned 4 [0112.207] CloseThemeData () returned 0x0 [0112.207] lstrlenA (lpString="\x92\x07") returned 2 [0112.207] lstrlenA (lpString="\x92\x07") returned 2 [0112.207] lstrlenA (lpString="\x92\x07") returned 2 [0112.207] lstrlenA (lpString="\x92\x07") returned 2 [0112.207] lstrlenA (lpString="\x92\x07") returned 2 [0112.207] lstrlenA (lpString="\x92\x07") returned 2 [0112.208] capGetDriverDescriptionA () returned 0x0 [0112.208] GetLastError () returned 0x0 [0112.208] SetLastError (dwErrCode=0x0) [0112.208] OpenThemeData () returned 0x3c30000 [0112.209] GetSystemMetrics (nIndex=32) returned 4 [0112.209] GetSystemMetrics (nIndex=33) returned 4 [0112.209] CloseThemeData () returned 0x0 [0112.209] lstrlenA (lpString="\x92\x07") returned 2 [0112.209] lstrlenA (lpString="\x92\x07") returned 2 [0112.209] lstrlenA (lpString="\x92\x07") returned 2 [0112.209] lstrlenA (lpString="\x92\x07") returned 2 [0112.209] lstrlenA (lpString="\x92\x07") returned 2 [0112.209] lstrlenA (lpString="\x92\x07") returned 2 [0112.209] capGetDriverDescriptionA () returned 0x0 [0112.210] GetLastError () returned 0x0 [0112.210] SetLastError (dwErrCode=0x0) [0112.210] OpenThemeData () returned 0x3c40000 [0112.811] GetSystemMetrics (nIndex=32) returned 4 [0112.811] GetSystemMetrics (nIndex=33) returned 4 [0112.811] CloseThemeData () returned 0x0 [0112.811] lstrlenA (lpString="\x92\x07") returned 2 [0112.811] lstrlenA (lpString="\x92\x07") returned 2 [0112.811] lstrlenA (lpString="\x92\x07") returned 2 [0112.811] lstrlenA (lpString="\x92\x07") returned 2 [0112.811] lstrlenA (lpString="\x92\x07") returned 2 [0112.811] lstrlenA (lpString="\x92\x07") returned 2 [0112.811] capGetDriverDescriptionA () returned 0x0 [0112.812] GetLastError () returned 0x0 [0112.812] SetLastError (dwErrCode=0x0) [0112.812] OpenThemeData () returned 0x3c50000 [0112.813] GetSystemMetrics (nIndex=32) returned 4 [0112.813] GetSystemMetrics (nIndex=33) returned 4 [0112.813] CloseThemeData () returned 0x0 [0112.813] lstrlenA (lpString="\x92\x07") returned 2 [0112.813] lstrlenA (lpString="\x92\x07") returned 2 [0112.813] lstrlenA (lpString="\x92\x07") returned 2 [0112.813] lstrlenA (lpString="\x92\x07") returned 2 [0112.813] lstrlenA (lpString="\x92\x07") returned 2 [0112.813] lstrlenA (lpString="\x92\x07") returned 2 [0112.813] capGetDriverDescriptionA () returned 0x0 [0112.814] GetLastError () returned 0x0 [0112.814] SetLastError (dwErrCode=0x0) [0112.814] OpenThemeData () returned 0x3c60000 [0112.814] GetSystemMetrics (nIndex=32) returned 4 [0112.814] GetSystemMetrics (nIndex=33) returned 4 [0112.814] CloseThemeData () returned 0x0 [0112.815] lstrlenA (lpString="\x92\x07") returned 2 [0112.815] lstrlenA (lpString="\x92\x07") returned 2 [0112.815] lstrlenA (lpString="\x92\x07") returned 2 [0112.815] lstrlenA (lpString="\x92\x07") returned 2 [0112.815] lstrlenA (lpString="\x92\x07") returned 2 [0112.815] lstrlenA (lpString="\x92\x07") returned 2 [0112.815] capGetDriverDescriptionA () returned 0x0 [0112.816] GetLastError () returned 0x0 [0112.816] SetLastError (dwErrCode=0x0) [0112.816] OpenThemeData () returned 0x3c70000 [0112.816] GetSystemMetrics (nIndex=32) returned 4 [0112.816] GetSystemMetrics (nIndex=33) returned 4 [0112.816] CloseThemeData () returned 0x0 [0112.817] lstrlenA (lpString="\x92\x07") returned 2 [0112.817] lstrlenA (lpString="\x92\x07") returned 2 [0112.817] lstrlenA (lpString="\x92\x07") returned 2 [0112.817] lstrlenA (lpString="\x92\x07") returned 2 [0112.817] lstrlenA (lpString="\x92\x07") returned 2 [0112.817] lstrlenA (lpString="\x92\x07") returned 2 [0112.817] capGetDriverDescriptionA () returned 0x0 [0112.818] GetLastError () returned 0x0 [0112.818] SetLastError (dwErrCode=0x0) [0112.818] OpenThemeData () returned 0x3c80000 [0112.818] GetSystemMetrics (nIndex=32) returned 4 [0112.818] GetSystemMetrics (nIndex=33) returned 4 [0112.818] CloseThemeData () returned 0x0 [0112.818] lstrlenA (lpString="\x92\x07") returned 2 [0112.818] lstrlenA (lpString="\x92\x07") returned 2 [0112.818] lstrlenA (lpString="\x92\x07") returned 2 [0112.818] lstrlenA (lpString="\x92\x07") returned 2 [0112.819] lstrlenA (lpString="\x92\x07") returned 2 [0112.819] lstrlenA (lpString="\x92\x07") returned 2 [0112.819] capGetDriverDescriptionA () returned 0x0 [0112.819] GetLastError () returned 0x0 [0112.819] SetLastError (dwErrCode=0x0) [0112.819] OpenThemeData () returned 0x3c90000 [0112.820] GetSystemMetrics (nIndex=32) returned 4 [0112.820] GetSystemMetrics (nIndex=33) returned 4 [0112.820] CloseThemeData () returned 0x0 [0112.820] lstrlenA (lpString="\x92\x07") returned 2 [0112.820] lstrlenA (lpString="\x92\x07") returned 2 [0112.820] lstrlenA (lpString="\x92\x07") returned 2 [0112.820] lstrlenA (lpString="\x92\x07") returned 2 [0112.820] lstrlenA (lpString="\x92\x07") returned 2 [0112.820] lstrlenA (lpString="\x92\x07") returned 2 [0112.820] capGetDriverDescriptionA () returned 0x0 [0112.821] GetLastError () returned 0x0 [0112.821] SetLastError (dwErrCode=0x0) [0112.821] OpenThemeData () returned 0x3ca0000 [0112.822] GetSystemMetrics (nIndex=32) returned 4 [0112.822] GetSystemMetrics (nIndex=33) returned 4 [0112.822] CloseThemeData () returned 0x0 [0112.822] lstrlenA (lpString="\x92\x07") returned 2 [0112.822] lstrlenA (lpString="\x92\x07") returned 2 [0112.822] lstrlenA (lpString="\x92\x07") returned 2 [0112.822] lstrlenA (lpString="\x92\x07") returned 2 [0112.822] lstrlenA (lpString="\x92\x07") returned 2 [0112.822] lstrlenA (lpString="\x92\x07") returned 2 [0112.822] capGetDriverDescriptionA () returned 0x0 [0112.823] GetLastError () returned 0x0 [0112.823] SetLastError (dwErrCode=0x0) [0112.823] OpenThemeData () returned 0x3cb0000 [0112.823] GetSystemMetrics (nIndex=32) returned 4 [0112.823] GetSystemMetrics (nIndex=33) returned 4 [0112.823] CloseThemeData () returned 0x0 [0112.824] lstrlenA (lpString="\x92\x07") returned 2 [0112.824] lstrlenA (lpString="\x92\x07") returned 2 [0112.824] lstrlenA (lpString="\x92\x07") returned 2 [0112.824] lstrlenA (lpString="\x92\x07") returned 2 [0112.824] lstrlenA (lpString="\x92\x07") returned 2 [0112.824] lstrlenA (lpString="\x92\x07") returned 2 [0112.824] capGetDriverDescriptionA () returned 0x0 [0112.824] GetLastError () returned 0x0 [0112.825] SetLastError (dwErrCode=0x0) [0112.825] OpenThemeData () returned 0x3cc0000 [0112.825] GetSystemMetrics (nIndex=32) returned 4 [0112.825] GetSystemMetrics (nIndex=33) returned 4 [0112.825] CloseThemeData () returned 0x0 [0112.825] lstrlenA (lpString="\x92\x07") returned 2 [0112.825] lstrlenA (lpString="\x92\x07") returned 2 [0112.825] lstrlenA (lpString="\x92\x07") returned 2 [0112.825] lstrlenA (lpString="\x92\x07") returned 2 [0112.825] lstrlenA (lpString="\x92\x07") returned 2 [0112.826] lstrlenA (lpString="\x92\x07") returned 2 [0112.826] capGetDriverDescriptionA () returned 0x0 [0112.826] GetLastError () returned 0x0 [0112.826] SetLastError (dwErrCode=0x0) [0112.826] OpenThemeData () returned 0x3cd0000 [0112.827] GetSystemMetrics (nIndex=32) returned 4 [0112.827] GetSystemMetrics (nIndex=33) returned 4 [0112.827] CloseThemeData () returned 0x0 [0112.827] lstrlenA (lpString="\x92\x07") returned 2 [0112.827] lstrlenA (lpString="\x92\x07") returned 2 [0112.827] lstrlenA (lpString="\x92\x07") returned 2 [0112.827] lstrlenA (lpString="\x92\x07") returned 2 [0112.827] lstrlenA (lpString="\x92\x07") returned 2 [0112.827] lstrlenA (lpString="\x92\x07") returned 2 [0112.827] capGetDriverDescriptionA () returned 0x0 [0112.828] GetLastError () returned 0x0 [0112.828] SetLastError (dwErrCode=0x0) [0112.828] OpenThemeData () returned 0x3ce0000 [0112.829] GetSystemMetrics (nIndex=32) returned 4 [0112.829] GetSystemMetrics (nIndex=33) returned 4 [0112.829] CloseThemeData () returned 0x0 [0112.829] lstrlenA (lpString="\x92\x07") returned 2 [0112.829] lstrlenA (lpString="\x92\x07") returned 2 [0112.829] lstrlenA (lpString="\x92\x07") returned 2 [0112.829] lstrlenA (lpString="\x92\x07") returned 2 [0112.829] lstrlenA (lpString="\x92\x07") returned 2 [0112.829] lstrlenA (lpString="\x92\x07") returned 2 [0112.829] capGetDriverDescriptionA () returned 0x0 [0112.830] GetLastError () returned 0x0 [0112.830] SetLastError (dwErrCode=0x0) [0112.830] OpenThemeData () returned 0x3cf0000 [0112.830] GetSystemMetrics (nIndex=32) returned 4 [0112.830] GetSystemMetrics (nIndex=33) returned 4 [0112.830] CloseThemeData () returned 0x0 [0112.831] lstrlenA (lpString="\x92\x07") returned 2 [0112.831] lstrlenA (lpString="\x92\x07") returned 2 [0112.831] lstrlenA (lpString="\x92\x07") returned 2 [0112.831] lstrlenA (lpString="\x92\x07") returned 2 [0112.831] lstrlenA (lpString="\x92\x07") returned 2 [0112.831] lstrlenA (lpString="\x92\x07") returned 2 [0112.831] capGetDriverDescriptionA () returned 0x0 [0112.831] GetLastError () returned 0x0 [0112.831] SetLastError (dwErrCode=0x0) [0112.832] OpenThemeData () returned 0x3d00000 [0112.835] GetSystemMetrics (nIndex=32) returned 4 [0112.835] GetSystemMetrics (nIndex=33) returned 4 [0112.835] CloseThemeData () returned 0x0 [0112.836] lstrlenA (lpString="\x92\x07") returned 2 [0112.836] lstrlenA (lpString="\x92\x07") returned 2 [0112.837] lstrlenA (lpString="\x92\x07") returned 2 [0112.837] lstrlenA (lpString="\x92\x07") returned 2 [0112.837] lstrlenA (lpString="\x92\x07") returned 2 [0112.837] lstrlenA (lpString="\x92\x07") returned 2 [0112.837] capGetDriverDescriptionA () returned 0x0 [0112.839] GetLastError () returned 0x0 [0112.839] SetLastError (dwErrCode=0x0) [0112.840] OpenThemeData () returned 0x3d10000 [0112.851] GetSystemMetrics (nIndex=32) returned 4 [0112.851] GetSystemMetrics (nIndex=33) returned 4 [0112.851] CloseThemeData () returned 0x0 [0112.851] lstrlenA (lpString="\x92\x07") returned 2 [0112.851] lstrlenA (lpString="\x92\x07") returned 2 [0112.851] lstrlenA (lpString="\x92\x07") returned 2 [0112.851] lstrlenA (lpString="\x92\x07") returned 2 [0112.851] lstrlenA (lpString="\x92\x07") returned 2 [0112.851] lstrlenA (lpString="\x92\x07") returned 2 [0112.851] capGetDriverDescriptionA () returned 0x0 [0112.852] GetLastError () returned 0x0 [0112.852] SetLastError (dwErrCode=0x0) [0112.852] OpenThemeData () returned 0x3d20000 [0112.853] GetSystemMetrics (nIndex=32) returned 4 [0112.853] GetSystemMetrics (nIndex=33) returned 4 [0112.853] CloseThemeData () returned 0x0 [0112.853] lstrlenA (lpString="\x92\x07") returned 2 [0112.853] lstrlenA (lpString="\x92\x07") returned 2 [0112.853] lstrlenA (lpString="\x92\x07") returned 2 [0112.853] lstrlenA (lpString="\x92\x07") returned 2 [0112.853] lstrlenA (lpString="\x92\x07") returned 2 [0112.853] lstrlenA (lpString="\x92\x07") returned 2 [0112.853] capGetDriverDescriptionA () returned 0x0 [0112.854] GetLastError () returned 0x0 [0112.854] SetLastError (dwErrCode=0x0) [0112.854] OpenThemeData () returned 0x3d30000 [0112.854] GetSystemMetrics (nIndex=32) returned 4 [0112.854] GetSystemMetrics (nIndex=33) returned 4 [0112.855] CloseThemeData () returned 0x0 [0112.855] lstrlenA (lpString="\x92\x07") returned 2 [0112.855] lstrlenA (lpString="\x92\x07") returned 2 [0112.855] lstrlenA (lpString="\x92\x07") returned 2 [0112.855] lstrlenA (lpString="\x92\x07") returned 2 [0112.855] lstrlenA (lpString="\x92\x07") returned 2 [0112.855] lstrlenA (lpString="\x92\x07") returned 2 [0112.855] capGetDriverDescriptionA () returned 0x0 [0112.856] GetLastError () returned 0x0 [0112.856] SetLastError (dwErrCode=0x0) [0112.856] OpenThemeData () returned 0x3d40000 [0112.856] GetSystemMetrics (nIndex=32) returned 4 [0112.856] GetSystemMetrics (nIndex=33) returned 4 [0112.856] CloseThemeData () returned 0x0 [0112.857] lstrlenA (lpString="\x92\x07") returned 2 [0112.857] lstrlenA (lpString="\x92\x07") returned 2 [0112.857] lstrlenA (lpString="\x92\x07") returned 2 [0112.857] lstrlenA (lpString="\x92\x07") returned 2 [0112.857] lstrlenA (lpString="\x92\x07") returned 2 [0112.857] lstrlenA (lpString="\x92\x07") returned 2 [0112.857] capGetDriverDescriptionA () returned 0x0 [0112.857] GetLastError () returned 0x0 [0112.857] SetLastError (dwErrCode=0x0) [0112.857] OpenThemeData () returned 0x3d50000 [0112.858] GetSystemMetrics (nIndex=32) returned 4 [0112.858] GetSystemMetrics (nIndex=33) returned 4 [0112.858] CloseThemeData () returned 0x0 [0113.083] lstrlenA (lpString="\x92\x07") returned 2 [0113.083] lstrlenA (lpString="\x92\x07") returned 2 [0113.083] lstrlenA (lpString="\x92\x07") returned 2 [0113.083] lstrlenA (lpString="\x92\x07") returned 2 [0113.083] lstrlenA (lpString="\x92\x07") returned 2 [0113.083] lstrlenA (lpString="\x92\x07") returned 2 [0113.083] capGetDriverDescriptionA () returned 0x0 [0113.084] GetLastError () returned 0x0 [0113.084] SetLastError (dwErrCode=0x0) [0113.084] OpenThemeData () returned 0x3d60000 [0113.084] GetSystemMetrics (nIndex=32) returned 4 [0113.084] GetSystemMetrics (nIndex=33) returned 4 [0113.084] CloseThemeData () returned 0x0 [0113.085] lstrlenA (lpString="\x92\x07") returned 2 [0113.085] lstrlenA (lpString="\x92\x07") returned 2 [0113.085] lstrlenA (lpString="\x92\x07") returned 2 [0113.085] lstrlenA (lpString="\x92\x07") returned 2 [0113.085] lstrlenA (lpString="\x92\x07") returned 2 [0113.085] lstrlenA (lpString="\x92\x07") returned 2 [0113.085] capGetDriverDescriptionA () returned 0x0 [0113.085] GetLastError () returned 0x0 [0113.086] SetLastError (dwErrCode=0x0) [0113.086] OpenThemeData () returned 0x3d70000 [0113.086] GetSystemMetrics (nIndex=32) returned 4 [0113.086] GetSystemMetrics (nIndex=33) returned 4 [0113.086] CloseThemeData () returned 0x0 [0113.087] lstrlenA (lpString="\x92\x07") returned 2 [0113.087] lstrlenA (lpString="\x92\x07") returned 2 [0113.087] lstrlenA (lpString="\x92\x07") returned 2 [0113.087] lstrlenA (lpString="\x92\x07") returned 2 [0113.087] lstrlenA (lpString="\x92\x07") returned 2 [0113.087] lstrlenA (lpString="\x92\x07") returned 2 [0113.087] capGetDriverDescriptionA () returned 0x0 [0113.087] GetLastError () returned 0x0 [0113.087] SetLastError (dwErrCode=0x0) [0113.087] OpenThemeData () returned 0x3d80000 [0113.088] GetSystemMetrics (nIndex=32) returned 4 [0113.088] GetSystemMetrics (nIndex=33) returned 4 [0113.088] CloseThemeData () returned 0x0 [0113.088] lstrlenA (lpString="\x92\x07") returned 2 [0113.088] lstrlenA (lpString="\x92\x07") returned 2 [0113.089] lstrlenA (lpString="\x92\x07") returned 2 [0113.089] lstrlenA (lpString="\x92\x07") returned 2 [0113.089] lstrlenA (lpString="\x92\x07") returned 2 [0113.089] lstrlenA (lpString="\x92\x07") returned 2 [0113.089] capGetDriverDescriptionA () returned 0x0 [0113.089] GetLastError () returned 0x0 [0113.089] SetLastError (dwErrCode=0x0) [0113.089] OpenThemeData () returned 0x3d90000 [0113.090] GetSystemMetrics (nIndex=32) returned 4 [0113.090] GetSystemMetrics (nIndex=33) returned 4 [0113.090] CloseThemeData () returned 0x0 [0113.090] lstrlenA (lpString="\x92\x07") returned 2 [0113.090] lstrlenA (lpString="\x92\x07") returned 2 [0113.090] lstrlenA (lpString="\x92\x07") returned 2 [0113.090] lstrlenA (lpString="\x92\x07") returned 2 [0113.090] lstrlenA (lpString="\x92\x07") returned 2 [0113.090] lstrlenA (lpString="\x92\x07") returned 2 [0113.090] capGetDriverDescriptionA () returned 0x0 [0113.091] GetLastError () returned 0x0 [0113.091] SetLastError (dwErrCode=0x0) [0113.091] OpenThemeData () returned 0x3da0000 [0113.092] GetSystemMetrics (nIndex=32) returned 4 [0113.092] GetSystemMetrics (nIndex=33) returned 4 [0113.092] CloseThemeData () returned 0x0 [0113.092] lstrlenA (lpString="\x92\x07") returned 2 [0113.092] lstrlenA (lpString="\x92\x07") returned 2 [0113.092] lstrlenA (lpString="\x92\x07") returned 2 [0113.092] lstrlenA (lpString="\x92\x07") returned 2 [0113.092] lstrlenA (lpString="\x92\x07") returned 2 [0113.092] lstrlenA (lpString="\x92\x07") returned 2 [0113.092] capGetDriverDescriptionA () returned 0x0 [0113.093] GetLastError () returned 0x0 [0113.093] SetLastError (dwErrCode=0x0) [0113.093] OpenThemeData () returned 0x3db0000 [0113.093] GetSystemMetrics (nIndex=32) returned 4 [0113.093] GetSystemMetrics (nIndex=33) returned 4 [0113.093] CloseThemeData () returned 0x0 [0113.094] lstrlenA (lpString="\x92\x07") returned 2 [0113.094] lstrlenA (lpString="\x92\x07") returned 2 [0113.094] lstrlenA (lpString="\x92\x07") returned 2 [0113.094] lstrlenA (lpString="\x92\x07") returned 2 [0113.094] lstrlenA (lpString="\x92\x07") returned 2 [0113.094] lstrlenA (lpString="\x92\x07") returned 2 [0113.094] capGetDriverDescriptionA () returned 0x0 [0113.095] GetLastError () returned 0x0 [0113.095] SetLastError (dwErrCode=0x0) [0113.095] OpenThemeData () returned 0x3dc0000 [0113.096] GetSystemMetrics (nIndex=32) returned 4 [0113.096] GetSystemMetrics (nIndex=33) returned 4 [0113.096] CloseThemeData () returned 0x0 [0113.096] lstrlenA (lpString="\x92\x07") returned 2 [0113.096] lstrlenA (lpString="\x92\x07") returned 2 [0113.096] lstrlenA (lpString="\x92\x07") returned 2 [0113.096] lstrlenA (lpString="\x92\x07") returned 2 [0113.096] lstrlenA (lpString="\x92\x07") returned 2 [0113.096] lstrlenA (lpString="\x92\x07") returned 2 [0113.096] capGetDriverDescriptionA () returned 0x0 [0113.097] GetLastError () returned 0x0 [0113.097] SetLastError (dwErrCode=0x0) [0113.097] OpenThemeData () returned 0x3dd0000 [0113.098] GetSystemMetrics (nIndex=32) returned 4 [0113.098] GetSystemMetrics (nIndex=33) returned 4 [0113.098] CloseThemeData () returned 0x0 [0113.098] lstrlenA (lpString="\x92\x07") returned 2 [0113.098] lstrlenA (lpString="\x92\x07") returned 2 [0113.098] lstrlenA (lpString="\x92\x07") returned 2 [0113.098] lstrlenA (lpString="\x92\x07") returned 2 [0113.098] lstrlenA (lpString="\x92\x07") returned 2 [0113.098] lstrlenA (lpString="\x92\x07") returned 2 [0113.098] capGetDriverDescriptionA () returned 0x0 [0113.099] GetLastError () returned 0x0 [0113.099] SetLastError (dwErrCode=0x0) [0113.099] OpenThemeData () returned 0x3de0000 [0113.099] GetSystemMetrics (nIndex=32) returned 4 [0113.099] GetSystemMetrics (nIndex=33) returned 4 [0113.099] CloseThemeData () returned 0x0 [0113.100] lstrlenA (lpString="\x92\x07") returned 2 [0113.100] lstrlenA (lpString="\x92\x07") returned 2 [0113.100] lstrlenA (lpString="\x92\x07") returned 2 [0113.100] lstrlenA (lpString="\x92\x07") returned 2 [0113.100] lstrlenA (lpString="\x92\x07") returned 2 [0113.100] lstrlenA (lpString="\x92\x07") returned 2 [0113.100] capGetDriverDescriptionA () returned 0x0 [0113.101] GetLastError () returned 0x0 [0113.101] SetLastError (dwErrCode=0x0) [0113.101] OpenThemeData () returned 0x3df0000 [0113.101] GetSystemMetrics (nIndex=32) returned 4 [0113.101] GetSystemMetrics (nIndex=33) returned 4 [0113.101] CloseThemeData () returned 0x0 [0113.102] lstrlenA (lpString="\x92\x07") returned 2 [0113.102] lstrlenA (lpString="\x92\x07") returned 2 [0113.102] lstrlenA (lpString="\x92\x07") returned 2 [0113.102] lstrlenA (lpString="\x92\x07") returned 2 [0113.102] lstrlenA (lpString="\x92\x07") returned 2 [0113.102] lstrlenA (lpString="\x92\x07") returned 2 [0113.102] capGetDriverDescriptionA () returned 0x0 [0113.102] GetLastError () returned 0x0 [0113.102] SetLastError (dwErrCode=0x0) [0113.102] OpenThemeData () returned 0x3e00000 [0113.103] GetSystemMetrics (nIndex=32) returned 4 [0113.103] GetSystemMetrics (nIndex=33) returned 4 [0113.103] CloseThemeData () returned 0x0 [0113.103] lstrlenA (lpString="\x92\x07") returned 2 [0113.103] lstrlenA (lpString="\x92\x07") returned 2 [0113.103] lstrlenA (lpString="\x92\x07") returned 2 [0113.103] lstrlenA (lpString="\x92\x07") returned 2 [0113.103] lstrlenA (lpString="\x92\x07") returned 2 [0113.103] lstrlenA (lpString="\x92\x07") returned 2 [0113.103] capGetDriverDescriptionA () returned 0x0 [0113.105] GetLastError () returned 0x0 [0113.105] SetLastError (dwErrCode=0x0) [0113.106] OpenThemeData () returned 0x3e10000 [0113.106] GetSystemMetrics (nIndex=32) returned 4 [0113.106] GetSystemMetrics (nIndex=33) returned 4 [0113.106] CloseThemeData () returned 0x0 [0113.107] lstrlenA (lpString="\x92\x07") returned 2 [0113.107] lstrlenA (lpString="\x92\x07") returned 2 [0113.107] lstrlenA (lpString="\x92\x07") returned 2 [0113.107] lstrlenA (lpString="\x92\x07") returned 2 [0113.107] lstrlenA (lpString="\x92\x07") returned 2 [0113.107] lstrlenA (lpString="\x92\x07") returned 2 [0113.107] capGetDriverDescriptionA () returned 0x0 [0113.107] GetLastError () returned 0x0 [0113.107] SetLastError (dwErrCode=0x0) [0113.107] OpenThemeData () returned 0x3e20000 [0113.108] GetSystemMetrics (nIndex=32) returned 4 [0113.108] GetSystemMetrics (nIndex=33) returned 4 [0113.108] CloseThemeData () returned 0x0 [0113.108] lstrlenA (lpString="\x92\x07") returned 2 [0113.108] lstrlenA (lpString="\x92\x07") returned 2 [0113.108] lstrlenA (lpString="\x92\x07") returned 2 [0113.108] lstrlenA (lpString="\x92\x07") returned 2 [0113.108] lstrlenA (lpString="\x92\x07") returned 2 [0113.108] lstrlenA (lpString="\x92\x07") returned 2 [0113.109] capGetDriverDescriptionA () returned 0x0 [0113.109] GetLastError () returned 0x0 [0113.109] SetLastError (dwErrCode=0x0) [0113.109] OpenThemeData () returned 0x3e30000 [0113.110] GetSystemMetrics (nIndex=32) returned 4 [0113.110] GetSystemMetrics (nIndex=33) returned 4 [0113.110] CloseThemeData () returned 0x0 [0113.110] lstrlenA (lpString="\x92\x07") returned 2 [0113.110] lstrlenA (lpString="\x92\x07") returned 2 [0113.110] lstrlenA (lpString="\x92\x07") returned 2 [0113.110] lstrlenA (lpString="\x92\x07") returned 2 [0113.110] lstrlenA (lpString="\x92\x07") returned 2 [0113.110] lstrlenA (lpString="\x92\x07") returned 2 [0113.110] capGetDriverDescriptionA () returned 0x0 [0113.111] GetLastError () returned 0x0 [0113.111] SetLastError (dwErrCode=0x0) [0113.111] OpenThemeData () returned 0x3e40000 [0113.111] GetSystemMetrics (nIndex=32) returned 4 [0113.112] GetSystemMetrics (nIndex=33) returned 4 [0113.112] CloseThemeData () returned 0x0 [0113.112] lstrlenA (lpString="\x92\x07") returned 2 [0113.112] lstrlenA (lpString="\x92\x07") returned 2 [0113.112] lstrlenA (lpString="\x92\x07") returned 2 [0113.112] lstrlenA (lpString="\x92\x07") returned 2 [0113.112] lstrlenA (lpString="\x92\x07") returned 2 [0113.112] lstrlenA (lpString="\x92\x07") returned 2 [0113.112] capGetDriverDescriptionA () returned 0x0 [0113.113] GetLastError () returned 0x0 [0113.113] SetLastError (dwErrCode=0x0) [0113.113] OpenThemeData () returned 0x3e50000 [0113.113] GetSystemMetrics (nIndex=32) returned 4 [0113.113] GetSystemMetrics (nIndex=33) returned 4 [0113.113] CloseThemeData () returned 0x0 [0113.114] lstrlenA (lpString="\x92\x07") returned 2 [0113.114] lstrlenA (lpString="\x92\x07") returned 2 [0113.114] lstrlenA (lpString="\x92\x07") returned 2 [0113.114] lstrlenA (lpString="\x92\x07") returned 2 [0113.114] lstrlenA (lpString="\x92\x07") returned 2 [0113.114] lstrlenA (lpString="\x92\x07") returned 2 [0113.114] capGetDriverDescriptionA () returned 0x0 [0113.115] GetLastError () returned 0x0 [0113.115] SetLastError (dwErrCode=0x0) [0113.115] OpenThemeData () returned 0x3e60000 [0113.115] GetSystemMetrics (nIndex=32) returned 4 [0113.115] GetSystemMetrics (nIndex=33) returned 4 [0113.115] CloseThemeData () returned 0x0 [0113.116] lstrlenA (lpString="\x92\x07") returned 2 [0113.116] lstrlenA (lpString="\x92\x07") returned 2 [0113.116] lstrlenA (lpString="\x92\x07") returned 2 [0113.116] lstrlenA (lpString="\x92\x07") returned 2 [0113.116] lstrlenA (lpString="\x92\x07") returned 2 [0113.116] lstrlenA (lpString="\x92\x07") returned 2 [0113.116] capGetDriverDescriptionA () returned 0x0 [0113.116] GetLastError () returned 0x0 [0113.116] SetLastError (dwErrCode=0x0) [0113.116] OpenThemeData () returned 0x3e70000 [0113.117] GetSystemMetrics (nIndex=32) returned 4 [0113.117] GetSystemMetrics (nIndex=33) returned 4 [0113.117] CloseThemeData () returned 0x0 [0113.117] lstrlenA (lpString="\x92\x07") returned 2 [0113.117] lstrlenA (lpString="\x92\x07") returned 2 [0113.117] lstrlenA (lpString="\x92\x07") returned 2 [0113.118] lstrlenA (lpString="\x92\x07") returned 2 [0113.118] lstrlenA (lpString="\x92\x07") returned 2 [0113.118] lstrlenA (lpString="\x92\x07") returned 2 [0113.118] capGetDriverDescriptionA () returned 0x0 [0113.118] GetLastError () returned 0x0 [0113.118] SetLastError (dwErrCode=0x0) [0113.118] OpenThemeData () returned 0x3e80000 [0113.119] GetSystemMetrics (nIndex=32) returned 4 [0113.119] GetSystemMetrics (nIndex=33) returned 4 [0113.119] CloseThemeData () returned 0x0 [0113.119] lstrlenA (lpString="\x92\x07") returned 2 [0113.119] lstrlenA (lpString="\x92\x07") returned 2 [0113.119] lstrlenA (lpString="\x92\x07") returned 2 [0113.119] lstrlenA (lpString="\x92\x07") returned 2 [0113.119] lstrlenA (lpString="\x92\x07") returned 2 [0113.119] lstrlenA (lpString="\x92\x07") returned 2 [0113.119] capGetDriverDescriptionA () returned 0x0 [0113.120] GetLastError () returned 0x0 [0113.120] SetLastError (dwErrCode=0x0) [0113.120] OpenThemeData () returned 0x3e90000 [0113.121] GetSystemMetrics (nIndex=32) returned 4 [0113.121] GetSystemMetrics (nIndex=33) returned 4 [0113.121] CloseThemeData () returned 0x0 [0113.121] lstrlenA (lpString="\x92\x07") returned 2 [0113.121] lstrlenA (lpString="\x92\x07") returned 2 [0113.121] lstrlenA (lpString="\x92\x07") returned 2 [0113.121] lstrlenA (lpString="\x92\x07") returned 2 [0113.121] lstrlenA (lpString="\x92\x07") returned 2 [0113.121] lstrlenA (lpString="\x92\x07") returned 2 [0113.121] capGetDriverDescriptionA () returned 0x0 [0113.122] GetLastError () returned 0x0 [0113.122] SetLastError (dwErrCode=0x0) [0113.122] OpenThemeData () returned 0x3ea0000 [0113.122] GetSystemMetrics (nIndex=32) returned 4 [0113.122] GetSystemMetrics (nIndex=33) returned 4 [0113.123] CloseThemeData () returned 0x0 [0113.123] lstrlenA (lpString="\x92\x07") returned 2 [0113.123] lstrlenA (lpString="\x92\x07") returned 2 [0113.123] lstrlenA (lpString="\x92\x07") returned 2 [0113.123] lstrlenA (lpString="\x92\x07") returned 2 [0113.123] lstrlenA (lpString="\x92\x07") returned 2 [0113.123] lstrlenA (lpString="\x92\x07") returned 2 [0113.123] capGetDriverDescriptionA () returned 0x0 [0113.124] GetLastError () returned 0x0 [0113.124] SetLastError (dwErrCode=0x0) [0113.124] OpenThemeData () returned 0x3eb0000 [0113.124] GetSystemMetrics (nIndex=32) returned 4 [0113.124] GetSystemMetrics (nIndex=33) returned 4 [0113.124] CloseThemeData () returned 0x0 [0113.125] lstrlenA (lpString="\x92\x07") returned 2 [0113.125] lstrlenA (lpString="\x92\x07") returned 2 [0113.125] lstrlenA (lpString="\x92\x07") returned 2 [0113.125] lstrlenA (lpString="\x92\x07") returned 2 [0113.125] lstrlenA (lpString="\x92\x07") returned 2 [0113.125] lstrlenA (lpString="\x92\x07") returned 2 [0113.125] capGetDriverDescriptionA () returned 0x0 [0113.125] GetLastError () returned 0x0 [0113.126] SetLastError (dwErrCode=0x0) [0113.126] OpenThemeData () returned 0x3ec0000 [0113.126] GetSystemMetrics (nIndex=32) returned 4 [0113.126] GetSystemMetrics (nIndex=33) returned 4 [0113.126] CloseThemeData () returned 0x0 [0113.127] lstrlenA (lpString="\x92\x07") returned 2 [0113.127] lstrlenA (lpString="\x92\x07") returned 2 [0113.127] lstrlenA (lpString="\x92\x07") returned 2 [0113.127] lstrlenA (lpString="\x92\x07") returned 2 [0113.127] lstrlenA (lpString="\x92\x07") returned 2 [0113.127] lstrlenA (lpString="\x92\x07") returned 2 [0113.127] capGetDriverDescriptionA () returned 0x0 [0113.283] GetLastError () returned 0x0 [0113.283] SetLastError (dwErrCode=0x0) [0113.283] OpenThemeData () returned 0x3ed0000 [0113.292] GetSystemMetrics (nIndex=32) returned 4 [0113.292] GetSystemMetrics (nIndex=33) returned 4 [0113.292] CloseThemeData () returned 0x0 [0113.292] lstrlenA (lpString="\x92\x07") returned 2 [0113.292] lstrlenA (lpString="\x92\x07") returned 2 [0113.292] lstrlenA (lpString="\x92\x07") returned 2 [0113.292] lstrlenA (lpString="\x92\x07") returned 2 [0113.292] lstrlenA (lpString="\x92\x07") returned 2 [0113.292] lstrlenA (lpString="\x92\x07") returned 2 [0113.295] capGetDriverDescriptionA () returned 0x0 [0113.296] GetLastError () returned 0x0 [0113.296] SetLastError (dwErrCode=0x0) [0113.296] OpenThemeData () returned 0x3ee0000 [0113.296] GetSystemMetrics (nIndex=32) returned 4 [0113.296] GetSystemMetrics (nIndex=33) returned 4 [0113.296] CloseThemeData () returned 0x0 [0113.297] lstrlenA (lpString="\x92\x07") returned 2 [0113.297] lstrlenA (lpString="\x92\x07") returned 2 [0113.297] lstrlenA (lpString="\x92\x07") returned 2 [0113.297] lstrlenA (lpString="\x92\x07") returned 2 [0113.297] lstrlenA (lpString="\x92\x07") returned 2 [0113.297] lstrlenA (lpString="\x92\x07") returned 2 [0113.297] capGetDriverDescriptionA () returned 0x0 [0113.297] GetLastError () returned 0x0 [0113.297] SetLastError (dwErrCode=0x0) [0113.297] OpenThemeData () returned 0x3ef0000 [0113.298] GetSystemMetrics (nIndex=32) returned 4 [0113.298] GetSystemMetrics (nIndex=33) returned 4 [0113.298] CloseThemeData () returned 0x0 [0113.298] lstrlenA (lpString="\x92\x07") returned 2 [0113.298] lstrlenA (lpString="\x92\x07") returned 2 [0113.298] lstrlenA (lpString="\x92\x07") returned 2 [0113.299] lstrlenA (lpString="\x92\x07") returned 2 [0113.299] lstrlenA (lpString="\x92\x07") returned 2 [0113.299] lstrlenA (lpString="\x92\x07") returned 2 [0113.299] capGetDriverDescriptionA () returned 0x0 [0113.300] GetLastError () returned 0x0 [0113.300] SetLastError (dwErrCode=0x0) [0113.300] OpenThemeData () returned 0x3f00000 [0113.300] GetSystemMetrics (nIndex=32) returned 4 [0113.300] GetSystemMetrics (nIndex=33) returned 4 [0113.300] CloseThemeData () returned 0x0 [0113.301] lstrlenA (lpString="\x92\x07") returned 2 [0113.301] lstrlenA (lpString="\x92\x07") returned 2 [0113.301] lstrlenA (lpString="\x92\x07") returned 2 [0113.301] lstrlenA (lpString="\x92\x07") returned 2 [0113.301] lstrlenA (lpString="\x92\x07") returned 2 [0113.301] lstrlenA (lpString="\x92\x07") returned 2 [0113.301] capGetDriverDescriptionA () returned 0x0 [0113.302] GetLastError () returned 0x0 [0113.302] SetLastError (dwErrCode=0x0) [0113.302] OpenThemeData () returned 0x3f10000 [0113.302] GetSystemMetrics (nIndex=32) returned 4 [0113.302] GetSystemMetrics (nIndex=33) returned 4 [0113.302] CloseThemeData () returned 0x0 [0113.303] lstrlenA (lpString="\x92\x07") returned 2 [0113.303] lstrlenA (lpString="\x92\x07") returned 2 [0113.303] lstrlenA (lpString="\x92\x07") returned 2 [0113.303] lstrlenA (lpString="\x92\x07") returned 2 [0113.303] lstrlenA (lpString="\x92\x07") returned 2 [0113.303] lstrlenA (lpString="\x92\x07") returned 2 [0113.303] capGetDriverDescriptionA () returned 0x0 [0113.303] GetLastError () returned 0x0 [0113.303] SetLastError (dwErrCode=0x0) [0113.303] OpenThemeData () returned 0x3f20000 [0113.304] GetSystemMetrics (nIndex=32) returned 4 [0113.304] GetSystemMetrics (nIndex=33) returned 4 [0113.304] CloseThemeData () returned 0x0 [0113.304] lstrlenA (lpString="\x92\x07") returned 2 [0113.304] lstrlenA (lpString="\x92\x07") returned 2 [0113.304] lstrlenA (lpString="\x92\x07") returned 2 [0113.304] lstrlenA (lpString="\x92\x07") returned 2 [0113.304] lstrlenA (lpString="\x92\x07") returned 2 [0113.304] lstrlenA (lpString="\x92\x07") returned 2 [0113.304] capGetDriverDescriptionA () returned 0x0 [0113.305] GetLastError () returned 0x0 [0113.305] SetLastError (dwErrCode=0x0) [0113.305] OpenThemeData () returned 0x3f30000 [0113.306] GetSystemMetrics (nIndex=32) returned 4 [0113.306] GetSystemMetrics (nIndex=33) returned 4 [0113.306] CloseThemeData () returned 0x0 [0113.306] lstrlenA (lpString="\x92\x07") returned 2 [0113.306] lstrlenA (lpString="\x92\x07") returned 2 [0113.306] lstrlenA (lpString="\x92\x07") returned 2 [0113.306] lstrlenA (lpString="\x92\x07") returned 2 [0113.306] lstrlenA (lpString="\x92\x07") returned 2 [0113.306] lstrlenA (lpString="\x92\x07") returned 2 [0113.306] capGetDriverDescriptionA () returned 0x0 [0113.307] GetLastError () returned 0x0 [0113.307] SetLastError (dwErrCode=0x0) [0113.307] OpenThemeData () returned 0x3f40000 [0113.307] GetSystemMetrics (nIndex=32) returned 4 [0113.307] GetSystemMetrics (nIndex=33) returned 4 [0113.308] CloseThemeData () returned 0x0 [0113.308] lstrlenA (lpString="\x92\x07") returned 2 [0113.308] lstrlenA (lpString="\x92\x07") returned 2 [0113.308] lstrlenA (lpString="\x92\x07") returned 2 [0113.308] lstrlenA (lpString="\x92\x07") returned 2 [0113.308] lstrlenA (lpString="\x92\x07") returned 2 [0113.308] lstrlenA (lpString="\x92\x07") returned 2 [0113.308] capGetDriverDescriptionA () returned 0x0 [0113.309] GetLastError () returned 0x0 [0113.309] SetLastError (dwErrCode=0x0) [0113.309] OpenThemeData () returned 0x3f50000 [0113.309] GetSystemMetrics (nIndex=32) returned 4 [0113.309] GetSystemMetrics (nIndex=33) returned 4 [0113.309] CloseThemeData () returned 0x0 [0113.310] lstrlenA (lpString="\x92\x07") returned 2 [0113.310] lstrlenA (lpString="\x92\x07") returned 2 [0113.310] lstrlenA (lpString="\x92\x07") returned 2 [0113.310] lstrlenA (lpString="\x92\x07") returned 2 [0113.310] lstrlenA (lpString="\x92\x07") returned 2 [0113.310] lstrlenA (lpString="\x92\x07") returned 2 [0113.310] capGetDriverDescriptionA () returned 0x0 [0113.311] GetLastError () returned 0x0 [0113.311] SetLastError (dwErrCode=0x0) [0113.311] OpenThemeData () returned 0x3f60000 [0113.311] GetSystemMetrics (nIndex=32) returned 4 [0113.311] GetSystemMetrics (nIndex=33) returned 4 [0113.311] CloseThemeData () returned 0x0 [0113.312] lstrlenA (lpString="\x92\x07") returned 2 [0113.312] lstrlenA (lpString="\x92\x07") returned 2 [0113.312] lstrlenA (lpString="\x92\x07") returned 2 [0113.312] lstrlenA (lpString="\x92\x07") returned 2 [0113.312] lstrlenA (lpString="\x92\x07") returned 2 [0113.312] lstrlenA (lpString="\x92\x07") returned 2 [0113.312] capGetDriverDescriptionA () returned 0x0 [0113.312] GetLastError () returned 0x0 [0113.312] SetLastError (dwErrCode=0x0) [0113.313] OpenThemeData () returned 0x3f70000 [0113.313] GetSystemMetrics (nIndex=32) returned 4 [0113.313] GetSystemMetrics (nIndex=33) returned 4 [0113.313] CloseThemeData () returned 0x0 [0113.313] lstrlenA (lpString="\x92\x07") returned 2 [0113.314] lstrlenA (lpString="\x92\x07") returned 2 [0113.314] lstrlenA (lpString="\x92\x07") returned 2 [0113.314] lstrlenA (lpString="\x92\x07") returned 2 [0113.314] lstrlenA (lpString="\x92\x07") returned 2 [0113.314] lstrlenA (lpString="\x92\x07") returned 2 [0113.314] capGetDriverDescriptionA () returned 0x0 [0113.314] GetLastError () returned 0x0 [0113.314] SetLastError (dwErrCode=0x0) [0113.314] OpenThemeData () returned 0x3f80000 [0113.316] GetSystemMetrics (nIndex=32) returned 4 [0113.316] GetSystemMetrics (nIndex=33) returned 4 [0113.316] CloseThemeData () returned 0x0 [0113.316] lstrlenA (lpString="\x92\x07") returned 2 [0113.316] lstrlenA (lpString="\x92\x07") returned 2 [0113.316] lstrlenA (lpString="\x92\x07") returned 2 [0113.316] lstrlenA (lpString="\x92\x07") returned 2 [0113.316] lstrlenA (lpString="\x92\x07") returned 2 [0113.316] lstrlenA (lpString="\x92\x07") returned 2 [0113.316] capGetDriverDescriptionA () returned 0x0 [0113.317] GetLastError () returned 0x0 [0113.317] SetLastError (dwErrCode=0x0) [0113.317] OpenThemeData () returned 0x3f90000 [0113.317] GetSystemMetrics (nIndex=32) returned 4 [0113.317] GetSystemMetrics (nIndex=33) returned 4 [0113.317] CloseThemeData () returned 0x0 [0113.318] lstrlenA (lpString="\x92\x07") returned 2 [0113.318] lstrlenA (lpString="\x92\x07") returned 2 [0113.318] lstrlenA (lpString="\x92\x07") returned 2 [0113.318] capGetDriverDescriptionA () returned 0x0 [0113.318] GetLastError () returned 0x0 [0113.319] SetLastError (dwErrCode=0x0) [0113.319] OpenThemeData () returned 0x3fa0000 [0113.319] GetSystemMetrics (nIndex=32) returned 4 [0113.319] GetSystemMetrics (nIndex=33) returned 4 [0113.319] CloseThemeData () returned 0x0 [0113.320] capGetDriverDescriptionA () returned 0x0 [0113.320] GetLastError () returned 0x0 [0113.320] SetLastError (dwErrCode=0x0) [0113.320] OpenThemeData () returned 0x3fb0000 [0113.321] GetSystemMetrics (nIndex=32) returned 4 [0113.321] GetSystemMetrics (nIndex=33) returned 4 [0113.321] CloseThemeData () returned 0x0 [0113.321] capGetDriverDescriptionA () returned 0x0 [0113.322] GetLastError () returned 0x0 [0113.322] SetLastError (dwErrCode=0x0) [0113.322] OpenThemeData () returned 0x3fc0000 [0113.322] GetSystemMetrics (nIndex=32) returned 4 [0113.322] GetSystemMetrics (nIndex=33) returned 4 [0113.322] CloseThemeData () returned 0x0 [0113.323] capGetDriverDescriptionA () returned 0x0 [0113.323] GetLastError () returned 0x0 [0113.324] SetLastError (dwErrCode=0x0) [0113.324] OpenThemeData () returned 0x3fd0000 [0113.324] GetSystemMetrics (nIndex=32) returned 4 [0113.324] GetSystemMetrics (nIndex=33) returned 4 [0113.324] CloseThemeData () returned 0x0 [0113.325] capGetDriverDescriptionA () returned 0x0 [0113.325] GetLastError () returned 0x0 [0113.325] SetLastError (dwErrCode=0x0) [0113.325] OpenThemeData () returned 0x3fe0000 [0113.326] GetSystemMetrics (nIndex=32) returned 4 [0113.326] GetSystemMetrics (nIndex=33) returned 4 [0113.326] CloseThemeData () returned 0x0 [0113.326] capGetDriverDescriptionA () returned 0x0 [0113.327] GetLastError () returned 0x0 [0113.327] SetLastError (dwErrCode=0x0) [0113.327] OpenThemeData () returned 0x3ff0000 [0113.327] GetSystemMetrics (nIndex=32) returned 4 [0113.327] GetSystemMetrics (nIndex=33) returned 4 [0113.327] CloseThemeData () returned 0x0 [0113.328] capGetDriverDescriptionA () returned 0x0 [0113.328] GetLastError () returned 0x0 [0113.329] SetLastError (dwErrCode=0x0) [0113.329] OpenThemeData () returned 0x4000000 [0113.329] GetSystemMetrics (nIndex=32) returned 4 [0113.329] GetSystemMetrics (nIndex=33) returned 4 [0113.329] CloseThemeData () returned 0x0 [0113.330] capGetDriverDescriptionA () returned 0x0 [0113.330] GetLastError () returned 0x0 [0113.330] SetLastError (dwErrCode=0x0) [0113.330] OpenThemeData () returned 0x4010000 [0113.990] GetSystemMetrics (nIndex=32) returned 4 [0113.990] GetSystemMetrics (nIndex=33) returned 4 [0113.990] CloseThemeData () returned 0x0 [0113.990] capGetDriverDescriptionA () returned 0x0 [0113.991] GetLastError () returned 0x0 [0113.991] SetLastError (dwErrCode=0x0) [0113.991] OpenThemeData () returned 0x4020000 [0113.992] GetSystemMetrics (nIndex=32) returned 4 [0113.992] GetSystemMetrics (nIndex=33) returned 4 [0113.992] CloseThemeData () returned 0x0 [0113.993] capGetDriverDescriptionA () returned 0x0 [0113.993] GetLastError () returned 0x0 [0113.993] SetLastError (dwErrCode=0x0) [0113.993] OpenThemeData () returned 0x4030000 [0113.994] GetSystemMetrics (nIndex=32) returned 4 [0113.994] GetSystemMetrics (nIndex=33) returned 4 [0113.994] CloseThemeData () returned 0x0 [0113.994] capGetDriverDescriptionA () returned 0x0 [0113.995] GetLastError () returned 0x0 [0113.995] SetLastError (dwErrCode=0x0) [0113.995] OpenThemeData () returned 0x4040000 [0113.995] GetSystemMetrics (nIndex=32) returned 4 [0113.995] GetSystemMetrics (nIndex=33) returned 4 [0113.995] CloseThemeData () returned 0x0 [0113.996] capGetDriverDescriptionA () returned 0x0 [0113.996] GetLastError () returned 0x0 [0113.996] SetLastError (dwErrCode=0x0) [0113.996] OpenThemeData () returned 0x4050000 [0113.997] GetSystemMetrics (nIndex=32) returned 4 [0113.997] GetSystemMetrics (nIndex=33) returned 4 [0113.997] CloseThemeData () returned 0x0 [0113.997] capGetDriverDescriptionA () returned 0x0 [0113.998] GetLastError () returned 0x0 [0113.998] SetLastError (dwErrCode=0x0) [0113.998] OpenThemeData () returned 0x4060000 [0113.999] GetSystemMetrics (nIndex=32) returned 4 [0113.999] GetSystemMetrics (nIndex=33) returned 4 [0113.999] CloseThemeData () returned 0x0 [0113.999] capGetDriverDescriptionA () returned 0x0 [0114.000] GetLastError () returned 0x0 [0114.000] SetLastError (dwErrCode=0x0) [0114.000] OpenThemeData () returned 0x4070000 [0114.000] GetSystemMetrics (nIndex=32) returned 4 [0114.000] GetSystemMetrics (nIndex=33) returned 4 [0114.000] CloseThemeData () returned 0x0 [0114.001] capGetDriverDescriptionA () returned 0x0 [0114.001] GetLastError () returned 0x0 [0114.001] SetLastError (dwErrCode=0x0) [0114.001] OpenThemeData () returned 0x4080000 [0114.002] GetSystemMetrics (nIndex=32) returned 4 [0114.002] GetSystemMetrics (nIndex=33) returned 4 [0114.002] CloseThemeData () returned 0x0 [0114.002] capGetDriverDescriptionA () returned 0x0 [0114.003] GetLastError () returned 0x0 [0114.003] SetLastError (dwErrCode=0x0) [0114.003] OpenThemeData () returned 0x4090000 [0114.003] GetSystemMetrics (nIndex=32) returned 4 [0114.003] GetSystemMetrics (nIndex=33) returned 4 [0114.003] CloseThemeData () returned 0x0 [0114.004] capGetDriverDescriptionA () returned 0x0 [0114.004] GetLastError () returned 0x0 [0114.004] SetLastError (dwErrCode=0x0) [0114.004] OpenThemeData () returned 0x40a0000 [0114.005] GetSystemMetrics (nIndex=32) returned 4 [0114.005] GetSystemMetrics (nIndex=33) returned 4 [0114.005] CloseThemeData () returned 0x0 [0114.005] capGetDriverDescriptionA () returned 0x0 [0114.006] GetLastError () returned 0x0 [0114.006] SetLastError (dwErrCode=0x0) [0114.006] OpenThemeData () returned 0x40b0000 [0114.006] GetSystemMetrics (nIndex=32) returned 4 [0114.006] GetSystemMetrics (nIndex=33) returned 4 [0114.006] CloseThemeData () returned 0x0 [0114.007] capGetDriverDescriptionA () returned 0x0 [0114.007] GetLastError () returned 0x0 [0114.007] SetLastError (dwErrCode=0x0) [0114.007] OpenThemeData () returned 0x40c0000 [0114.008] GetSystemMetrics (nIndex=32) returned 4 [0114.008] GetSystemMetrics (nIndex=33) returned 4 [0114.008] CloseThemeData () returned 0x0 [0114.008] capGetDriverDescriptionA () returned 0x0 [0114.009] GetLastError () returned 0x0 [0114.009] SetLastError (dwErrCode=0x0) [0114.009] OpenThemeData () returned 0x40d0000 [0114.010] GetSystemMetrics (nIndex=32) returned 4 [0114.010] GetSystemMetrics (nIndex=33) returned 4 [0114.010] CloseThemeData () returned 0x0 [0114.010] capGetDriverDescriptionA () returned 0x0 [0114.010] GetLastError () returned 0x0 [0114.011] SetLastError (dwErrCode=0x0) [0114.011] OpenThemeData () returned 0x40e0000 [0114.011] GetSystemMetrics (nIndex=32) returned 4 [0114.011] GetSystemMetrics (nIndex=33) returned 4 [0114.011] CloseThemeData () returned 0x0 [0114.011] capGetDriverDescriptionA () returned 0x0 [0114.012] GetLastError () returned 0x0 [0114.012] SetLastError (dwErrCode=0x0) [0114.012] OpenThemeData () returned 0x40f0000 [0114.013] GetSystemMetrics (nIndex=32) returned 4 [0114.013] GetSystemMetrics (nIndex=33) returned 4 [0114.013] CloseThemeData () returned 0x0 [0114.013] capGetDriverDescriptionA () returned 0x0 [0114.014] GetLastError () returned 0x0 [0114.014] SetLastError (dwErrCode=0x0) [0114.014] OpenThemeData () returned 0x4100000 [0114.014] GetSystemMetrics (nIndex=32) returned 4 [0114.014] GetSystemMetrics (nIndex=33) returned 4 [0114.014] CloseThemeData () returned 0x0 [0114.015] capGetDriverDescriptionA () returned 0x0 [0114.015] GetLastError () returned 0x0 [0114.015] SetLastError (dwErrCode=0x0) [0114.015] OpenThemeData () returned 0x4110000 [0114.016] GetSystemMetrics (nIndex=32) returned 4 [0114.016] GetSystemMetrics (nIndex=33) returned 4 [0114.016] CloseThemeData () returned 0x0 [0114.016] capGetDriverDescriptionA () returned 0x0 [0114.017] GetLastError () returned 0x0 [0114.017] SetLastError (dwErrCode=0x0) [0114.017] OpenThemeData () returned 0x4120000 [0114.017] GetSystemMetrics (nIndex=32) returned 4 [0114.017] GetSystemMetrics (nIndex=33) returned 4 [0114.017] CloseThemeData () returned 0x0 [0114.018] capGetDriverDescriptionA () returned 0x0 [0114.018] GetLastError () returned 0x0 [0114.019] SetLastError (dwErrCode=0x0) [0114.019] OpenThemeData () returned 0x4130000 [0114.019] GetSystemMetrics (nIndex=32) returned 4 [0114.019] GetSystemMetrics (nIndex=33) returned 4 [0114.019] CloseThemeData () returned 0x0 [0114.020] capGetDriverDescriptionA () returned 0x0 [0114.020] GetLastError () returned 0x0 [0114.020] SetLastError (dwErrCode=0x0) [0114.020] OpenThemeData () returned 0x4140000 [0114.021] GetSystemMetrics (nIndex=32) returned 4 [0114.021] GetSystemMetrics (nIndex=33) returned 4 [0114.021] CloseThemeData () returned 0x0 [0114.021] capGetDriverDescriptionA () returned 0x0 [0114.022] GetLastError () returned 0x0 [0114.022] SetLastError (dwErrCode=0x0) [0114.022] OpenThemeData () returned 0x4150000 [0114.022] GetSystemMetrics (nIndex=32) returned 4 [0114.022] GetSystemMetrics (nIndex=33) returned 4 [0114.022] CloseThemeData () returned 0x0 [0114.023] capGetDriverDescriptionA () returned 0x0 [0114.023] GetLastError () returned 0x0 [0114.023] SetLastError (dwErrCode=0x0) [0114.023] OpenThemeData () returned 0x4160000 [0114.024] GetSystemMetrics (nIndex=32) returned 4 [0114.024] GetSystemMetrics (nIndex=33) returned 4 [0114.024] CloseThemeData () returned 0x0 [0114.024] capGetDriverDescriptionA () returned 0x0 [0114.025] GetLastError () returned 0x0 [0114.025] SetLastError (dwErrCode=0x0) [0114.025] OpenThemeData () returned 0x4170000 [0114.025] GetSystemMetrics (nIndex=32) returned 4 [0114.025] GetSystemMetrics (nIndex=33) returned 4 [0114.025] CloseThemeData () returned 0x0 [0114.026] capGetDriverDescriptionA () returned 0x0 [0114.026] GetLastError () returned 0x0 [0114.026] SetLastError (dwErrCode=0x0) [0114.026] OpenThemeData () returned 0x4180000 [0114.027] GetSystemMetrics (nIndex=32) returned 4 [0114.027] GetSystemMetrics (nIndex=33) returned 4 [0114.027] CloseThemeData () returned 0x0 [0114.027] capGetDriverDescriptionA () returned 0x0 [0114.028] GetLastError () returned 0x0 [0114.028] SetLastError (dwErrCode=0x0) [0114.028] OpenThemeData () returned 0x4190000 [0114.029] GetSystemMetrics (nIndex=32) returned 4 [0114.029] GetSystemMetrics (nIndex=33) returned 4 [0114.029] CloseThemeData () returned 0x0 [0114.029] capGetDriverDescriptionA () returned 0x0 [0114.030] GetLastError () returned 0x0 [0114.030] SetLastError (dwErrCode=0x0) [0114.030] OpenThemeData () returned 0x41a0000 [0114.030] GetSystemMetrics (nIndex=32) returned 4 [0114.030] GetSystemMetrics (nIndex=33) returned 4 [0114.030] CloseThemeData () returned 0x0 [0114.030] capGetDriverDescriptionA () returned 0x0 [0114.031] GetLastError () returned 0x0 [0114.031] SetLastError (dwErrCode=0x0) [0114.031] OpenThemeData () returned 0x41b0000 [0114.032] GetSystemMetrics (nIndex=32) returned 4 [0114.032] GetSystemMetrics (nIndex=33) returned 4 [0114.032] CloseThemeData () returned 0x0 [0114.032] capGetDriverDescriptionA () returned 0x0 [0114.033] GetLastError () returned 0x0 [0114.033] SetLastError (dwErrCode=0x0) [0114.033] OpenThemeData () returned 0x41c0000 [0114.033] GetSystemMetrics (nIndex=32) returned 4 [0114.033] GetSystemMetrics (nIndex=33) returned 4 [0114.033] CloseThemeData () returned 0x0 [0114.252] capGetDriverDescriptionA () returned 0x0 [0114.253] GetLastError () returned 0x0 [0114.253] SetLastError (dwErrCode=0x0) [0114.253] OpenThemeData () returned 0x41d0000 [0114.253] GetSystemMetrics (nIndex=32) returned 4 [0114.253] GetSystemMetrics (nIndex=33) returned 4 [0114.253] CloseThemeData () returned 0x0 [0114.254] capGetDriverDescriptionA () returned 0x0 [0114.254] GetLastError () returned 0x0 [0114.254] SetLastError (dwErrCode=0x0) [0114.254] OpenThemeData () returned 0x41e0000 [0114.255] GetSystemMetrics (nIndex=32) returned 4 [0114.255] GetSystemMetrics (nIndex=33) returned 4 [0114.255] CloseThemeData () returned 0x0 [0114.255] capGetDriverDescriptionA () returned 0x0 [0114.256] GetLastError () returned 0x0 [0114.256] SetLastError (dwErrCode=0x0) [0114.256] OpenThemeData () returned 0x41f0000 [0114.257] GetSystemMetrics (nIndex=32) returned 4 [0114.257] GetSystemMetrics (nIndex=33) returned 4 [0114.257] CloseThemeData () returned 0x0 [0114.257] capGetDriverDescriptionA () returned 0x0 [0114.257] GetLastError () returned 0x0 [0114.257] SetLastError (dwErrCode=0x0) [0114.258] OpenThemeData () returned 0x4200000 [0114.258] GetSystemMetrics (nIndex=32) returned 4 [0114.258] GetSystemMetrics (nIndex=33) returned 4 [0114.258] CloseThemeData () returned 0x0 [0114.258] capGetDriverDescriptionA () returned 0x0 [0114.259] GetLastError () returned 0x0 [0114.259] SetLastError (dwErrCode=0x0) [0114.259] OpenThemeData () returned 0x4210000 [0114.259] GetSystemMetrics (nIndex=32) returned 4 [0114.260] GetSystemMetrics (nIndex=33) returned 4 [0114.260] CloseThemeData () returned 0x0 [0114.260] capGetDriverDescriptionA () returned 0x0 [0114.260] GetLastError () returned 0x0 [0114.261] SetLastError (dwErrCode=0x0) [0114.261] OpenThemeData () returned 0x4220000 [0114.261] GetSystemMetrics (nIndex=32) returned 4 [0114.261] GetSystemMetrics (nIndex=33) returned 4 [0114.261] CloseThemeData () returned 0x0 [0114.261] capGetDriverDescriptionA () returned 0x0 [0114.262] GetLastError () returned 0x0 [0114.262] SetLastError (dwErrCode=0x0) [0114.262] OpenThemeData () returned 0x4230000 [0114.262] GetSystemMetrics (nIndex=32) returned 4 [0114.263] GetSystemMetrics (nIndex=33) returned 4 [0114.263] CloseThemeData () returned 0x0 [0114.263] capGetDriverDescriptionA () returned 0x0 [0114.263] GetLastError () returned 0x0 [0114.263] SetLastError (dwErrCode=0x0) [0114.264] OpenThemeData () returned 0x4240000 [0114.264] GetSystemMetrics (nIndex=32) returned 4 [0114.264] GetSystemMetrics (nIndex=33) returned 4 [0114.264] CloseThemeData () returned 0x0 [0114.264] capGetDriverDescriptionA () returned 0x0 [0114.265] GetLastError () returned 0x0 [0114.265] SetLastError (dwErrCode=0x0) [0114.265] OpenThemeData () returned 0x4250000 [0114.266] GetSystemMetrics (nIndex=32) returned 4 [0114.266] GetSystemMetrics (nIndex=33) returned 4 [0114.266] CloseThemeData () returned 0x0 [0114.266] capGetDriverDescriptionA () returned 0x0 [0114.266] GetLastError () returned 0x0 [0114.266] SetLastError (dwErrCode=0x0) [0114.266] OpenThemeData () returned 0x4260000 [0114.267] GetSystemMetrics (nIndex=32) returned 4 [0114.267] GetSystemMetrics (nIndex=33) returned 4 [0114.267] CloseThemeData () returned 0x0 [0114.267] capGetDriverDescriptionA () returned 0x0 [0114.268] GetLastError () returned 0x0 [0114.268] SetLastError (dwErrCode=0x0) [0114.268] OpenThemeData () returned 0x4270000 [0114.270] GetSystemMetrics (nIndex=32) returned 4 [0114.270] GetSystemMetrics (nIndex=33) returned 4 [0114.270] CloseThemeData () returned 0x0 [0114.270] capGetDriverDescriptionA () returned 0x0 [0114.271] GetLastError () returned 0x0 [0114.271] SetLastError (dwErrCode=0x0) [0114.271] OpenThemeData () returned 0x4280000 [0114.271] GetSystemMetrics (nIndex=32) returned 4 [0114.271] GetSystemMetrics (nIndex=33) returned 4 [0114.271] CloseThemeData () returned 0x0 [0114.272] capGetDriverDescriptionA () returned 0x0 [0114.272] GetLastError () returned 0x0 [0114.272] SetLastError (dwErrCode=0x0) [0114.272] OpenThemeData () returned 0x4290000 [0114.273] GetSystemMetrics (nIndex=32) returned 4 [0114.273] GetSystemMetrics (nIndex=33) returned 4 [0114.273] CloseThemeData () returned 0x0 [0114.273] capGetDriverDescriptionA () returned 0x0 [0114.274] GetLastError () returned 0x0 [0114.274] SetLastError (dwErrCode=0x0) [0114.274] OpenThemeData () returned 0x42a0000 [0114.274] GetSystemMetrics (nIndex=32) returned 4 [0114.274] GetSystemMetrics (nIndex=33) returned 4 [0114.274] CloseThemeData () returned 0x0 [0114.275] capGetDriverDescriptionA () returned 0x0 [0114.275] GetLastError () returned 0x0 [0114.275] SetLastError (dwErrCode=0x0) [0114.275] OpenThemeData () returned 0x42b0000 [0114.276] GetSystemMetrics (nIndex=32) returned 4 [0114.276] GetSystemMetrics (nIndex=33) returned 4 [0114.276] CloseThemeData () returned 0x0 [0114.276] capGetDriverDescriptionA () returned 0x0 [0114.277] GetLastError () returned 0x0 [0114.277] SetLastError (dwErrCode=0x0) [0114.277] OpenThemeData () returned 0x42c0000 [0114.277] GetSystemMetrics (nIndex=32) returned 4 [0114.277] GetSystemMetrics (nIndex=33) returned 4 [0114.277] CloseThemeData () returned 0x0 [0114.278] capGetDriverDescriptionA () returned 0x0 [0114.278] GetLastError () returned 0x0 [0114.278] SetLastError (dwErrCode=0x0) [0114.278] OpenThemeData () returned 0x42d0000 [0114.279] GetSystemMetrics (nIndex=32) returned 4 [0114.279] GetSystemMetrics (nIndex=33) returned 4 [0114.279] CloseThemeData () returned 0x0 [0114.279] capGetDriverDescriptionA () returned 0x0 [0114.280] GetLastError () returned 0x0 [0114.280] SetLastError (dwErrCode=0x0) [0114.280] OpenThemeData () returned 0x42e0000 [0114.280] GetSystemMetrics (nIndex=32) returned 4 [0114.280] GetSystemMetrics (nIndex=33) returned 4 [0114.280] CloseThemeData () returned 0x0 [0114.281] capGetDriverDescriptionA () returned 0x0 [0114.281] GetLastError () returned 0x0 [0114.281] SetLastError (dwErrCode=0x0) [0114.281] OpenThemeData () returned 0x42f0000 [0114.282] GetSystemMetrics (nIndex=32) returned 4 [0114.282] GetSystemMetrics (nIndex=33) returned 4 [0114.282] CloseThemeData () returned 0x0 [0114.282] capGetDriverDescriptionA () returned 0x0 [0114.283] GetLastError () returned 0x0 [0114.283] SetLastError (dwErrCode=0x0) [0114.283] OpenThemeData () returned 0x4300000 [0114.283] GetSystemMetrics (nIndex=32) returned 4 [0114.284] GetSystemMetrics (nIndex=33) returned 4 [0114.284] CloseThemeData () returned 0x0 [0114.284] capGetDriverDescriptionA () returned 0x0 [0114.284] GetLastError () returned 0x0 [0114.285] SetLastError (dwErrCode=0x0) [0114.285] OpenThemeData () returned 0x4310000 [0114.285] GetSystemMetrics (nIndex=32) returned 4 [0114.285] GetSystemMetrics (nIndex=33) returned 4 [0114.285] CloseThemeData () returned 0x0 [0114.285] capGetDriverDescriptionA () returned 0x0 [0114.286] GetLastError () returned 0x0 [0114.286] SetLastError (dwErrCode=0x0) [0114.286] OpenThemeData () returned 0x4320000 [0114.287] GetSystemMetrics (nIndex=32) returned 4 [0114.287] GetSystemMetrics (nIndex=33) returned 4 [0114.287] CloseThemeData () returned 0x0 [0114.287] capGetDriverDescriptionA () returned 0x0 [0114.287] GetLastError () returned 0x0 [0114.287] SetLastError (dwErrCode=0x0) [0114.287] OpenThemeData () returned 0x4330000 [0114.288] GetSystemMetrics (nIndex=32) returned 4 [0114.288] GetSystemMetrics (nIndex=33) returned 4 [0114.288] CloseThemeData () returned 0x0 [0114.288] capGetDriverDescriptionA () returned 0x0 [0114.289] GetLastError () returned 0x0 [0114.289] SetLastError (dwErrCode=0x0) [0114.289] OpenThemeData () returned 0x4340000 [0114.289] GetSystemMetrics (nIndex=32) returned 4 [0114.289] GetSystemMetrics (nIndex=33) returned 4 [0114.289] CloseThemeData () returned 0x0 [0114.290] capGetDriverDescriptionA () returned 0x0 [0114.290] GetLastError () returned 0x0 [0114.290] SetLastError (dwErrCode=0x0) [0114.290] OpenThemeData () returned 0x4350000 [0114.291] GetSystemMetrics (nIndex=32) returned 4 [0114.291] GetSystemMetrics (nIndex=33) returned 4 [0114.291] CloseThemeData () returned 0x0 [0114.291] capGetDriverDescriptionA () returned 0x0 [0114.292] GetLastError () returned 0x0 [0114.292] SetLastError (dwErrCode=0x0) [0114.292] OpenThemeData () returned 0x4360000 [0114.292] GetSystemMetrics (nIndex=32) returned 4 [0114.292] GetSystemMetrics (nIndex=33) returned 4 [0114.292] CloseThemeData () returned 0x0 [0114.293] capGetDriverDescriptionA () returned 0x0 [0114.293] GetLastError () returned 0x0 [0114.293] SetLastError (dwErrCode=0x0) [0114.293] OpenThemeData () returned 0x4370000 [0114.294] GetSystemMetrics (nIndex=32) returned 4 [0114.294] GetSystemMetrics (nIndex=33) returned 4 [0114.294] CloseThemeData () returned 0x0 [0114.294] capGetDriverDescriptionA () returned 0x0 [0114.295] GetLastError () returned 0x0 [0114.295] SetLastError (dwErrCode=0x0) [0114.295] OpenThemeData () returned 0x4380000 [0114.295] GetSystemMetrics (nIndex=32) returned 4 [0114.295] GetSystemMetrics (nIndex=33) returned 4 [0114.295] CloseThemeData () returned 0x0 [0114.296] capGetDriverDescriptionA () returned 0x0 [0114.296] GetLastError () returned 0x0 [0114.296] SetLastError (dwErrCode=0x0) [0114.296] OpenThemeData () returned 0x4390000 [0114.297] GetSystemMetrics (nIndex=32) returned 4 [0114.297] GetSystemMetrics (nIndex=33) returned 4 [0114.297] CloseThemeData () returned 0x0 [0114.297] capGetDriverDescriptionA () returned 0x0 [0114.298] GetLastError () returned 0x0 [0114.298] SetLastError (dwErrCode=0x0) [0114.298] OpenThemeData () returned 0x43a0000 [0114.298] GetSystemMetrics (nIndex=32) returned 4 [0114.298] GetSystemMetrics (nIndex=33) returned 4 [0114.298] CloseThemeData () returned 0x0 [0114.299] capGetDriverDescriptionA () returned 0x0 [0114.415] GetLastError () returned 0x0 [0114.416] SetLastError (dwErrCode=0x0) [0114.416] OpenThemeData () returned 0x43b0000 [0114.416] GetSystemMetrics (nIndex=32) returned 4 [0114.416] GetSystemMetrics (nIndex=33) returned 4 [0114.416] CloseThemeData () returned 0x0 [0114.417] capGetDriverDescriptionA () returned 0x0 [0114.417] GetLastError () returned 0x0 [0114.417] SetLastError (dwErrCode=0x0) [0114.417] OpenThemeData () returned 0x43c0000 [0114.418] GetSystemMetrics (nIndex=32) returned 4 [0114.418] GetSystemMetrics (nIndex=33) returned 4 [0114.418] CloseThemeData () returned 0x0 [0114.418] capGetDriverDescriptionA () returned 0x0 [0114.419] GetLastError () returned 0x0 [0114.419] SetLastError (dwErrCode=0x0) [0114.419] OpenThemeData () returned 0x43d0000 [0114.420] GetSystemMetrics (nIndex=32) returned 4 [0114.420] GetSystemMetrics (nIndex=33) returned 4 [0114.420] CloseThemeData () returned 0x0 [0114.420] capGetDriverDescriptionA () returned 0x0 [0114.421] GetLastError () returned 0x0 [0114.421] SetLastError (dwErrCode=0x0) [0114.421] OpenThemeData () returned 0x43e0000 [0114.421] GetSystemMetrics (nIndex=32) returned 4 [0114.421] GetSystemMetrics (nIndex=33) returned 4 [0114.421] CloseThemeData () returned 0x0 [0114.422] capGetDriverDescriptionA () returned 0x0 [0114.422] GetLastError () returned 0x0 [0114.422] SetLastError (dwErrCode=0x0) [0114.422] OpenThemeData () returned 0x43f0000 [0114.423] GetSystemMetrics (nIndex=32) returned 4 [0114.423] GetSystemMetrics (nIndex=33) returned 4 [0114.423] CloseThemeData () returned 0x0 [0114.423] capGetDriverDescriptionA () returned 0x0 [0114.424] GetLastError () returned 0x0 [0114.424] SetLastError (dwErrCode=0x0) [0114.424] OpenThemeData () returned 0x4400000 [0114.425] GetSystemMetrics (nIndex=32) returned 4 [0114.425] GetSystemMetrics (nIndex=33) returned 4 [0114.425] CloseThemeData () returned 0x0 [0114.425] capGetDriverDescriptionA () returned 0x0 [0114.425] GetLastError () returned 0x0 [0114.426] SetLastError (dwErrCode=0x0) [0114.426] OpenThemeData () returned 0x4410000 [0114.426] GetSystemMetrics (nIndex=32) returned 4 [0114.426] GetSystemMetrics (nIndex=33) returned 4 [0114.426] CloseThemeData () returned 0x0 [0114.426] capGetDriverDescriptionA () returned 0x0 [0114.427] GetLastError () returned 0x0 [0114.427] SetLastError (dwErrCode=0x0) [0114.427] OpenThemeData () returned 0x4420000 [0114.428] GetSystemMetrics (nIndex=32) returned 4 [0114.428] GetSystemMetrics (nIndex=33) returned 4 [0114.428] CloseThemeData () returned 0x0 [0114.428] capGetDriverDescriptionA () returned 0x0 [0114.429] GetLastError () returned 0x0 [0114.429] SetLastError (dwErrCode=0x0) [0114.429] OpenThemeData () returned 0x4430000 [0114.429] GetSystemMetrics (nIndex=32) returned 4 [0114.429] GetSystemMetrics (nIndex=33) returned 4 [0114.429] CloseThemeData () returned 0x0 [0114.430] capGetDriverDescriptionA () returned 0x0 [0114.430] GetLastError () returned 0x0 [0114.430] SetLastError (dwErrCode=0x0) [0114.430] OpenThemeData () returned 0x4440000 [0114.431] GetSystemMetrics (nIndex=32) returned 4 [0114.431] GetSystemMetrics (nIndex=33) returned 4 [0114.431] CloseThemeData () returned 0x0 [0114.431] capGetDriverDescriptionA () returned 0x0 [0114.432] GetLastError () returned 0x0 [0114.432] SetLastError (dwErrCode=0x0) [0114.432] OpenThemeData () returned 0x4450000 [0114.432] GetSystemMetrics (nIndex=32) returned 4 [0114.432] GetSystemMetrics (nIndex=33) returned 4 [0114.432] CloseThemeData () returned 0x0 [0114.433] capGetDriverDescriptionA () returned 0x0 [0114.433] GetLastError () returned 0x0 [0114.433] SetLastError (dwErrCode=0x0) [0114.433] OpenThemeData () returned 0x4460000 [0114.434] GetSystemMetrics (nIndex=32) returned 4 [0114.434] GetSystemMetrics (nIndex=33) returned 4 [0114.434] CloseThemeData () returned 0x0 [0114.434] capGetDriverDescriptionA () returned 0x0 [0114.435] GetLastError () returned 0x0 [0114.435] SetLastError (dwErrCode=0x0) [0114.435] OpenThemeData () returned 0x4470000 [0114.436] GetSystemMetrics (nIndex=32) returned 4 [0114.436] GetSystemMetrics (nIndex=33) returned 4 [0114.436] CloseThemeData () returned 0x0 [0114.436] capGetDriverDescriptionA () returned 0x0 [0114.442] GetLastError () returned 0x0 [0114.442] SetLastError (dwErrCode=0x0) [0114.442] OpenThemeData () returned 0x4480000 [0114.443] GetSystemMetrics (nIndex=32) returned 4 [0114.443] GetSystemMetrics (nIndex=33) returned 4 [0114.443] CloseThemeData () returned 0x0 [0114.443] capGetDriverDescriptionA () returned 0x0 [0114.444] GetLastError () returned 0x0 [0114.444] SetLastError (dwErrCode=0x0) [0114.444] OpenThemeData () returned 0x4490000 [0114.445] GetSystemMetrics (nIndex=32) returned 4 [0114.445] GetSystemMetrics (nIndex=33) returned 4 [0114.445] CloseThemeData () returned 0x0 [0114.445] capGetDriverDescriptionA () returned 0x0 [0114.446] GetLastError () returned 0x0 [0114.446] SetLastError (dwErrCode=0x0) [0114.446] OpenThemeData () returned 0x44a0000 [0114.446] GetSystemMetrics (nIndex=32) returned 4 [0114.446] GetSystemMetrics (nIndex=33) returned 4 [0114.446] CloseThemeData () returned 0x0 [0114.447] capGetDriverDescriptionA () returned 0x0 [0114.447] GetLastError () returned 0x0 [0114.447] SetLastError (dwErrCode=0x0) [0114.447] OpenThemeData () returned 0x44b0000 [0114.448] GetSystemMetrics (nIndex=32) returned 4 [0114.448] GetSystemMetrics (nIndex=33) returned 4 [0114.448] CloseThemeData () returned 0x0 [0114.448] capGetDriverDescriptionA () returned 0x0 [0114.449] GetLastError () returned 0x0 [0114.449] SetLastError (dwErrCode=0x0) [0114.449] OpenThemeData () returned 0x44c0000 [0114.449] GetSystemMetrics (nIndex=32) returned 4 [0114.450] GetSystemMetrics (nIndex=33) returned 4 [0114.450] CloseThemeData () returned 0x0 [0114.450] capGetDriverDescriptionA () returned 0x0 [0114.451] GetLastError () returned 0x0 [0114.451] SetLastError (dwErrCode=0x0) [0114.451] OpenThemeData () returned 0x44d0000 [0114.451] GetSystemMetrics (nIndex=32) returned 4 [0114.451] GetSystemMetrics (nIndex=33) returned 4 [0114.451] CloseThemeData () returned 0x0 [0114.452] capGetDriverDescriptionA () returned 0x0 [0114.452] GetLastError () returned 0x0 [0114.452] SetLastError (dwErrCode=0x0) [0114.452] OpenThemeData () returned 0x44e0000 [0114.453] GetSystemMetrics (nIndex=32) returned 4 [0114.453] GetSystemMetrics (nIndex=33) returned 4 [0114.453] CloseThemeData () returned 0x0 [0114.453] capGetDriverDescriptionA () returned 0x0 [0114.454] GetLastError () returned 0x0 [0114.454] SetLastError (dwErrCode=0x0) [0114.454] OpenThemeData () returned 0x44f0000 [0114.454] GetSystemMetrics (nIndex=32) returned 4 [0114.454] GetSystemMetrics (nIndex=33) returned 4 [0114.454] CloseThemeData () returned 0x0 [0115.262] capGetDriverDescriptionA () returned 0x0 [0115.263] GetLastError () returned 0x0 [0115.263] SetLastError (dwErrCode=0x0) [0115.263] OpenThemeData () returned 0x4500000 [0115.264] GetSystemMetrics (nIndex=32) returned 4 [0115.264] GetSystemMetrics (nIndex=33) returned 4 [0115.264] CloseThemeData () returned 0x0 [0115.264] capGetDriverDescriptionA () returned 0x0 [0115.265] GetLastError () returned 0x0 [0115.265] SetLastError (dwErrCode=0x0) [0115.265] OpenThemeData () returned 0x4510000 [0115.266] GetSystemMetrics (nIndex=32) returned 4 [0115.266] GetSystemMetrics (nIndex=33) returned 4 [0115.266] CloseThemeData () returned 0x0 [0115.266] capGetDriverDescriptionA () returned 0x0 [0115.267] GetLastError () returned 0x0 [0115.267] SetLastError (dwErrCode=0x0) [0115.267] OpenThemeData () returned 0x4520000 [0115.267] GetSystemMetrics (nIndex=32) returned 4 [0115.267] GetSystemMetrics (nIndex=33) returned 4 [0115.267] CloseThemeData () returned 0x0 [0115.268] capGetDriverDescriptionA () returned 0x0 [0115.268] GetLastError () returned 0x0 [0115.268] SetLastError (dwErrCode=0x0) [0115.268] OpenThemeData () returned 0x4530000 [0115.269] GetSystemMetrics (nIndex=32) returned 4 [0115.269] GetSystemMetrics (nIndex=33) returned 4 [0115.269] CloseThemeData () returned 0x0 [0115.269] capGetDriverDescriptionA () returned 0x0 [0115.270] GetLastError () returned 0x0 [0115.270] SetLastError (dwErrCode=0x0) [0115.270] OpenThemeData () returned 0x4540000 [0115.271] GetSystemMetrics (nIndex=32) returned 4 [0115.271] GetSystemMetrics (nIndex=33) returned 4 [0115.271] CloseThemeData () returned 0x0 [0115.271] capGetDriverDescriptionA () returned 0x0 [0115.272] GetLastError () returned 0x0 [0115.272] SetLastError (dwErrCode=0x0) [0115.272] OpenThemeData () returned 0x4550000 [0115.272] GetSystemMetrics (nIndex=32) returned 4 [0115.272] GetSystemMetrics (nIndex=33) returned 4 [0115.272] CloseThemeData () returned 0x0 [0115.273] capGetDriverDescriptionA () returned 0x0 [0115.273] GetLastError () returned 0x0 [0115.273] SetLastError (dwErrCode=0x0) [0115.273] OpenThemeData () returned 0x4560000 [0115.274] GetSystemMetrics (nIndex=32) returned 4 [0115.274] GetSystemMetrics (nIndex=33) returned 4 [0115.274] CloseThemeData () returned 0x0 [0115.274] capGetDriverDescriptionA () returned 0x0 [0115.275] GetLastError () returned 0x0 [0115.275] SetLastError (dwErrCode=0x0) [0115.275] OpenThemeData () returned 0x4570000 [0115.275] GetSystemMetrics (nIndex=32) returned 4 [0115.275] GetSystemMetrics (nIndex=33) returned 4 [0115.275] CloseThemeData () returned 0x0 [0115.276] capGetDriverDescriptionA () returned 0x0 [0115.276] GetLastError () returned 0x0 [0115.276] SetLastError (dwErrCode=0x0) [0115.276] OpenThemeData () returned 0x4580000 [0115.277] GetSystemMetrics (nIndex=32) returned 4 [0115.277] GetSystemMetrics (nIndex=33) returned 4 [0115.277] CloseThemeData () returned 0x0 [0115.277] capGetDriverDescriptionA () returned 0x0 [0115.278] GetLastError () returned 0x0 [0115.278] SetLastError (dwErrCode=0x0) [0115.278] OpenThemeData () returned 0x4590000 [0115.278] GetSystemMetrics (nIndex=32) returned 4 [0115.279] GetSystemMetrics (nIndex=33) returned 4 [0115.279] CloseThemeData () returned 0x0 [0115.279] capGetDriverDescriptionA () returned 0x0 [0115.279] GetLastError () returned 0x0 [0115.280] SetLastError (dwErrCode=0x0) [0115.280] OpenThemeData () returned 0x45a0000 [0115.280] GetSystemMetrics (nIndex=32) returned 4 [0115.280] GetSystemMetrics (nIndex=33) returned 4 [0115.280] CloseThemeData () returned 0x0 [0115.280] capGetDriverDescriptionA () returned 0x0 [0115.281] GetLastError () returned 0x0 [0115.281] SetLastError (dwErrCode=0x0) [0115.281] OpenThemeData () returned 0x45b0000 [0115.282] GetSystemMetrics (nIndex=32) returned 4 [0115.282] GetSystemMetrics (nIndex=33) returned 4 [0115.282] CloseThemeData () returned 0x0 [0115.282] capGetDriverDescriptionA () returned 0x0 [0115.283] GetLastError () returned 0x0 [0115.283] SetLastError (dwErrCode=0x0) [0115.283] OpenThemeData () returned 0x45c0000 [0115.283] GetSystemMetrics (nIndex=32) returned 4 [0115.283] GetSystemMetrics (nIndex=33) returned 4 [0115.283] CloseThemeData () returned 0x0 [0115.284] capGetDriverDescriptionA () returned 0x0 [0115.284] GetLastError () returned 0x0 [0115.284] SetLastError (dwErrCode=0x0) [0115.284] OpenThemeData () returned 0x45d0000 [0115.285] GetSystemMetrics (nIndex=32) returned 4 [0115.285] GetSystemMetrics (nIndex=33) returned 4 [0115.285] CloseThemeData () returned 0x0 [0115.285] capGetDriverDescriptionA () returned 0x0 [0115.286] GetLastError () returned 0x0 [0115.286] SetLastError (dwErrCode=0x0) [0115.286] OpenThemeData () returned 0x45e0000 [0115.289] GetSystemMetrics (nIndex=32) returned 4 [0115.289] GetSystemMetrics (nIndex=33) returned 4 [0115.289] CloseThemeData () returned 0x0 [0115.289] capGetDriverDescriptionA () returned 0x0 [0115.290] GetLastError () returned 0x0 [0115.290] SetLastError (dwErrCode=0x0) [0115.290] OpenThemeData () returned 0x45f0000 [0115.290] GetSystemMetrics (nIndex=32) returned 4 [0115.290] GetSystemMetrics (nIndex=33) returned 4 [0115.290] CloseThemeData () returned 0x0 [0115.291] capGetDriverDescriptionA () returned 0x0 [0115.291] GetLastError () returned 0x0 [0115.291] SetLastError (dwErrCode=0x0) [0115.291] OpenThemeData () returned 0x4600000 [0115.292] GetSystemMetrics (nIndex=32) returned 4 [0115.292] GetSystemMetrics (nIndex=33) returned 4 [0115.292] CloseThemeData () returned 0x0 [0115.292] capGetDriverDescriptionA () returned 0x0 [0115.293] GetLastError () returned 0x0 [0115.293] SetLastError (dwErrCode=0x0) [0115.293] OpenThemeData () returned 0x4610000 [0115.294] GetSystemMetrics (nIndex=32) returned 4 [0115.294] GetSystemMetrics (nIndex=33) returned 4 [0115.294] CloseThemeData () returned 0x0 [0115.294] capGetDriverDescriptionA () returned 0x0 [0115.295] GetLastError () returned 0x0 [0115.295] SetLastError (dwErrCode=0x0) [0115.295] OpenThemeData () returned 0x4620000 [0115.295] GetSystemMetrics (nIndex=32) returned 4 [0115.295] GetSystemMetrics (nIndex=33) returned 4 [0115.295] CloseThemeData () returned 0x0 [0115.296] capGetDriverDescriptionA () returned 0x0 [0115.296] GetLastError () returned 0x0 [0115.296] SetLastError (dwErrCode=0x0) [0115.296] OpenThemeData () returned 0x4630000 [0115.297] GetSystemMetrics (nIndex=32) returned 4 [0115.297] GetSystemMetrics (nIndex=33) returned 4 [0115.297] CloseThemeData () returned 0x0 [0115.297] capGetDriverDescriptionA () returned 0x0 [0115.298] GetLastError () returned 0x0 [0115.298] SetLastError (dwErrCode=0x0) [0115.298] OpenThemeData () returned 0x4640000 [0115.298] GetSystemMetrics (nIndex=32) returned 4 [0115.298] GetSystemMetrics (nIndex=33) returned 4 [0115.298] CloseThemeData () returned 0x0 [0115.299] capGetDriverDescriptionA () returned 0x0 [0116.005] GetLastError () returned 0x0 [0116.005] SetLastError (dwErrCode=0x0) [0116.005] OpenThemeData () returned 0x4650000 [0116.006] GetSystemMetrics (nIndex=32) returned 4 [0116.006] GetSystemMetrics (nIndex=33) returned 4 [0116.006] CloseThemeData () returned 0x0 [0116.006] capGetDriverDescriptionA () returned 0x0 [0116.007] GetLastError () returned 0x0 [0116.007] SetLastError (dwErrCode=0x0) [0116.007] OpenThemeData () returned 0x4660000 [0116.007] GetSystemMetrics (nIndex=32) returned 4 [0116.007] GetSystemMetrics (nIndex=33) returned 4 [0116.007] CloseThemeData () returned 0x0 [0116.007] capGetDriverDescriptionA () returned 0x0 [0116.008] GetLastError () returned 0x0 [0116.008] SetLastError (dwErrCode=0x0) [0116.008] OpenThemeData () returned 0x4670000 [0116.009] GetSystemMetrics (nIndex=32) returned 4 [0116.009] GetSystemMetrics (nIndex=33) returned 4 [0116.009] CloseThemeData () returned 0x0 [0116.009] capGetDriverDescriptionA () returned 0x0 [0116.010] GetLastError () returned 0x0 [0116.010] SetLastError (dwErrCode=0x0) [0116.010] OpenThemeData () returned 0x4680000 [0116.010] GetSystemMetrics (nIndex=32) returned 4 [0116.010] GetSystemMetrics (nIndex=33) returned 4 [0116.010] CloseThemeData () returned 0x0 [0116.011] capGetDriverDescriptionA () returned 0x0 [0116.011] GetLastError () returned 0x0 [0116.011] SetLastError (dwErrCode=0x0) [0116.011] OpenThemeData () returned 0x4690000 [0116.028] GetSystemMetrics (nIndex=32) returned 4 [0116.028] GetSystemMetrics (nIndex=33) returned 4 [0116.028] CloseThemeData () returned 0x0 [0116.028] capGetDriverDescriptionA () returned 0x0 [0116.029] GetLastError () returned 0x0 [0116.029] SetLastError (dwErrCode=0x0) [0116.029] OpenThemeData () returned 0x46a0000 [0116.030] GetSystemMetrics (nIndex=32) returned 4 [0116.030] GetSystemMetrics (nIndex=33) returned 4 [0116.030] CloseThemeData () returned 0x0 [0116.030] capGetDriverDescriptionA () returned 0x0 [0116.031] GetLastError () returned 0x0 [0116.031] SetLastError (dwErrCode=0x0) [0116.031] OpenThemeData () returned 0x46b0000 [0116.031] GetSystemMetrics (nIndex=32) returned 4 [0116.031] GetSystemMetrics (nIndex=33) returned 4 [0116.031] CloseThemeData () returned 0x0 [0116.032] capGetDriverDescriptionA () returned 0x0 [0116.032] GetLastError () returned 0x0 [0116.032] SetLastError (dwErrCode=0x0) [0116.033] OpenThemeData () returned 0x46c0000 [0116.033] GetSystemMetrics (nIndex=32) returned 4 [0116.033] GetSystemMetrics (nIndex=33) returned 4 [0116.033] CloseThemeData () returned 0x0 [0116.033] capGetDriverDescriptionA () returned 0x0 [0116.034] GetLastError () returned 0x0 [0116.034] SetLastError (dwErrCode=0x0) [0116.034] OpenThemeData () returned 0x46d0000 [0116.035] GetSystemMetrics (nIndex=32) returned 4 [0116.035] GetSystemMetrics (nIndex=33) returned 4 [0116.035] CloseThemeData () returned 0x0 [0116.035] capGetDriverDescriptionA () returned 0x0 [0116.036] GetLastError () returned 0x0 [0116.036] SetLastError (dwErrCode=0x0) [0116.036] OpenThemeData () returned 0x46e0000 [0116.036] GetSystemMetrics (nIndex=32) returned 4 [0116.036] GetSystemMetrics (nIndex=33) returned 4 [0116.036] CloseThemeData () returned 0x0 [0116.037] capGetDriverDescriptionA () returned 0x0 [0116.037] GetLastError () returned 0x0 [0116.037] SetLastError (dwErrCode=0x0) [0116.037] OpenThemeData () returned 0x46f0000 [0116.038] GetSystemMetrics (nIndex=32) returned 4 [0116.038] GetSystemMetrics (nIndex=33) returned 4 [0116.038] CloseThemeData () returned 0x0 [0116.038] capGetDriverDescriptionA () returned 0x0 [0116.039] GetLastError () returned 0x0 [0116.039] SetLastError (dwErrCode=0x0) [0116.039] OpenThemeData () returned 0x4700000 [0116.039] GetSystemMetrics (nIndex=32) returned 4 [0116.039] GetSystemMetrics (nIndex=33) returned 4 [0116.039] CloseThemeData () returned 0x0 [0116.040] capGetDriverDescriptionA () returned 0x0 [0116.040] GetLastError () returned 0x0 [0116.040] SetLastError (dwErrCode=0x0) [0116.041] OpenThemeData () returned 0x4710000 [0116.041] GetSystemMetrics (nIndex=32) returned 4 [0116.041] GetSystemMetrics (nIndex=33) returned 4 [0116.041] CloseThemeData () returned 0x0 [0116.041] capGetDriverDescriptionA () returned 0x0 [0116.042] GetLastError () returned 0x0 [0116.042] SetLastError (dwErrCode=0x0) [0116.042] OpenThemeData () returned 0x4720000 [0116.043] GetSystemMetrics (nIndex=32) returned 4 [0116.043] GetSystemMetrics (nIndex=33) returned 4 [0116.043] CloseThemeData () returned 0x0 [0116.046] capGetDriverDescriptionA () returned 0x0 [0116.047] GetLastError () returned 0x0 [0116.047] SetLastError (dwErrCode=0x0) [0116.047] OpenThemeData () returned 0x4730000 [0116.047] GetSystemMetrics (nIndex=32) returned 4 [0116.047] GetSystemMetrics (nIndex=33) returned 4 [0116.047] CloseThemeData () returned 0x0 [0116.048] capGetDriverDescriptionA () returned 0x0 [0116.048] GetLastError () returned 0x0 [0116.048] SetLastError (dwErrCode=0x0) [0116.048] OpenThemeData () returned 0x4740000 [0116.049] GetSystemMetrics (nIndex=32) returned 4 [0116.049] GetSystemMetrics (nIndex=33) returned 4 [0116.049] CloseThemeData () returned 0x0 [0116.426] capGetDriverDescriptionA () returned 0x0 [0116.426] GetLastError () returned 0x0 [0116.427] SetLastError (dwErrCode=0x0) [0116.427] OpenThemeData () returned 0x4750000 [0116.427] GetSystemMetrics (nIndex=32) returned 4 [0116.427] GetSystemMetrics (nIndex=33) returned 4 [0116.427] CloseThemeData () returned 0x0 [0116.427] capGetDriverDescriptionA () returned 0x0 [0116.428] GetLastError () returned 0x0 [0116.428] SetLastError (dwErrCode=0x0) [0116.428] OpenThemeData () returned 0x4760000 [0116.429] GetSystemMetrics (nIndex=32) returned 4 [0116.429] GetSystemMetrics (nIndex=33) returned 4 [0116.429] CloseThemeData () returned 0x0 [0116.429] capGetDriverDescriptionA () returned 0x0 [0116.430] GetLastError () returned 0x0 [0116.430] SetLastError (dwErrCode=0x0) [0116.430] OpenThemeData () returned 0x4770000 [0116.430] GetSystemMetrics (nIndex=32) returned 4 [0116.430] GetSystemMetrics (nIndex=33) returned 4 [0116.430] CloseThemeData () returned 0x0 [0116.431] capGetDriverDescriptionA () returned 0x0 [0116.431] GetLastError () returned 0x0 [0116.431] SetLastError (dwErrCode=0x0) [0116.431] OpenThemeData () returned 0x4780000 [0116.432] GetSystemMetrics (nIndex=32) returned 4 [0116.432] GetSystemMetrics (nIndex=33) returned 4 [0116.432] CloseThemeData () returned 0x0 [0116.432] capGetDriverDescriptionA () returned 0x0 [0116.433] GetLastError () returned 0x0 [0116.433] SetLastError (dwErrCode=0x0) [0116.433] OpenThemeData () returned 0x4790000 [0116.433] GetSystemMetrics (nIndex=32) returned 4 [0116.433] GetSystemMetrics (nIndex=33) returned 4 [0116.433] CloseThemeData () returned 0x0 [0116.434] capGetDriverDescriptionA () returned 0x0 [0116.434] GetLastError () returned 0x0 [0116.434] SetLastError (dwErrCode=0x0) [0116.434] OpenThemeData () returned 0x47a0000 [0116.435] GetSystemMetrics (nIndex=32) returned 4 [0116.435] GetSystemMetrics (nIndex=33) returned 4 [0116.435] CloseThemeData () returned 0x0 [0116.435] capGetDriverDescriptionA () returned 0x0 [0116.436] GetLastError () returned 0x0 [0116.436] SetLastError (dwErrCode=0x0) [0116.436] OpenThemeData () returned 0x47b0000 [0116.436] GetSystemMetrics (nIndex=32) returned 4 [0116.436] GetSystemMetrics (nIndex=33) returned 4 [0116.436] CloseThemeData () returned 0x0 [0116.437] capGetDriverDescriptionA () returned 0x0 [0116.437] GetLastError () returned 0x0 [0116.437] SetLastError (dwErrCode=0x0) [0116.437] OpenThemeData () returned 0x47c0000 [0116.438] GetSystemMetrics (nIndex=32) returned 4 [0116.438] GetSystemMetrics (nIndex=33) returned 4 [0116.438] CloseThemeData () returned 0x0 [0116.438] capGetDriverDescriptionA () returned 0x0 [0116.439] GetLastError () returned 0x0 [0116.439] SetLastError (dwErrCode=0x0) [0116.439] OpenThemeData () returned 0x47d0000 [0116.439] GetSystemMetrics (nIndex=32) returned 4 [0116.439] GetSystemMetrics (nIndex=33) returned 4 [0116.439] CloseThemeData () returned 0x0 [0116.440] capGetDriverDescriptionA () returned 0x0 [0116.441] GetLastError () returned 0x0 [0116.441] SetLastError (dwErrCode=0x0) [0116.441] OpenThemeData () returned 0x47e0000 [0116.441] GetSystemMetrics (nIndex=32) returned 4 [0116.441] GetSystemMetrics (nIndex=33) returned 4 [0116.441] CloseThemeData () returned 0x0 [0116.442] capGetDriverDescriptionA () returned 0x0 [0116.442] GetLastError () returned 0x0 [0116.442] SetLastError (dwErrCode=0x0) [0116.442] OpenThemeData () returned 0x47f0000 [0116.443] GetSystemMetrics (nIndex=32) returned 4 [0116.443] GetSystemMetrics (nIndex=33) returned 4 [0116.443] CloseThemeData () returned 0x0 [0116.443] capGetDriverDescriptionA () returned 0x0 [0116.444] GetLastError () returned 0x0 [0116.444] SetLastError (dwErrCode=0x0) [0116.444] OpenThemeData () returned 0x4800000 [0116.445] GetSystemMetrics (nIndex=32) returned 4 [0116.445] GetSystemMetrics (nIndex=33) returned 4 [0116.445] CloseThemeData () returned 0x0 [0116.445] capGetDriverDescriptionA () returned 0x0 [0116.446] GetLastError () returned 0x0 [0116.446] SetLastError (dwErrCode=0x0) [0116.446] OpenThemeData () returned 0x4810000 [0116.446] GetSystemMetrics (nIndex=32) returned 4 [0116.446] GetSystemMetrics (nIndex=33) returned 4 [0116.446] CloseThemeData () returned 0x0 [0116.447] capGetDriverDescriptionA () returned 0x0 [0116.447] GetLastError () returned 0x0 [0116.447] SetLastError (dwErrCode=0x0) [0116.447] OpenThemeData () returned 0x4820000 [0116.448] GetSystemMetrics (nIndex=32) returned 4 [0116.448] GetSystemMetrics (nIndex=33) returned 4 [0116.448] CloseThemeData () returned 0x0 [0116.448] capGetDriverDescriptionA () returned 0x0 [0116.449] GetLastError () returned 0x0 [0116.449] SetLastError (dwErrCode=0x0) [0116.449] OpenThemeData () returned 0x4830000 [0116.449] GetSystemMetrics (nIndex=32) returned 4 [0116.449] GetSystemMetrics (nIndex=33) returned 4 [0116.449] CloseThemeData () returned 0x0 [0116.450] capGetDriverDescriptionA () returned 0x0 [0116.450] GetLastError () returned 0x0 [0116.450] SetLastError (dwErrCode=0x0) [0116.450] OpenThemeData () returned 0x4840000 [0116.451] GetSystemMetrics (nIndex=32) returned 4 [0116.451] GetSystemMetrics (nIndex=33) returned 4 [0116.451] CloseThemeData () returned 0x0 [0116.451] capGetDriverDescriptionA () returned 0x0 [0116.452] GetLastError () returned 0x0 [0116.452] SetLastError (dwErrCode=0x0) [0116.452] OpenThemeData () returned 0x4850000 [0116.452] GetSystemMetrics (nIndex=32) returned 4 [0116.452] GetSystemMetrics (nIndex=33) returned 4 [0116.452] CloseThemeData () returned 0x0 [0116.453] capGetDriverDescriptionA () returned 0x0 [0116.453] GetLastError () returned 0x0 [0116.453] SetLastError (dwErrCode=0x0) [0116.454] OpenThemeData () returned 0x4860000 [0116.454] GetSystemMetrics (nIndex=32) returned 4 [0116.454] GetSystemMetrics (nIndex=33) returned 4 [0116.454] CloseThemeData () returned 0x0 [0116.454] capGetDriverDescriptionA () returned 0x0 [0116.455] GetLastError () returned 0x0 [0116.455] SetLastError (dwErrCode=0x0) [0116.455] OpenThemeData () returned 0x4870000 [0116.456] GetSystemMetrics (nIndex=32) returned 4 [0116.456] GetSystemMetrics (nIndex=33) returned 4 [0116.456] CloseThemeData () returned 0x0 [0116.456] capGetDriverDescriptionA () returned 0x0 [0116.457] GetLastError () returned 0x0 [0116.457] SetLastError (dwErrCode=0x0) [0116.457] OpenThemeData () returned 0x4880000 [0116.457] GetSystemMetrics (nIndex=32) returned 4 [0116.457] GetSystemMetrics (nIndex=33) returned 4 [0116.457] CloseThemeData () returned 0x0 [0116.458] capGetDriverDescriptionA () returned 0x0 [0116.458] GetLastError () returned 0x0 [0116.458] SetLastError (dwErrCode=0x0) [0116.458] OpenThemeData () returned 0x4890000 [0116.459] GetSystemMetrics (nIndex=32) returned 4 [0116.459] GetSystemMetrics (nIndex=33) returned 4 [0116.459] CloseThemeData () returned 0x0 [0116.459] capGetDriverDescriptionA () returned 0x0 [0116.460] GetLastError () returned 0x0 [0116.460] SetLastError (dwErrCode=0x0) [0116.460] OpenThemeData () returned 0x48a0000 [0116.460] GetSystemMetrics (nIndex=32) returned 4 [0116.460] GetSystemMetrics (nIndex=33) returned 4 [0116.460] CloseThemeData () returned 0x0 [0116.461] capGetDriverDescriptionA () returned 0x0 [0116.461] GetLastError () returned 0x0 [0116.461] SetLastError (dwErrCode=0x0) [0116.461] OpenThemeData () returned 0x48b0000 [0116.462] GetSystemMetrics (nIndex=32) returned 4 [0116.462] GetSystemMetrics (nIndex=33) returned 4 [0116.462] CloseThemeData () returned 0x0 [0116.462] capGetDriverDescriptionA () returned 0x0 [0116.463] GetLastError () returned 0x0 [0116.463] SetLastError (dwErrCode=0x0) [0116.463] OpenThemeData () returned 0x48c0000 [0116.464] GetSystemMetrics (nIndex=32) returned 4 [0116.464] GetSystemMetrics (nIndex=33) returned 4 [0116.464] CloseThemeData () returned 0x0 [0116.464] capGetDriverDescriptionA () returned 0x0 [0116.465] GetLastError () returned 0x0 [0116.465] SetLastError (dwErrCode=0x0) [0116.465] OpenThemeData () returned 0x48d0000 [0116.465] GetSystemMetrics (nIndex=32) returned 4 [0116.465] GetSystemMetrics (nIndex=33) returned 4 [0116.465] CloseThemeData () returned 0x0 [0116.465] capGetDriverDescriptionA () returned 0x0 [0116.466] GetLastError () returned 0x0 [0116.466] SetLastError (dwErrCode=0x0) [0116.466] OpenThemeData () returned 0x48e0000 [0116.469] GetSystemMetrics (nIndex=32) returned 4 [0116.469] GetSystemMetrics (nIndex=33) returned 4 [0116.469] CloseThemeData () returned 0x0 [0116.470] capGetDriverDescriptionA () returned 0x0 [0116.470] GetLastError () returned 0x0 [0116.470] SetLastError (dwErrCode=0x0) [0116.470] OpenThemeData () returned 0x48f0000 [0116.471] GetSystemMetrics (nIndex=32) returned 4 [0116.471] GetSystemMetrics (nIndex=33) returned 4 [0116.471] CloseThemeData () returned 0x0 [0117.066] capGetDriverDescriptionA () returned 0x0 [0117.067] GetLastError () returned 0x0 [0117.067] SetLastError (dwErrCode=0x0) [0117.067] OpenThemeData () returned 0x4900000 [0117.067] GetSystemMetrics (nIndex=32) returned 4 [0117.067] GetSystemMetrics (nIndex=33) returned 4 [0117.067] CloseThemeData () returned 0x0 [0117.068] capGetDriverDescriptionA () returned 0x0 [0117.068] GetLastError () returned 0x0 [0117.068] SetLastError (dwErrCode=0x0) [0117.068] OpenThemeData () returned 0x4910000 [0117.069] GetSystemMetrics (nIndex=32) returned 4 [0117.069] GetSystemMetrics (nIndex=33) returned 4 [0117.069] CloseThemeData () returned 0x0 [0117.069] capGetDriverDescriptionA () returned 0x0 [0117.070] GetLastError () returned 0x0 [0117.070] SetLastError (dwErrCode=0x0) [0117.070] OpenThemeData () returned 0x4920000 [0117.070] GetSystemMetrics (nIndex=32) returned 4 [0117.070] GetSystemMetrics (nIndex=33) returned 4 [0117.070] CloseThemeData () returned 0x0 [0117.071] capGetDriverDescriptionA () returned 0x0 [0117.071] GetLastError () returned 0x0 [0117.071] SetLastError (dwErrCode=0x0) [0117.071] OpenThemeData () returned 0x4930000 [0117.072] GetSystemMetrics (nIndex=32) returned 4 [0117.072] GetSystemMetrics (nIndex=33) returned 4 [0117.072] CloseThemeData () returned 0x0 [0117.072] capGetDriverDescriptionA () returned 0x0 [0117.073] GetLastError () returned 0x0 [0117.073] SetLastError (dwErrCode=0x0) [0117.073] OpenThemeData () returned 0x4940000 [0117.073] GetSystemMetrics (nIndex=32) returned 4 [0117.073] GetSystemMetrics (nIndex=33) returned 4 [0117.073] CloseThemeData () returned 0x0 [0117.074] capGetDriverDescriptionA () returned 0x0 [0117.074] GetLastError () returned 0x0 [0117.074] SetLastError (dwErrCode=0x0) [0117.074] OpenThemeData () returned 0x4950000 [0117.075] GetSystemMetrics (nIndex=32) returned 4 [0117.075] GetSystemMetrics (nIndex=33) returned 4 [0117.075] CloseThemeData () returned 0x0 [0117.075] capGetDriverDescriptionA () returned 0x0 [0117.076] GetLastError () returned 0x0 [0117.076] SetLastError (dwErrCode=0x0) [0117.076] OpenThemeData () returned 0x4960000 [0117.076] GetSystemMetrics (nIndex=32) returned 4 [0117.076] GetSystemMetrics (nIndex=33) returned 4 [0117.076] CloseThemeData () returned 0x0 [0117.077] capGetDriverDescriptionA () returned 0x0 [0117.077] GetLastError () returned 0x0 [0117.077] SetLastError (dwErrCode=0x0) [0117.077] OpenThemeData () returned 0x4970000 [0117.078] GetSystemMetrics (nIndex=32) returned 4 [0117.078] GetSystemMetrics (nIndex=33) returned 4 [0117.078] CloseThemeData () returned 0x0 [0117.078] capGetDriverDescriptionA () returned 0x0 [0117.079] GetLastError () returned 0x0 [0117.079] SetLastError (dwErrCode=0x0) [0117.079] OpenThemeData () returned 0x4980000 [0117.079] GetSystemMetrics (nIndex=32) returned 4 [0117.079] GetSystemMetrics (nIndex=33) returned 4 [0117.079] CloseThemeData () returned 0x0 [0117.080] capGetDriverDescriptionA () returned 0x0 [0117.080] GetLastError () returned 0x0 [0117.080] SetLastError (dwErrCode=0x0) [0117.080] OpenThemeData () returned 0x4990000 [0117.081] GetSystemMetrics (nIndex=32) returned 4 [0117.081] GetSystemMetrics (nIndex=33) returned 4 [0117.081] CloseThemeData () returned 0x0 [0117.081] lstrlenA (lpString="\x92\x07") returned 2 [0117.081] lstrlenA (lpString="\x92\x07") returned 2 [0117.081] lstrlenA (lpString="\x92\x07") returned 2 [0117.081] lstrlenA (lpString="\x92\x07") returned 2 [0117.081] lstrlenA (lpString="\x92\x07") returned 2 [0117.081] lstrlenA (lpString="\x92\x07") returned 2 [0117.082] capGetDriverDescriptionA () returned 0x0 [0117.082] GetLastError () returned 0x0 [0117.082] SetLastError (dwErrCode=0x0) [0117.082] OpenThemeData () returned 0x49a0000 [0117.083] GetSystemMetrics (nIndex=32) returned 4 [0117.083] GetSystemMetrics (nIndex=33) returned 4 [0117.083] CloseThemeData () returned 0x0 [0117.083] lstrlenA (lpString="\x92\x07") returned 2 [0117.083] lstrlenA (lpString="\x92\x07") returned 2 [0117.083] lstrlenA (lpString="\x92\x07") returned 2 [0117.083] lstrlenA (lpString="\x92\x07") returned 2 [0117.083] lstrlenA (lpString="\x92\x07") returned 2 [0117.083] lstrlenA (lpString="\x92\x07") returned 2 [0117.083] capGetDriverDescriptionA () returned 0x0 [0117.084] GetLastError () returned 0x0 [0117.084] SetLastError (dwErrCode=0x0) [0117.084] OpenThemeData () returned 0x49b0000 [0117.084] GetSystemMetrics (nIndex=32) returned 4 [0117.084] GetSystemMetrics (nIndex=33) returned 4 [0117.084] CloseThemeData () returned 0x0 [0117.085] lstrlenA (lpString="\x92\x07") returned 2 [0117.085] lstrlenA (lpString="\x92\x07") returned 2 [0117.085] lstrlenA (lpString="\x92\x07") returned 2 [0117.085] lstrlenA (lpString="\x92\x07") returned 2 [0117.085] lstrlenA (lpString="\x92\x07") returned 2 [0117.085] lstrlenA (lpString="\x92\x07") returned 2 [0117.085] capGetDriverDescriptionA () returned 0x0 [0117.085] GetLastError () returned 0x0 [0117.085] SetLastError (dwErrCode=0x0) [0117.085] OpenThemeData () returned 0x49c0000 [0117.086] GetSystemMetrics (nIndex=32) returned 4 [0117.086] GetSystemMetrics (nIndex=33) returned 4 [0117.086] CloseThemeData () returned 0x0 [0117.086] lstrlenA (lpString="\x92\x07") returned 2 [0117.086] lstrlenA (lpString="\x92\x07") returned 2 [0117.086] lstrlenA (lpString="\x92\x07") returned 2 [0117.086] lstrlenA (lpString="\x92\x07") returned 2 [0117.086] lstrlenA (lpString="\x92\x07") returned 2 [0117.086] lstrlenA (lpString="\x92\x07") returned 2 [0117.086] capGetDriverDescriptionA () returned 0x0 [0117.087] GetLastError () returned 0x0 [0117.087] SetLastError (dwErrCode=0x0) [0117.087] OpenThemeData () returned 0x49d0000 [0117.087] GetSystemMetrics (nIndex=32) returned 4 [0117.087] GetSystemMetrics (nIndex=33) returned 4 [0117.087] CloseThemeData () returned 0x0 [0117.088] lstrlenA (lpString="\x92\x07") returned 2 [0117.088] lstrlenA (lpString="\x92\x07") returned 2 [0117.088] lstrlenA (lpString="\x92\x07") returned 2 [0117.088] lstrlenA (lpString="\x92\x07") returned 2 [0117.088] lstrlenA (lpString="\x92\x07") returned 2 [0117.088] lstrlenA (lpString="\x92\x07") returned 2 [0117.088] capGetDriverDescriptionA () returned 0x0 [0117.089] GetLastError () returned 0x0 [0117.089] SetLastError (dwErrCode=0x0) [0117.089] OpenThemeData () returned 0x49e0000 [0117.089] GetSystemMetrics (nIndex=32) returned 4 [0117.089] GetSystemMetrics (nIndex=33) returned 4 [0117.089] CloseThemeData () returned 0x0 [0117.089] lstrlenA (lpString="\x92\x07") returned 2 [0117.089] lstrlenA (lpString="\x92\x07") returned 2 [0117.089] lstrlenA (lpString="\x92\x07") returned 2 [0117.090] lstrlenA (lpString="\x92\x07") returned 2 [0117.090] lstrlenA (lpString="\x92\x07") returned 2 [0117.090] lstrlenA (lpString="\x92\x07") returned 2 [0117.090] capGetDriverDescriptionA () returned 0x0 [0117.090] GetLastError () returned 0x0 [0117.090] SetLastError (dwErrCode=0x0) [0117.090] OpenThemeData () returned 0x49f0000 [0117.091] GetSystemMetrics (nIndex=32) returned 4 [0117.091] GetSystemMetrics (nIndex=33) returned 4 [0117.091] CloseThemeData () returned 0x0 [0117.091] lstrlenA (lpString="\x92\x07") returned 2 [0117.091] lstrlenA (lpString="\x92\x07") returned 2 [0117.091] lstrlenA (lpString="\x92\x07") returned 2 [0117.091] lstrlenA (lpString="\x92\x07") returned 2 [0117.091] lstrlenA (lpString="\x92\x07") returned 2 [0117.091] lstrlenA (lpString="\x92\x07") returned 2 [0117.091] capGetDriverDescriptionA () returned 0x0 [0117.092] GetLastError () returned 0x0 [0117.092] SetLastError (dwErrCode=0x0) [0117.092] OpenThemeData () returned 0x4a00000 [0117.092] GetSystemMetrics (nIndex=32) returned 4 [0117.092] GetSystemMetrics (nIndex=33) returned 4 [0117.092] CloseThemeData () returned 0x0 [0117.093] lstrlenA (lpString="\x92\x07") returned 2 [0117.093] lstrlenA (lpString="\x92\x07") returned 2 [0117.093] lstrlenA (lpString="\x92\x07") returned 2 [0117.093] lstrlenA (lpString="\x92\x07") returned 2 [0117.093] lstrlenA (lpString="\x92\x07") returned 2 [0117.093] lstrlenA (lpString="\x92\x07") returned 2 [0117.093] capGetDriverDescriptionA () returned 0x0 [0117.093] GetLastError () returned 0x0 [0117.093] SetLastError (dwErrCode=0x0) [0117.093] OpenThemeData () returned 0x4a10000 [0117.094] GetSystemMetrics (nIndex=32) returned 4 [0117.094] GetSystemMetrics (nIndex=33) returned 4 [0117.094] CloseThemeData () returned 0x0 [0117.094] lstrlenA (lpString="\x92\x07") returned 2 [0117.094] lstrlenA (lpString="\x92\x07") returned 2 [0117.094] lstrlenA (lpString="\x92\x07") returned 2 [0117.094] lstrlenA (lpString="\x92\x07") returned 2 [0117.094] lstrlenA (lpString="\x92\x07") returned 2 [0117.094] lstrlenA (lpString="\x92\x07") returned 2 [0117.095] capGetDriverDescriptionA () returned 0x0 [0117.095] GetLastError () returned 0x0 [0117.095] SetLastError (dwErrCode=0x0) [0117.095] OpenThemeData () returned 0x4a20000 [0117.096] GetSystemMetrics (nIndex=32) returned 4 [0117.096] GetSystemMetrics (nIndex=33) returned 4 [0117.096] CloseThemeData () returned 0x0 [0117.096] lstrlenA (lpString="\x92\x07") returned 2 [0117.097] lstrlenA (lpString="\x92\x07") returned 2 [0117.097] lstrlenA (lpString="\x92\x07") returned 2 [0117.097] lstrlenA (lpString="\x92\x07") returned 2 [0117.097] lstrlenA (lpString="\x92\x07") returned 2 [0117.097] lstrlenA (lpString="\x92\x07") returned 2 [0117.097] capGetDriverDescriptionA () returned 0x0 [0117.097] GetLastError () returned 0x0 [0117.097] SetLastError (dwErrCode=0x0) [0117.097] OpenThemeData () returned 0x4a30000 [0117.098] GetSystemMetrics (nIndex=32) returned 4 [0117.098] GetSystemMetrics (nIndex=33) returned 4 [0117.098] CloseThemeData () returned 0x0 [0117.098] lstrlenA (lpString="\x92\x07") returned 2 [0117.098] lstrlenA (lpString="\x92\x07") returned 2 [0117.098] lstrlenA (lpString="\x92\x07") returned 2 [0117.098] lstrlenA (lpString="\x92\x07") returned 2 [0117.098] lstrlenA (lpString="\x92\x07") returned 2 [0117.098] lstrlenA (lpString="\x92\x07") returned 2 [0117.098] capGetDriverDescriptionA () returned 0x0 [0117.099] GetLastError () returned 0x0 [0117.099] SetLastError (dwErrCode=0x0) [0117.099] OpenThemeData () returned 0x4a40000 [0117.099] GetSystemMetrics (nIndex=32) returned 4 [0117.100] GetSystemMetrics (nIndex=33) returned 4 [0117.100] CloseThemeData () returned 0x0 [0117.100] lstrlenA (lpString="\x92\x07") returned 2 [0117.100] lstrlenA (lpString="\x92\x07") returned 2 [0117.100] lstrlenA (lpString="\x92\x07") returned 2 [0117.100] lstrlenA (lpString="\x92\x07") returned 2 [0117.100] lstrlenA (lpString="\x92\x07") returned 2 [0117.100] lstrlenA (lpString="\x92\x07") returned 2 [0117.100] capGetDriverDescriptionA () returned 0x0 [0117.101] GetLastError () returned 0x0 [0117.101] SetLastError (dwErrCode=0x0) [0117.101] OpenThemeData () returned 0x4a50000 [0117.101] GetSystemMetrics (nIndex=32) returned 4 [0117.101] GetSystemMetrics (nIndex=33) returned 4 [0117.101] CloseThemeData () returned 0x0 [0117.101] lstrlenA (lpString="\x92\x07") returned 2 [0117.101] lstrlenA (lpString="\x92\x07") returned 2 [0117.101] lstrlenA (lpString="\x92\x07") returned 2 [0117.102] lstrlenA (lpString="\x92\x07") returned 2 [0117.102] lstrlenA (lpString="\x92\x07") returned 2 [0117.102] lstrlenA (lpString="\x92\x07") returned 2 [0117.102] capGetDriverDescriptionA () returned 0x0 [0117.102] GetLastError () returned 0x0 [0117.102] SetLastError (dwErrCode=0x0) [0117.102] OpenThemeData () returned 0x4a60000 [0117.103] GetSystemMetrics (nIndex=32) returned 4 [0117.103] GetSystemMetrics (nIndex=33) returned 4 [0117.103] CloseThemeData () returned 0x0 [0117.103] lstrlenA (lpString="\x92\x07") returned 2 [0117.103] lstrlenA (lpString="\x92\x07") returned 2 [0117.103] lstrlenA (lpString="\x92\x07") returned 2 [0117.103] lstrlenA (lpString="\x92\x07") returned 2 [0117.103] lstrlenA (lpString="\x92\x07") returned 2 [0117.103] lstrlenA (lpString="\x92\x07") returned 2 [0117.103] capGetDriverDescriptionA () returned 0x0 [0117.104] GetLastError () returned 0x0 [0117.104] SetLastError (dwErrCode=0x0) [0117.104] OpenThemeData () returned 0x4a70000 [0117.104] GetSystemMetrics (nIndex=32) returned 4 [0117.104] GetSystemMetrics (nIndex=33) returned 4 [0117.104] CloseThemeData () returned 0x0 [0117.105] lstrlenA (lpString="\x92\x07") returned 2 [0117.105] lstrlenA (lpString="\x92\x07") returned 2 [0117.105] lstrlenA (lpString="\x92\x07") returned 2 [0117.105] lstrlenA (lpString="\x92\x07") returned 2 [0117.105] lstrlenA (lpString="\x92\x07") returned 2 [0117.105] lstrlenA (lpString="\x92\x07") returned 2 [0117.105] capGetDriverDescriptionA () returned 0x0 [0117.105] GetLastError () returned 0x0 [0117.105] SetLastError (dwErrCode=0x0) [0117.105] OpenThemeData () returned 0x4a80000 [0117.106] GetSystemMetrics (nIndex=32) returned 4 [0117.106] GetSystemMetrics (nIndex=33) returned 4 [0117.106] CloseThemeData () returned 0x0 [0117.106] lstrlenA (lpString="\x92\x07") returned 2 [0117.106] lstrlenA (lpString="\x92\x07") returned 2 [0117.106] lstrlenA (lpString="\x92\x07") returned 2 [0117.106] lstrlenA (lpString="\x92\x07") returned 2 [0117.106] lstrlenA (lpString="\x92\x07") returned 2 [0117.106] lstrlenA (lpString="\x92\x07") returned 2 [0117.106] capGetDriverDescriptionA () returned 0x0 [0117.107] GetLastError () returned 0x0 [0117.107] SetLastError (dwErrCode=0x0) [0117.107] OpenThemeData () returned 0x4a90000 [0117.108] GetSystemMetrics (nIndex=32) returned 4 [0117.108] GetSystemMetrics (nIndex=33) returned 4 [0117.108] CloseThemeData () returned 0x0 [0117.108] lstrlenA (lpString="\x92\x07") returned 2 [0117.108] lstrlenA (lpString="\x92\x07") returned 2 [0117.108] lstrlenA (lpString="\x92\x07") returned 2 [0117.108] lstrlenA (lpString="\x92\x07") returned 2 [0117.108] lstrlenA (lpString="\x92\x07") returned 2 [0117.108] lstrlenA (lpString="\x92\x07") returned 2 [0117.108] capGetDriverDescriptionA () returned 0x0 [0117.109] GetLastError () returned 0x0 [0117.109] SetLastError (dwErrCode=0x0) [0117.109] OpenThemeData () returned 0x4aa0000 [0117.109] GetSystemMetrics (nIndex=32) returned 4 [0117.109] GetSystemMetrics (nIndex=33) returned 4 [0117.109] CloseThemeData () returned 0x0 [0117.110] lstrlenA (lpString="\x92\x07") returned 2 [0117.110] lstrlenA (lpString="\x92\x07") returned 2 [0117.110] lstrlenA (lpString="\x92\x07") returned 2 [0117.110] lstrlenA (lpString="\x92\x07") returned 2 [0117.110] lstrlenA (lpString="\x92\x07") returned 2 [0117.110] lstrlenA (lpString="\x92\x07") returned 2 [0117.110] capGetDriverDescriptionA () returned 0x0 [0117.110] GetLastError () returned 0x0 [0117.110] SetLastError (dwErrCode=0x0) [0117.110] OpenThemeData () returned 0x4ab0000 [0117.111] GetSystemMetrics (nIndex=32) returned 4 [0117.111] GetSystemMetrics (nIndex=33) returned 4 [0117.111] CloseThemeData () returned 0x0 [0117.111] lstrlenA (lpString="\x92\x07") returned 2 [0117.111] lstrlenA (lpString="\x92\x07") returned 2 [0117.111] lstrlenA (lpString="\x92\x07") returned 2 [0117.111] lstrlenA (lpString="\x92\x07") returned 2 [0117.111] lstrlenA (lpString="\x92\x07") returned 2 [0117.111] lstrlenA (lpString="\x92\x07") returned 2 [0117.111] capGetDriverDescriptionA () returned 0x0 [0117.741] GetLastError () returned 0x0 [0117.741] SetLastError (dwErrCode=0x0) [0117.741] OpenThemeData () returned 0x4ac0000 [0118.014] GetSystemMetrics (nIndex=32) returned 4 [0118.014] GetSystemMetrics (nIndex=33) returned 4 [0118.014] CloseThemeData () returned 0x0 [0118.014] lstrlenA (lpString="\x92\x07") returned 2 [0118.015] lstrlenA (lpString="\x92\x07") returned 2 [0118.015] lstrlenA (lpString="\x92\x07") returned 2 [0118.015] lstrlenA (lpString="\x92\x07") returned 2 [0118.015] lstrlenA (lpString="\x92\x07") returned 2 [0118.015] lstrlenA (lpString="\x92\x07") returned 2 [0118.015] capGetDriverDescriptionA () returned 0x0 [0118.016] GetLastError () returned 0x0 [0118.016] SetLastError (dwErrCode=0x0) [0118.016] OpenThemeData () returned 0x4ad0000 [0118.017] GetSystemMetrics (nIndex=32) returned 4 [0118.017] GetSystemMetrics (nIndex=33) returned 4 [0118.017] CloseThemeData () returned 0x0 [0118.017] lstrlenA (lpString="\x92\x07") returned 2 [0118.017] lstrlenA (lpString="\x92\x07") returned 2 [0118.017] lstrlenA (lpString="\x92\x07") returned 2 [0118.017] lstrlenA (lpString="\x92\x07") returned 2 [0118.017] lstrlenA (lpString="\x92\x07") returned 2 [0118.017] lstrlenA (lpString="\x92\x07") returned 2 [0118.017] capGetDriverDescriptionA () returned 0x0 [0118.018] GetLastError () returned 0x0 [0118.018] SetLastError (dwErrCode=0x0) [0118.018] OpenThemeData () returned 0x4ae0000 [0118.019] GetSystemMetrics (nIndex=32) returned 4 [0118.019] GetSystemMetrics (nIndex=33) returned 4 [0118.019] CloseThemeData () returned 0x0 [0118.020] lstrlenA (lpString="\x92\x07") returned 2 [0118.020] lstrlenA (lpString="\x92\x07") returned 2 [0118.020] lstrlenA (lpString="\x92\x07") returned 2 [0118.020] lstrlenA (lpString="\x92\x07") returned 2 [0118.020] lstrlenA (lpString="\x92\x07") returned 2 [0118.020] lstrlenA (lpString="\x92\x07") returned 2 [0118.020] capGetDriverDescriptionA () returned 0x0 [0118.020] GetLastError () returned 0x0 [0118.020] SetLastError (dwErrCode=0x0) [0118.020] OpenThemeData () returned 0x4af0000 [0118.021] GetSystemMetrics (nIndex=32) returned 4 [0118.021] GetSystemMetrics (nIndex=33) returned 4 [0118.021] CloseThemeData () returned 0x0 [0118.021] lstrlenA (lpString="\x92\x07") returned 2 [0118.021] lstrlenA (lpString="\x92\x07") returned 2 [0118.021] lstrlenA (lpString="\x92\x07") returned 2 [0118.021] lstrlenA (lpString="\x92\x07") returned 2 [0118.021] lstrlenA (lpString="\x92\x07") returned 2 [0118.021] lstrlenA (lpString="\x92\x07") returned 2 [0118.021] capGetDriverDescriptionA () returned 0x0 [0118.022] GetLastError () returned 0x0 [0118.022] SetLastError (dwErrCode=0x0) [0118.022] OpenThemeData () returned 0x4b00000 [0118.023] GetSystemMetrics (nIndex=32) returned 4 [0118.023] GetSystemMetrics (nIndex=33) returned 4 [0118.023] CloseThemeData () returned 0x0 [0118.023] lstrlenA (lpString="\x92\x07") returned 2 [0118.023] lstrlenA (lpString="\x92\x07") returned 2 [0118.023] lstrlenA (lpString="\x92\x07") returned 2 [0118.023] lstrlenA (lpString="\x92\x07") returned 2 [0118.023] lstrlenA (lpString="\x92\x07") returned 2 [0118.023] lstrlenA (lpString="\x92\x07") returned 2 [0118.023] capGetDriverDescriptionA () returned 0x0 [0118.024] GetLastError () returned 0x0 [0118.024] SetLastError (dwErrCode=0x0) [0118.024] OpenThemeData () returned 0x4b10000 [0118.024] GetSystemMetrics (nIndex=32) returned 4 [0118.024] GetSystemMetrics (nIndex=33) returned 4 [0118.024] CloseThemeData () returned 0x0 [0118.025] lstrlenA (lpString="\x92\x07") returned 2 [0118.025] lstrlenA (lpString="\x92\x07") returned 2 [0118.025] lstrlenA (lpString="\x92\x07") returned 2 [0118.025] lstrlenA (lpString="\x92\x07") returned 2 [0118.025] lstrlenA (lpString="\x92\x07") returned 2 [0118.025] lstrlenA (lpString="\x92\x07") returned 2 [0118.025] capGetDriverDescriptionA () returned 0x0 [0118.025] GetLastError () returned 0x0 [0118.025] SetLastError (dwErrCode=0x0) [0118.025] OpenThemeData () returned 0x4b20000 [0118.026] GetSystemMetrics (nIndex=32) returned 4 [0118.026] GetSystemMetrics (nIndex=33) returned 4 [0118.026] CloseThemeData () returned 0x0 [0118.026] lstrlenA (lpString="\x92\x07") returned 2 [0118.026] lstrlenA (lpString="\x92\x07") returned 2 [0118.026] lstrlenA (lpString="\x92\x07") returned 2 [0118.026] lstrlenA (lpString="\x92\x07") returned 2 [0118.026] lstrlenA (lpString="\x92\x07") returned 2 [0118.026] lstrlenA (lpString="\x92\x07") returned 2 [0118.026] capGetDriverDescriptionA () returned 0x0 [0118.027] GetLastError () returned 0x0 [0118.027] SetLastError (dwErrCode=0x0) [0118.027] OpenThemeData () returned 0x4b30000 [0118.028] GetSystemMetrics (nIndex=32) returned 4 [0118.028] GetSystemMetrics (nIndex=33) returned 4 [0118.028] CloseThemeData () returned 0x0 [0118.028] lstrlenA (lpString="\x92\x07") returned 2 [0118.028] lstrlenA (lpString="\x92\x07") returned 2 [0118.028] lstrlenA (lpString="\x92\x07") returned 2 [0118.028] lstrlenA (lpString="\x92\x07") returned 2 [0118.028] lstrlenA (lpString="\x92\x07") returned 2 [0118.028] lstrlenA (lpString="\x92\x07") returned 2 [0118.028] capGetDriverDescriptionA () returned 0x0 [0118.029] GetLastError () returned 0x0 [0118.029] SetLastError (dwErrCode=0x0) [0118.029] OpenThemeData () returned 0x4b40000 [0118.029] GetSystemMetrics (nIndex=32) returned 4 [0118.029] GetSystemMetrics (nIndex=33) returned 4 [0118.029] CloseThemeData () returned 0x0 [0118.030] lstrlenA (lpString="\x92\x07") returned 2 [0118.030] lstrlenA (lpString="\x92\x07") returned 2 [0118.030] lstrlenA (lpString="\x92\x07") returned 2 [0118.030] lstrlenA (lpString="\x92\x07") returned 2 [0118.030] lstrlenA (lpString="\x92\x07") returned 2 [0118.030] lstrlenA (lpString="\x92\x07") returned 2 [0118.030] capGetDriverDescriptionA () returned 0x0 [0118.030] GetLastError () returned 0x0 [0118.030] SetLastError (dwErrCode=0x0) [0118.030] OpenThemeData () returned 0x4b50000 [0118.031] GetSystemMetrics (nIndex=32) returned 4 [0118.031] GetSystemMetrics (nIndex=33) returned 4 [0118.031] CloseThemeData () returned 0x0 [0118.031] lstrlenA (lpString="\x92\x07") returned 2 [0118.031] lstrlenA (lpString="\x92\x07") returned 2 [0118.031] lstrlenA (lpString="\x92\x07") returned 2 [0118.031] lstrlenA (lpString="\x92\x07") returned 2 [0118.031] lstrlenA (lpString="\x92\x07") returned 2 [0118.031] lstrlenA (lpString="\x92\x07") returned 2 [0118.031] capGetDriverDescriptionA () returned 0x0 [0118.032] GetLastError () returned 0x0 [0118.032] SetLastError (dwErrCode=0x0) [0118.032] OpenThemeData () returned 0x4b60000 [0118.033] GetSystemMetrics (nIndex=32) returned 4 [0118.033] GetSystemMetrics (nIndex=33) returned 4 [0118.033] CloseThemeData () returned 0x0 [0118.033] lstrlenA (lpString="\x92\x07") returned 2 [0118.033] lstrlenA (lpString="\x92\x07") returned 2 [0118.033] lstrlenA (lpString="\x92\x07") returned 2 [0118.033] lstrlenA (lpString="\x92\x07") returned 2 [0118.033] lstrlenA (lpString="\x92\x07") returned 2 [0118.033] lstrlenA (lpString="\x92\x07") returned 2 [0118.033] capGetDriverDescriptionA () returned 0x0 [0118.034] GetLastError () returned 0x0 [0118.034] SetLastError (dwErrCode=0x0) [0118.034] OpenThemeData () returned 0x4b70000 [0118.034] GetSystemMetrics (nIndex=32) returned 4 [0118.034] GetSystemMetrics (nIndex=33) returned 4 [0118.034] CloseThemeData () returned 0x0 [0118.035] lstrlenA (lpString="\x92\x07") returned 2 [0118.035] lstrlenA (lpString="\x92\x07") returned 2 [0118.035] lstrlenA (lpString="\x92\x07") returned 2 [0118.035] lstrlenA (lpString="\x92\x07") returned 2 [0118.035] lstrlenA (lpString="\x92\x07") returned 2 [0118.035] lstrlenA (lpString="\x92\x07") returned 2 [0118.035] capGetDriverDescriptionA () returned 0x0 [0118.036] GetLastError () returned 0x0 [0118.036] SetLastError (dwErrCode=0x0) [0118.036] OpenThemeData () returned 0x4b80000 [0118.036] GetSystemMetrics (nIndex=32) returned 4 [0118.036] GetSystemMetrics (nIndex=33) returned 4 [0118.036] CloseThemeData () returned 0x0 [0118.036] lstrlenA (lpString="\x92\x07") returned 2 [0118.037] lstrlenA (lpString="\x92\x07") returned 2 [0118.037] lstrlenA (lpString="\x92\x07") returned 2 [0118.037] lstrlenA (lpString="\x92\x07") returned 2 [0118.037] lstrlenA (lpString="\x92\x07") returned 2 [0118.037] lstrlenA (lpString="\x92\x07") returned 2 [0118.037] capGetDriverDescriptionA () returned 0x0 [0118.037] GetLastError () returned 0x0 [0118.037] SetLastError (dwErrCode=0x0) [0118.037] OpenThemeData () returned 0x4b90000 [0118.038] GetSystemMetrics (nIndex=32) returned 4 [0118.038] GetSystemMetrics (nIndex=33) returned 4 [0118.038] CloseThemeData () returned 0x0 [0118.038] lstrlenA (lpString="\x92\x07") returned 2 [0118.038] lstrlenA (lpString="\x92\x07") returned 2 [0118.038] lstrlenA (lpString="\x92\x07") returned 2 [0118.038] lstrlenA (lpString="\x92\x07") returned 2 [0118.038] lstrlenA (lpString="\x92\x07") returned 2 [0118.038] lstrlenA (lpString="\x92\x07") returned 2 [0118.038] capGetDriverDescriptionA () returned 0x0 [0118.039] GetLastError () returned 0x0 [0118.039] SetLastError (dwErrCode=0x0) [0118.039] OpenThemeData () returned 0x4ba0000 [0118.039] GetSystemMetrics (nIndex=32) returned 4 [0118.039] GetSystemMetrics (nIndex=33) returned 4 [0118.039] CloseThemeData () returned 0x0 [0118.040] lstrlenA (lpString="\x92\x07") returned 2 [0118.040] lstrlenA (lpString="\x92\x07") returned 2 [0118.040] lstrlenA (lpString="\x92\x07") returned 2 [0118.040] lstrlenA (lpString="\x92\x07") returned 2 [0118.040] lstrlenA (lpString="\x92\x07") returned 2 [0118.040] lstrlenA (lpString="\x92\x07") returned 2 [0118.040] capGetDriverDescriptionA () returned 0x0 [0118.041] GetLastError () returned 0x0 [0118.041] SetLastError (dwErrCode=0x0) [0118.041] OpenThemeData () returned 0x4bb0000 [0118.041] GetSystemMetrics (nIndex=32) returned 4 [0118.041] GetSystemMetrics (nIndex=33) returned 4 [0118.041] CloseThemeData () returned 0x0 [0118.041] lstrlenA (lpString="\x92\x07") returned 2 [0118.042] lstrlenA (lpString="\x92\x07") returned 2 [0118.042] lstrlenA (lpString="\x92\x07") returned 2 [0118.042] lstrlenA (lpString="\x92\x07") returned 2 [0118.042] lstrlenA (lpString="\x92\x07") returned 2 [0118.042] lstrlenA (lpString="\x92\x07") returned 2 [0118.042] capGetDriverDescriptionA () returned 0x0 [0118.042] GetLastError () returned 0x0 [0118.042] SetLastError (dwErrCode=0x0) [0118.042] OpenThemeData () returned 0x4bc0000 [0118.043] GetSystemMetrics (nIndex=32) returned 4 [0118.043] GetSystemMetrics (nIndex=33) returned 4 [0118.043] CloseThemeData () returned 0x0 [0118.043] lstrlenA (lpString="\x92\x07") returned 2 [0118.043] lstrlenA (lpString="\x92\x07") returned 2 [0118.043] lstrlenA (lpString="\x92\x07") returned 2 [0118.043] lstrlenA (lpString="\x92\x07") returned 2 [0118.043] lstrlenA (lpString="\x92\x07") returned 2 [0118.043] lstrlenA (lpString="\x92\x07") returned 2 [0118.043] capGetDriverDescriptionA () returned 0x0 [0118.044] GetLastError () returned 0x0 [0118.044] SetLastError (dwErrCode=0x0) [0118.044] OpenThemeData () returned 0x4bd0000 [0118.044] GetSystemMetrics (nIndex=32) returned 4 [0118.044] GetSystemMetrics (nIndex=33) returned 4 [0118.045] CloseThemeData () returned 0x0 [0118.045] lstrlenA (lpString="\x92\x07") returned 2 [0118.045] lstrlenA (lpString="\x92\x07") returned 2 [0118.045] lstrlenA (lpString="\x92\x07") returned 2 [0118.045] lstrlenA (lpString="\x92\x07") returned 2 [0118.045] lstrlenA (lpString="\x92\x07") returned 2 [0118.045] lstrlenA (lpString="\x92\x07") returned 2 [0118.045] capGetDriverDescriptionA () returned 0x0 [0118.046] GetLastError () returned 0x0 [0118.046] SetLastError (dwErrCode=0x0) [0118.046] OpenThemeData () returned 0x4be0000 [0118.046] GetSystemMetrics (nIndex=32) returned 4 [0118.046] GetSystemMetrics (nIndex=33) returned 4 [0118.046] CloseThemeData () returned 0x0 [0118.046] lstrlenA (lpString="\x92\x07") returned 2 [0118.047] lstrlenA (lpString="\x92\x07") returned 2 [0118.047] lstrlenA (lpString="\x92\x07") returned 2 [0118.047] lstrlenA (lpString="\x92\x07") returned 2 [0118.047] lstrlenA (lpString="\x92\x07") returned 2 [0118.047] lstrlenA (lpString="\x92\x07") returned 2 [0118.047] capGetDriverDescriptionA () returned 0x0 [0118.047] GetLastError () returned 0x0 [0118.047] SetLastError (dwErrCode=0x0) [0118.047] OpenThemeData () returned 0x4bf0000 [0118.048] GetSystemMetrics (nIndex=32) returned 4 [0118.048] GetSystemMetrics (nIndex=33) returned 4 [0118.048] CloseThemeData () returned 0x0 [0118.048] lstrlenA (lpString="\x92\x07") returned 2 [0118.048] lstrlenA (lpString="\x92\x07") returned 2 [0118.048] lstrlenA (lpString="\x92\x07") returned 2 [0118.048] lstrlenA (lpString="\x92\x07") returned 2 [0118.048] lstrlenA (lpString="\x92\x07") returned 2 [0118.048] lstrlenA (lpString="\x92\x07") returned 2 [0118.048] capGetDriverDescriptionA () returned 0x0 [0118.049] GetLastError () returned 0x0 [0118.049] SetLastError (dwErrCode=0x0) [0118.049] OpenThemeData () returned 0x4c00000 [0118.050] GetSystemMetrics (nIndex=32) returned 4 [0118.050] GetSystemMetrics (nIndex=33) returned 4 [0118.050] CloseThemeData () returned 0x0 [0118.050] lstrlenA (lpString="\x92\x07") returned 2 [0118.050] lstrlenA (lpString="\x92\x07") returned 2 [0118.050] lstrlenA (lpString="\x92\x07") returned 2 [0118.050] lstrlenA (lpString="\x92\x07") returned 2 [0118.050] lstrlenA (lpString="\x92\x07") returned 2 [0118.050] lstrlenA (lpString="\x92\x07") returned 2 [0118.050] capGetDriverDescriptionA () returned 0x0 [0118.541] GetLastError () returned 0x0 [0118.542] SetLastError (dwErrCode=0x0) [0118.542] OpenThemeData () returned 0x4c10000 [0118.542] GetSystemMetrics (nIndex=32) returned 4 [0118.542] GetSystemMetrics (nIndex=33) returned 4 [0118.542] CloseThemeData () returned 0x0 [0118.543] lstrlenA (lpString="\x92\x07") returned 2 [0118.543] lstrlenA (lpString="\x92\x07") returned 2 [0118.543] lstrlenA (lpString="\x92\x07") returned 2 [0118.543] lstrlenA (lpString="\x92\x07") returned 2 [0118.543] lstrlenA (lpString="\x92\x07") returned 2 [0118.543] lstrlenA (lpString="\x92\x07") returned 2 [0118.543] capGetDriverDescriptionA () returned 0x0 [0118.543] GetLastError () returned 0x0 [0118.544] SetLastError (dwErrCode=0x0) [0118.544] OpenThemeData () returned 0x4c20000 [0118.544] GetSystemMetrics (nIndex=32) returned 4 [0118.544] GetSystemMetrics (nIndex=33) returned 4 [0118.544] CloseThemeData () returned 0x0 [0118.544] lstrlenA (lpString="\x92\x07") returned 2 [0118.545] lstrlenA (lpString="\x92\x07") returned 2 [0118.545] lstrlenA (lpString="\x92\x07") returned 2 [0118.545] lstrlenA (lpString="\x92\x07") returned 2 [0118.545] lstrlenA (lpString="\x92\x07") returned 2 [0118.545] lstrlenA (lpString="\x92\x07") returned 2 [0118.545] capGetDriverDescriptionA () returned 0x0 [0118.545] GetLastError () returned 0x0 [0118.545] SetLastError (dwErrCode=0x0) [0118.545] OpenThemeData () returned 0x4c30000 [0118.546] GetSystemMetrics (nIndex=32) returned 4 [0118.546] GetSystemMetrics (nIndex=33) returned 4 [0118.546] CloseThemeData () returned 0x0 [0118.546] lstrlenA (lpString="\x92\x07") returned 2 [0118.546] lstrlenA (lpString="\x92\x07") returned 2 [0118.546] lstrlenA (lpString="\x92\x07") returned 2 [0118.546] lstrlenA (lpString="\x92\x07") returned 2 [0118.546] lstrlenA (lpString="\x92\x07") returned 2 [0118.546] lstrlenA (lpString="\x92\x07") returned 2 [0118.547] capGetDriverDescriptionA () returned 0x0 [0118.547] GetLastError () returned 0x0 [0118.547] SetLastError (dwErrCode=0x0) [0118.547] OpenThemeData () returned 0x4c40000 [0118.548] GetSystemMetrics (nIndex=32) returned 4 [0118.548] GetSystemMetrics (nIndex=33) returned 4 [0118.548] CloseThemeData () returned 0x0 [0118.548] lstrlenA (lpString="\x92\x07") returned 2 [0118.548] lstrlenA (lpString="\x92\x07") returned 2 [0118.548] lstrlenA (lpString="\x92\x07") returned 2 [0118.548] lstrlenA (lpString="\x92\x07") returned 2 [0118.548] lstrlenA (lpString="\x92\x07") returned 2 [0118.548] lstrlenA (lpString="\x92\x07") returned 2 [0118.548] capGetDriverDescriptionA () returned 0x0 [0118.549] GetLastError () returned 0x0 [0118.549] SetLastError (dwErrCode=0x0) [0118.549] OpenThemeData () returned 0x4c50000 [0118.549] GetSystemMetrics (nIndex=32) returned 4 [0118.549] GetSystemMetrics (nIndex=33) returned 4 [0118.549] CloseThemeData () returned 0x0 [0118.550] lstrlenA (lpString="\x92\x07") returned 2 [0118.550] lstrlenA (lpString="\x92\x07") returned 2 [0118.550] lstrlenA (lpString="\x92\x07") returned 2 [0118.550] lstrlenA (lpString="\x92\x07") returned 2 [0118.550] lstrlenA (lpString="\x92\x07") returned 2 [0118.550] lstrlenA (lpString="\x92\x07") returned 2 [0118.550] capGetDriverDescriptionA () returned 0x0 [0118.550] GetLastError () returned 0x0 [0118.551] SetLastError (dwErrCode=0x0) [0118.551] OpenThemeData () returned 0x4c60000 [0118.551] GetSystemMetrics (nIndex=32) returned 4 [0118.551] GetSystemMetrics (nIndex=33) returned 4 [0118.551] CloseThemeData () returned 0x0 [0118.552] lstrlenA (lpString="\x92\x07") returned 2 [0118.552] lstrlenA (lpString="\x92\x07") returned 2 [0118.552] lstrlenA (lpString="\x92\x07") returned 2 [0118.552] lstrlenA (lpString="\x92\x07") returned 2 [0118.552] lstrlenA (lpString="\x92\x07") returned 2 [0118.552] lstrlenA (lpString="\x92\x07") returned 2 [0118.552] capGetDriverDescriptionA () returned 0x0 [0118.552] GetLastError () returned 0x0 [0118.552] SetLastError (dwErrCode=0x0) [0118.552] OpenThemeData () returned 0x4c70000 [0118.553] GetSystemMetrics (nIndex=32) returned 4 [0118.553] GetSystemMetrics (nIndex=33) returned 4 [0118.553] CloseThemeData () returned 0x0 [0118.553] lstrlenA (lpString="\x92\x07") returned 2 [0118.553] lstrlenA (lpString="\x92\x07") returned 2 [0118.553] lstrlenA (lpString="\x92\x07") returned 2 [0118.553] lstrlenA (lpString="\x92\x07") returned 2 [0118.553] lstrlenA (lpString="\x92\x07") returned 2 [0118.553] lstrlenA (lpString="\x92\x07") returned 2 [0118.553] capGetDriverDescriptionA () returned 0x0 [0118.554] GetLastError () returned 0x0 [0118.554] SetLastError (dwErrCode=0x0) [0118.554] OpenThemeData () returned 0x4c80000 [0118.555] GetSystemMetrics (nIndex=32) returned 4 [0118.555] GetSystemMetrics (nIndex=33) returned 4 [0118.555] CloseThemeData () returned 0x0 [0118.555] lstrlenA (lpString="\x92\x07") returned 2 [0118.555] lstrlenA (lpString="\x92\x07") returned 2 [0118.555] lstrlenA (lpString="\x92\x07") returned 2 [0118.555] lstrlenA (lpString="\x92\x07") returned 2 [0118.555] lstrlenA (lpString="\x92\x07") returned 2 [0118.555] lstrlenA (lpString="\x92\x07") returned 2 [0118.555] capGetDriverDescriptionA () returned 0x0 [0118.556] GetLastError () returned 0x0 [0118.556] SetLastError (dwErrCode=0x0) [0118.556] OpenThemeData () returned 0x4c90000 [0118.556] GetSystemMetrics (nIndex=32) returned 4 [0118.556] GetSystemMetrics (nIndex=33) returned 4 [0118.556] CloseThemeData () returned 0x0 [0118.557] lstrlenA (lpString="\x92\x07") returned 2 [0118.557] lstrlenA (lpString="\x92\x07") returned 2 [0118.557] lstrlenA (lpString="\x92\x07") returned 2 [0118.557] lstrlenA (lpString="\x92\x07") returned 2 [0118.557] lstrlenA (lpString="\x92\x07") returned 2 [0118.557] lstrlenA (lpString="\x92\x07") returned 2 [0118.557] capGetDriverDescriptionA () returned 0x0 [0118.558] GetLastError () returned 0x0 [0118.558] SetLastError (dwErrCode=0x0) [0118.558] OpenThemeData () returned 0x4ca0000 [0118.558] GetSystemMetrics (nIndex=32) returned 4 [0118.558] GetSystemMetrics (nIndex=33) returned 4 [0118.558] CloseThemeData () returned 0x0 [0118.559] lstrlenA (lpString="\x92\x07") returned 2 [0118.559] lstrlenA (lpString="\x92\x07") returned 2 [0118.559] lstrlenA (lpString="\x92\x07") returned 2 [0118.559] lstrlenA (lpString="\x92\x07") returned 2 [0118.559] lstrlenA (lpString="\x92\x07") returned 2 [0118.559] lstrlenA (lpString="\x92\x07") returned 2 [0118.559] capGetDriverDescriptionA () returned 0x0 [0118.559] GetLastError () returned 0x0 [0118.559] SetLastError (dwErrCode=0x0) [0118.559] OpenThemeData () returned 0x4cb0000 [0118.560] GetSystemMetrics (nIndex=32) returned 4 [0118.560] GetSystemMetrics (nIndex=33) returned 4 [0118.560] CloseThemeData () returned 0x0 [0118.560] lstrlenA (lpString="\x92\x07") returned 2 [0118.560] lstrlenA (lpString="\x92\x07") returned 2 [0118.560] lstrlenA (lpString="\x92\x07") returned 2 [0118.560] lstrlenA (lpString="\x92\x07") returned 2 [0118.560] lstrlenA (lpString="\x92\x07") returned 2 [0118.560] lstrlenA (lpString="\x92\x07") returned 2 [0118.560] capGetDriverDescriptionA () returned 0x0 [0118.561] GetLastError () returned 0x0 [0118.561] SetLastError (dwErrCode=0x0) [0118.561] OpenThemeData () returned 0x4cc0000 [0118.562] GetSystemMetrics (nIndex=32) returned 4 [0118.562] GetSystemMetrics (nIndex=33) returned 4 [0118.562] CloseThemeData () returned 0x0 [0118.562] lstrlenA (lpString="\x92\x07") returned 2 [0118.562] lstrlenA (lpString="\x92\x07") returned 2 [0118.562] lstrlenA (lpString="\x92\x07") returned 2 [0118.562] lstrlenA (lpString="\x92\x07") returned 2 [0118.562] lstrlenA (lpString="\x92\x07") returned 2 [0118.562] lstrlenA (lpString="\x92\x07") returned 2 [0118.562] capGetDriverDescriptionA () returned 0x0 [0118.563] GetLastError () returned 0x0 [0118.563] SetLastError (dwErrCode=0x0) [0118.563] OpenThemeData () returned 0x4cd0000 [0118.563] GetSystemMetrics (nIndex=32) returned 4 [0118.564] GetSystemMetrics (nIndex=33) returned 4 [0118.564] CloseThemeData () returned 0x0 [0118.564] lstrlenA (lpString="\x92\x07") returned 2 [0118.564] lstrlenA (lpString="\x92\x07") returned 2 [0118.564] lstrlenA (lpString="\x92\x07") returned 2 [0118.564] lstrlenA (lpString="\x92\x07") returned 2 [0118.564] lstrlenA (lpString="\x92\x07") returned 2 [0118.564] lstrlenA (lpString="\x92\x07") returned 2 [0118.564] capGetDriverDescriptionA () returned 0x0 [0118.565] GetLastError () returned 0x0 [0118.565] SetLastError (dwErrCode=0x0) [0118.565] OpenThemeData () returned 0x4ce0000 [0118.565] GetSystemMetrics (nIndex=32) returned 4 [0118.565] GetSystemMetrics (nIndex=33) returned 4 [0118.565] CloseThemeData () returned 0x0 [0118.566] lstrlenA (lpString="\x92\x07") returned 2 [0118.566] lstrlenA (lpString="\x92\x07") returned 2 [0118.566] lstrlenA (lpString="\x92\x07") returned 2 [0118.566] lstrlenA (lpString="\x92\x07") returned 2 [0118.566] lstrlenA (lpString="\x92\x07") returned 2 [0118.566] lstrlenA (lpString="\x92\x07") returned 2 [0118.566] capGetDriverDescriptionA () returned 0x0 [0118.566] GetLastError () returned 0x0 [0118.566] SetLastError (dwErrCode=0x0) [0118.566] OpenThemeData () returned 0x4cf0000 [0118.567] GetSystemMetrics (nIndex=32) returned 4 [0118.567] GetSystemMetrics (nIndex=33) returned 4 [0118.567] CloseThemeData () returned 0x0 [0118.568] lstrlenA (lpString="\x92\x07") returned 2 [0118.568] lstrlenA (lpString="\x92\x07") returned 2 [0118.568] lstrlenA (lpString="\x92\x07") returned 2 [0118.568] lstrlenA (lpString="\x92\x07") returned 2 [0118.568] lstrlenA (lpString="\x92\x07") returned 2 [0118.568] lstrlenA (lpString="\x92\x07") returned 2 [0118.568] capGetDriverDescriptionA () returned 0x0 [0118.569] GetLastError () returned 0x0 [0118.569] SetLastError (dwErrCode=0x0) [0118.569] OpenThemeData () returned 0x4d00000 [0118.569] GetSystemMetrics (nIndex=32) returned 4 [0118.569] GetSystemMetrics (nIndex=33) returned 4 [0118.569] CloseThemeData () returned 0x0 [0118.569] lstrlenA (lpString="\x92\x07") returned 2 [0118.569] lstrlenA (lpString="\x92\x07") returned 2 [0118.569] lstrlenA (lpString="\x92\x07") returned 2 [0118.570] lstrlenA (lpString="\x92\x07") returned 2 [0118.570] lstrlenA (lpString="\x92\x07") returned 2 [0118.570] lstrlenA (lpString="\x92\x07") returned 2 [0118.570] capGetDriverDescriptionA () returned 0x0 [0118.570] GetLastError () returned 0x0 [0118.570] SetLastError (dwErrCode=0x0) [0118.570] OpenThemeData () returned 0x4d10000 [0118.571] GetSystemMetrics (nIndex=32) returned 4 [0118.571] GetSystemMetrics (nIndex=33) returned 4 [0118.571] CloseThemeData () returned 0x0 [0118.571] lstrlenA (lpString="\x92\x07") returned 2 [0118.571] lstrlenA (lpString="\x92\x07") returned 2 [0118.571] lstrlenA (lpString="\x92\x07") returned 2 [0118.571] lstrlenA (lpString="\x92\x07") returned 2 [0118.571] lstrlenA (lpString="\x92\x07") returned 2 [0118.571] lstrlenA (lpString="\x92\x07") returned 2 [0118.571] capGetDriverDescriptionA () returned 0x0 [0118.572] GetLastError () returned 0x0 [0118.572] SetLastError (dwErrCode=0x0) [0118.572] OpenThemeData () returned 0x4d20000 [0118.573] GetSystemMetrics (nIndex=32) returned 4 [0118.573] GetSystemMetrics (nIndex=33) returned 4 [0118.573] CloseThemeData () returned 0x0 [0119.237] lstrlenA (lpString="\x92\x07") returned 2 [0119.237] lstrlenA (lpString="\x92\x07") returned 2 [0119.237] lstrlenA (lpString="\x92\x07") returned 2 [0119.237] lstrlenA (lpString="\x92\x07") returned 2 [0119.237] lstrlenA (lpString="\x92\x07") returned 2 [0119.238] lstrlenA (lpString="\x92\x07") returned 2 [0119.238] capGetDriverDescriptionA () returned 0x0 [0119.238] GetLastError () returned 0x0 [0119.238] SetLastError (dwErrCode=0x0) [0119.238] OpenThemeData () returned 0x4d30000 [0119.239] GetSystemMetrics (nIndex=32) returned 4 [0119.239] GetSystemMetrics (nIndex=33) returned 4 [0119.239] CloseThemeData () returned 0x0 [0119.240] lstrlenA (lpString="\x92\x07") returned 2 [0119.240] lstrlenA (lpString="\x92\x07") returned 2 [0119.240] lstrlenA (lpString="\x92\x07") returned 2 [0119.240] lstrlenA (lpString="\x92\x07") returned 2 [0119.240] lstrlenA (lpString="\x92\x07") returned 2 [0119.240] lstrlenA (lpString="\x92\x07") returned 2 [0119.240] capGetDriverDescriptionA () returned 0x0 [0119.240] GetLastError () returned 0x0 [0119.241] SetLastError (dwErrCode=0x0) [0119.241] OpenThemeData () returned 0x4d40000 [0119.244] GetSystemMetrics (nIndex=32) returned 4 [0119.244] GetSystemMetrics (nIndex=33) returned 4 [0119.244] CloseThemeData () returned 0x0 [0119.244] lstrlenA (lpString="\x92\x07") returned 2 [0119.244] lstrlenA (lpString="\x92\x07") returned 2 [0119.244] lstrlenA (lpString="\x92\x07") returned 2 [0119.244] lstrlenA (lpString="\x92\x07") returned 2 [0119.244] lstrlenA (lpString="\x92\x07") returned 2 [0119.244] lstrlenA (lpString="\x92\x07") returned 2 [0119.244] capGetDriverDescriptionA () returned 0x0 [0119.245] GetLastError () returned 0x0 [0119.245] SetLastError (dwErrCode=0x0) [0119.245] OpenThemeData () returned 0x4d50000 [0119.246] GetSystemMetrics (nIndex=32) returned 4 [0119.246] GetSystemMetrics (nIndex=33) returned 4 [0119.246] CloseThemeData () returned 0x0 [0119.246] lstrlenA (lpString="\x92\x07") returned 2 [0119.246] lstrlenA (lpString="\x92\x07") returned 2 [0119.246] lstrlenA (lpString="\x92\x07") returned 2 [0119.246] lstrlenA (lpString="\x92\x07") returned 2 [0119.246] lstrlenA (lpString="\x92\x07") returned 2 [0119.246] lstrlenA (lpString="\x92\x07") returned 2 [0119.246] capGetDriverDescriptionA () returned 0x0 [0119.247] GetLastError () returned 0x0 [0119.247] SetLastError (dwErrCode=0x0) [0119.247] OpenThemeData () returned 0x4d60000 [0119.247] GetSystemMetrics (nIndex=32) returned 4 [0119.247] GetSystemMetrics (nIndex=33) returned 4 [0119.247] CloseThemeData () returned 0x0 [0119.248] lstrlenA (lpString="\x92\x07") returned 2 [0119.248] lstrlenA (lpString="\x92\x07") returned 2 [0119.248] lstrlenA (lpString="\x92\x07") returned 2 [0119.248] lstrlenA (lpString="\x92\x07") returned 2 [0119.248] lstrlenA (lpString="\x92\x07") returned 2 [0119.248] lstrlenA (lpString="\x92\x07") returned 2 [0119.248] capGetDriverDescriptionA () returned 0x0 [0119.249] GetLastError () returned 0x0 [0119.249] SetLastError (dwErrCode=0x0) [0119.249] OpenThemeData () returned 0x4d70000 [0119.249] GetSystemMetrics (nIndex=32) returned 4 [0119.249] GetSystemMetrics (nIndex=33) returned 4 [0119.249] CloseThemeData () returned 0x0 [0119.250] lstrlenA (lpString="\x92\x07") returned 2 [0119.250] lstrlenA (lpString="\x92\x07") returned 2 [0119.250] lstrlenA (lpString="\x92\x07") returned 2 [0119.250] lstrlenA (lpString="\x92\x07") returned 2 [0119.250] lstrlenA (lpString="\x92\x07") returned 2 [0119.250] lstrlenA (lpString="\x92\x07") returned 2 [0119.250] capGetDriverDescriptionA () returned 0x0 [0119.251] GetLastError () returned 0x0 [0119.251] SetLastError (dwErrCode=0x0) [0119.251] OpenThemeData () returned 0x4d80000 [0119.251] GetSystemMetrics (nIndex=32) returned 4 [0119.251] GetSystemMetrics (nIndex=33) returned 4 [0119.251] CloseThemeData () returned 0x0 [0119.252] lstrlenA (lpString="\x92\x07") returned 2 [0119.252] lstrlenA (lpString="\x92\x07") returned 2 [0119.252] lstrlenA (lpString="\x92\x07") returned 2 [0119.252] lstrlenA (lpString="\x92\x07") returned 2 [0119.252] lstrlenA (lpString="\x92\x07") returned 2 [0119.252] lstrlenA (lpString="\x92\x07") returned 2 [0119.252] capGetDriverDescriptionA () returned 0x0 [0119.252] GetLastError () returned 0x0 [0119.252] SetLastError (dwErrCode=0x0) [0119.252] OpenThemeData () returned 0x4d90000 [0119.253] GetSystemMetrics (nIndex=32) returned 4 [0119.253] GetSystemMetrics (nIndex=33) returned 4 [0119.253] CloseThemeData () returned 0x0 [0119.254] lstrlenA (lpString="\x92\x07") returned 2 [0119.254] lstrlenA (lpString="\x92\x07") returned 2 [0119.254] lstrlenA (lpString="\x92\x07") returned 2 [0119.254] lstrlenA (lpString="\x92\x07") returned 2 [0119.254] lstrlenA (lpString="\x92\x07") returned 2 [0119.254] lstrlenA (lpString="\x92\x07") returned 2 [0119.254] capGetDriverDescriptionA () returned 0x0 [0119.254] GetLastError () returned 0x0 [0119.254] SetLastError (dwErrCode=0x0) [0119.255] OpenThemeData () returned 0x4da0000 [0119.255] GetSystemMetrics (nIndex=32) returned 4 [0119.255] GetSystemMetrics (nIndex=33) returned 4 [0119.255] CloseThemeData () returned 0x0 [0119.256] lstrlenA (lpString="\x92\x07") returned 2 [0119.256] lstrlenA (lpString="\x92\x07") returned 2 [0119.256] lstrlenA (lpString="\x92\x07") returned 2 [0119.256] lstrlenA (lpString="\x92\x07") returned 2 [0119.256] lstrlenA (lpString="\x92\x07") returned 2 [0119.256] lstrlenA (lpString="\x92\x07") returned 2 [0119.256] capGetDriverDescriptionA () returned 0x0 [0119.256] GetLastError () returned 0x0 [0119.256] SetLastError (dwErrCode=0x0) [0119.256] OpenThemeData () returned 0x4db0000 [0119.257] GetSystemMetrics (nIndex=32) returned 4 [0119.257] GetSystemMetrics (nIndex=33) returned 4 [0119.257] CloseThemeData () returned 0x0 [0119.257] lstrlenA (lpString="\x92\x07") returned 2 [0119.257] lstrlenA (lpString="\x92\x07") returned 2 [0119.257] lstrlenA (lpString="\x92\x07") returned 2 [0119.257] lstrlenA (lpString="\x92\x07") returned 2 [0119.257] lstrlenA (lpString="\x92\x07") returned 2 [0119.257] lstrlenA (lpString="\x92\x07") returned 2 [0119.258] capGetDriverDescriptionA () returned 0x0 [0119.258] GetLastError () returned 0x0 [0119.258] SetLastError (dwErrCode=0x0) [0119.258] OpenThemeData () returned 0x4dc0000 [0119.259] GetSystemMetrics (nIndex=32) returned 4 [0119.259] GetSystemMetrics (nIndex=33) returned 4 [0119.259] CloseThemeData () returned 0x0 [0119.259] lstrlenA (lpString="\x92\x07") returned 2 [0119.259] lstrlenA (lpString="\x92\x07") returned 2 [0119.259] lstrlenA (lpString="\x92\x07") returned 2 [0119.259] lstrlenA (lpString="\x92\x07") returned 2 [0119.259] lstrlenA (lpString="\x92\x07") returned 2 [0119.259] lstrlenA (lpString="\x92\x07") returned 2 [0119.259] capGetDriverDescriptionA () returned 0x0 [0119.260] GetLastError () returned 0x0 [0119.260] SetLastError (dwErrCode=0x0) [0119.260] OpenThemeData () returned 0x4dd0000 [0119.261] GetSystemMetrics (nIndex=32) returned 4 [0119.261] GetSystemMetrics (nIndex=33) returned 4 [0119.261] CloseThemeData () returned 0x0 [0119.261] lstrlenA (lpString="\x92\x07") returned 2 [0119.261] lstrlenA (lpString="\x92\x07") returned 2 [0119.261] lstrlenA (lpString="\x92\x07") returned 2 [0119.261] lstrlenA (lpString="\x92\x07") returned 2 [0119.261] lstrlenA (lpString="\x92\x07") returned 2 [0119.261] lstrlenA (lpString="\x92\x07") returned 2 [0119.261] capGetDriverDescriptionA () returned 0x0 [0119.262] GetLastError () returned 0x0 [0119.262] SetLastError (dwErrCode=0x0) [0119.262] OpenThemeData () returned 0x4de0000 [0119.263] GetSystemMetrics (nIndex=32) returned 4 [0119.263] GetSystemMetrics (nIndex=33) returned 4 [0119.263] CloseThemeData () returned 0x0 [0119.263] lstrlenA (lpString="\x92\x07") returned 2 [0119.263] lstrlenA (lpString="\x92\x07") returned 2 [0119.263] lstrlenA (lpString="\x92\x07") returned 2 [0119.263] lstrlenA (lpString="\x92\x07") returned 2 [0119.263] lstrlenA (lpString="\x92\x07") returned 2 [0119.263] lstrlenA (lpString="\x92\x07") returned 2 [0119.263] capGetDriverDescriptionA () returned 0x0 [0119.264] GetLastError () returned 0x0 [0119.264] SetLastError (dwErrCode=0x0) [0119.264] OpenThemeData () returned 0x4df0000 [0119.264] GetSystemMetrics (nIndex=32) returned 4 [0119.264] GetSystemMetrics (nIndex=33) returned 4 [0119.264] CloseThemeData () returned 0x0 [0119.265] lstrlenA (lpString="\x92\x07") returned 2 [0119.265] lstrlenA (lpString="\x92\x07") returned 2 [0119.265] lstrlenA (lpString="\x92\x07") returned 2 [0119.265] lstrlenA (lpString="\x92\x07") returned 2 [0119.265] lstrlenA (lpString="\x92\x07") returned 2 [0119.265] lstrlenA (lpString="\x92\x07") returned 2 [0119.265] capGetDriverDescriptionA () returned 0x0 [0119.266] GetLastError () returned 0x0 [0119.266] SetLastError (dwErrCode=0x0) [0119.266] OpenThemeData () returned 0x4e00000 [0119.266] GetSystemMetrics (nIndex=32) returned 4 [0119.266] GetSystemMetrics (nIndex=33) returned 4 [0119.266] CloseThemeData () returned 0x0 [0119.267] lstrlenA (lpString="\x92\x07") returned 2 [0119.267] lstrlenA (lpString="\x92\x07") returned 2 [0119.267] lstrlenA (lpString="\x92\x07") returned 2 [0119.267] lstrlenA (lpString="\x92\x07") returned 2 [0119.267] lstrlenA (lpString="\x92\x07") returned 2 [0119.267] lstrlenA (lpString="\x92\x07") returned 2 [0119.267] capGetDriverDescriptionA () returned 0x0 [0119.267] GetLastError () returned 0x0 [0119.268] SetLastError (dwErrCode=0x0) [0119.268] OpenThemeData () returned 0x4e10000 [0119.268] GetSystemMetrics (nIndex=32) returned 4 [0119.268] GetSystemMetrics (nIndex=33) returned 4 [0119.268] CloseThemeData () returned 0x0 [0119.269] lstrlenA (lpString="\x92\x07") returned 2 [0119.269] lstrlenA (lpString="\x92\x07") returned 2 [0119.269] lstrlenA (lpString="\x92\x07") returned 2 [0119.269] lstrlenA (lpString="\x92\x07") returned 2 [0119.269] lstrlenA (lpString="\x92\x07") returned 2 [0119.269] lstrlenA (lpString="\x92\x07") returned 2 [0119.269] capGetDriverDescriptionA () returned 0x0 [0119.269] GetLastError () returned 0x0 [0119.269] SetLastError (dwErrCode=0x0) [0119.269] OpenThemeData () returned 0x4e20000 [0119.270] GetSystemMetrics (nIndex=32) returned 4 [0119.270] GetSystemMetrics (nIndex=33) returned 4 [0119.270] CloseThemeData () returned 0x0 [0119.270] lstrlenA (lpString="\x92\x07") returned 2 [0119.270] lstrlenA (lpString="\x92\x07") returned 2 [0119.270] lstrlenA (lpString="\x92\x07") returned 2 [0119.270] lstrlenA (lpString="\x92\x07") returned 2 [0119.270] lstrlenA (lpString="\x92\x07") returned 2 [0119.270] lstrlenA (lpString="\x92\x07") returned 2 [0119.270] capGetDriverDescriptionA () returned 0x0 [0119.271] GetLastError () returned 0x0 [0119.271] SetLastError (dwErrCode=0x0) [0119.271] OpenThemeData () returned 0x4e30000 [0119.272] GetSystemMetrics (nIndex=32) returned 4 [0119.272] GetSystemMetrics (nIndex=33) returned 4 [0119.272] CloseThemeData () returned 0x0 [0119.272] lstrlenA (lpString="\x92\x07") returned 2 [0119.272] lstrlenA (lpString="\x92\x07") returned 2 [0119.272] lstrlenA (lpString="\x92\x07") returned 2 [0119.272] lstrlenA (lpString="\x92\x07") returned 2 [0119.272] lstrlenA (lpString="\x92\x07") returned 2 [0119.272] lstrlenA (lpString="\x92\x07") returned 2 [0119.272] capGetDriverDescriptionA () returned 0x0 [0119.273] GetLastError () returned 0x0 [0119.273] SetLastError (dwErrCode=0x0) [0119.273] OpenThemeData () returned 0x4e40000 [0119.274] GetSystemMetrics (nIndex=32) returned 4 [0119.274] GetSystemMetrics (nIndex=33) returned 4 [0119.274] CloseThemeData () returned 0x0 [0119.274] lstrlenA (lpString="\x92\x07") returned 2 [0119.274] lstrlenA (lpString="\x92\x07") returned 2 [0119.274] lstrlenA (lpString="\x92\x07") returned 2 [0119.274] lstrlenA (lpString="\x92\x07") returned 2 [0119.274] lstrlenA (lpString="\x92\x07") returned 2 [0119.274] lstrlenA (lpString="\x92\x07") returned 2 [0119.274] capGetDriverDescriptionA () returned 0x0 [0119.275] GetLastError () returned 0x0 [0119.275] SetLastError (dwErrCode=0x0) [0119.275] OpenThemeData () returned 0x4e50000 [0119.275] GetSystemMetrics (nIndex=32) returned 4 [0119.275] GetSystemMetrics (nIndex=33) returned 4 [0119.275] CloseThemeData () returned 0x0 [0119.276] lstrlenA (lpString="\x92\x07") returned 2 [0119.276] lstrlenA (lpString="\x92\x07") returned 2 [0119.276] lstrlenA (lpString="\x92\x07") returned 2 [0119.276] lstrlenA (lpString="\x92\x07") returned 2 [0119.276] lstrlenA (lpString="\x92\x07") returned 2 [0119.276] lstrlenA (lpString="\x92\x07") returned 2 [0119.276] capGetDriverDescriptionA () returned 0x0 [0119.277] GetLastError () returned 0x0 [0119.277] SetLastError (dwErrCode=0x0) [0119.277] OpenThemeData () returned 0x4e60000 [0119.597] GetSystemMetrics (nIndex=32) returned 4 [0119.597] GetSystemMetrics (nIndex=33) returned 4 [0119.597] CloseThemeData () returned 0x0 [0119.598] lstrlenA (lpString="\x92\x07") returned 2 [0119.598] lstrlenA (lpString="\x92\x07") returned 2 [0119.598] lstrlenA (lpString="\x92\x07") returned 2 [0119.598] lstrlenA (lpString="\x92\x07") returned 2 [0119.598] lstrlenA (lpString="\x92\x07") returned 2 [0119.598] lstrlenA (lpString="\x92\x07") returned 2 [0119.598] capGetDriverDescriptionA () returned 0x0 [0119.599] GetLastError () returned 0x0 [0119.599] SetLastError (dwErrCode=0x0) [0119.599] OpenThemeData () returned 0x4e70000 [0119.601] GetSystemMetrics (nIndex=32) returned 4 [0119.601] GetSystemMetrics (nIndex=33) returned 4 [0119.601] CloseThemeData () returned 0x0 [0119.601] lstrlenA (lpString="\x92\x07") returned 2 [0119.601] lstrlenA (lpString="\x92\x07") returned 2 [0119.601] lstrlenA (lpString="\x92\x07") returned 2 [0119.601] lstrlenA (lpString="\x92\x07") returned 2 [0119.601] lstrlenA (lpString="\x92\x07") returned 2 [0119.601] lstrlenA (lpString="\x92\x07") returned 2 [0119.601] capGetDriverDescriptionA () returned 0x0 [0119.602] GetLastError () returned 0x0 [0119.602] SetLastError (dwErrCode=0x0) [0119.602] OpenThemeData () returned 0x4e80000 [0119.602] GetSystemMetrics (nIndex=32) returned 4 [0119.602] GetSystemMetrics (nIndex=33) returned 4 [0119.602] CloseThemeData () returned 0x0 [0119.603] lstrlenA (lpString="\x92\x07") returned 2 [0119.603] lstrlenA (lpString="\x92\x07") returned 2 [0119.603] lstrlenA (lpString="\x92\x07") returned 2 [0119.603] lstrlenA (lpString="\x92\x07") returned 2 [0119.603] lstrlenA (lpString="\x92\x07") returned 2 [0119.603] lstrlenA (lpString="\x92\x07") returned 2 [0119.603] capGetDriverDescriptionA () returned 0x0 [0119.603] GetLastError () returned 0x0 [0119.603] SetLastError (dwErrCode=0x0) [0119.603] OpenThemeData () returned 0x4e90000 [0119.604] GetSystemMetrics (nIndex=32) returned 4 [0119.604] GetSystemMetrics (nIndex=33) returned 4 [0119.604] CloseThemeData () returned 0x0 [0119.604] lstrlenA (lpString="\x92\x07") returned 2 [0119.604] lstrlenA (lpString="\x92\x07") returned 2 [0119.604] lstrlenA (lpString="\x92\x07") returned 2 [0119.604] lstrlenA (lpString="\x92\x07") returned 2 [0119.604] lstrlenA (lpString="\x92\x07") returned 2 [0119.604] lstrlenA (lpString="\x92\x07") returned 2 [0119.605] capGetDriverDescriptionA () returned 0x0 [0119.605] GetLastError () returned 0x0 [0119.605] SetLastError (dwErrCode=0x0) [0119.605] OpenThemeData () returned 0x4ea0000 [0119.606] GetSystemMetrics (nIndex=32) returned 4 [0119.606] GetSystemMetrics (nIndex=33) returned 4 [0119.606] CloseThemeData () returned 0x0 [0119.606] lstrlenA (lpString="\x92\x07") returned 2 [0119.606] lstrlenA (lpString="\x92\x07") returned 2 [0119.606] lstrlenA (lpString="\x92\x07") returned 2 [0119.606] lstrlenA (lpString="\x92\x07") returned 2 [0119.606] lstrlenA (lpString="\x92\x07") returned 2 [0119.606] lstrlenA (lpString="\x92\x07") returned 2 [0119.606] capGetDriverDescriptionA () returned 0x0 [0119.607] GetLastError () returned 0x0 [0119.607] SetLastError (dwErrCode=0x0) [0119.607] OpenThemeData () returned 0x4eb0000 [0119.607] GetSystemMetrics (nIndex=32) returned 4 [0119.607] GetSystemMetrics (nIndex=33) returned 4 [0119.607] CloseThemeData () returned 0x0 [0119.608] lstrlenA (lpString="\x92\x07") returned 2 [0119.608] lstrlenA (lpString="\x92\x07") returned 2 [0119.608] lstrlenA (lpString="\x92\x07") returned 2 [0119.608] lstrlenA (lpString="\x92\x07") returned 2 [0119.608] lstrlenA (lpString="\x92\x07") returned 2 [0119.608] lstrlenA (lpString="\x92\x07") returned 2 [0119.608] capGetDriverDescriptionA () returned 0x0 [0119.609] GetLastError () returned 0x0 [0119.609] SetLastError (dwErrCode=0x0) [0119.609] OpenThemeData () returned 0x4ec0000 [0119.609] GetSystemMetrics (nIndex=32) returned 4 [0119.609] GetSystemMetrics (nIndex=33) returned 4 [0119.609] CloseThemeData () returned 0x0 [0119.609] lstrlenA (lpString="\x92\x07") returned 2 [0119.609] lstrlenA (lpString="\x92\x07") returned 2 [0119.609] lstrlenA (lpString="\x92\x07") returned 2 [0119.609] lstrlenA (lpString="\x92\x07") returned 2 [0119.610] lstrlenA (lpString="\x92\x07") returned 2 [0119.610] lstrlenA (lpString="\x92\x07") returned 2 [0119.610] capGetDriverDescriptionA () returned 0x0 [0119.610] GetLastError () returned 0x0 [0119.610] SetLastError (dwErrCode=0x0) [0119.610] OpenThemeData () returned 0x4ed0000 [0119.611] GetSystemMetrics (nIndex=32) returned 4 [0119.611] GetSystemMetrics (nIndex=33) returned 4 [0119.611] CloseThemeData () returned 0x0 [0119.611] lstrlenA (lpString="\x92\x07") returned 2 [0119.611] lstrlenA (lpString="\x92\x07") returned 2 [0119.611] lstrlenA (lpString="\x92\x07") returned 2 [0119.611] lstrlenA (lpString="\x92\x07") returned 2 [0119.611] lstrlenA (lpString="\x92\x07") returned 2 [0119.611] lstrlenA (lpString="\x92\x07") returned 2 [0119.611] capGetDriverDescriptionA () returned 0x0 [0119.612] GetLastError () returned 0x0 [0119.612] SetLastError (dwErrCode=0x0) [0119.612] OpenThemeData () returned 0x4ee0000 [0119.613] GetSystemMetrics (nIndex=32) returned 4 [0119.613] GetSystemMetrics (nIndex=33) returned 4 [0119.613] CloseThemeData () returned 0x0 [0119.613] lstrlenA (lpString="\x92\x07") returned 2 [0119.613] lstrlenA (lpString="\x92\x07") returned 2 [0119.613] lstrlenA (lpString="\x92\x07") returned 2 [0119.613] lstrlenA (lpString="\x92\x07") returned 2 [0119.613] lstrlenA (lpString="\x92\x07") returned 2 [0119.613] lstrlenA (lpString="\x92\x07") returned 2 [0119.613] capGetDriverDescriptionA () returned 0x0 [0119.614] GetLastError () returned 0x0 [0119.614] SetLastError (dwErrCode=0x0) [0119.614] OpenThemeData () returned 0x4ef0000 [0119.615] GetSystemMetrics (nIndex=32) returned 4 [0119.615] GetSystemMetrics (nIndex=33) returned 4 [0119.615] CloseThemeData () returned 0x0 [0119.615] lstrlenA (lpString="\x92\x07") returned 2 [0119.615] lstrlenA (lpString="\x92\x07") returned 2 [0119.615] lstrlenA (lpString="\x92\x07") returned 2 [0119.615] lstrlenA (lpString="\x92\x07") returned 2 [0119.615] lstrlenA (lpString="\x92\x07") returned 2 [0119.615] lstrlenA (lpString="\x92\x07") returned 2 [0119.615] capGetDriverDescriptionA () returned 0x0 [0119.616] GetLastError () returned 0x0 [0119.616] SetLastError (dwErrCode=0x0) [0119.616] OpenThemeData () returned 0x4f00000 [0119.616] GetSystemMetrics (nIndex=32) returned 4 [0119.616] GetSystemMetrics (nIndex=33) returned 4 [0119.616] CloseThemeData () returned 0x0 [0119.617] lstrlenA (lpString="\x92\x07") returned 2 [0119.617] lstrlenA (lpString="\x92\x07") returned 2 [0119.617] lstrlenA (lpString="\x92\x07") returned 2 [0119.617] lstrlenA (lpString="\x92\x07") returned 2 [0119.617] lstrlenA (lpString="\x92\x07") returned 2 [0119.617] lstrlenA (lpString="\x92\x07") returned 2 [0119.617] capGetDriverDescriptionA () returned 0x0 [0119.617] GetLastError () returned 0x0 [0119.617] SetLastError (dwErrCode=0x0) [0119.617] OpenThemeData () returned 0x4f10000 [0119.618] GetSystemMetrics (nIndex=32) returned 4 [0119.618] GetSystemMetrics (nIndex=33) returned 4 [0119.618] CloseThemeData () returned 0x0 [0119.618] lstrlenA (lpString="\x92\x07") returned 2 [0119.618] lstrlenA (lpString="\x92\x07") returned 2 [0119.618] lstrlenA (lpString="\x92\x07") returned 2 [0119.618] lstrlenA (lpString="\x92\x07") returned 2 [0119.618] lstrlenA (lpString="\x92\x07") returned 2 [0119.618] lstrlenA (lpString="\x92\x07") returned 2 [0119.618] capGetDriverDescriptionA () returned 0x0 [0119.619] GetLastError () returned 0x0 [0119.619] SetLastError (dwErrCode=0x0) [0119.619] OpenThemeData () returned 0x4f20000 [0119.620] GetSystemMetrics (nIndex=32) returned 4 [0119.620] GetSystemMetrics (nIndex=33) returned 4 [0119.620] CloseThemeData () returned 0x0 [0119.620] lstrlenA (lpString="\x92\x07") returned 2 [0119.620] lstrlenA (lpString="\x92\x07") returned 2 [0119.620] lstrlenA (lpString="\x92\x07") returned 2 [0119.620] lstrlenA (lpString="\x92\x07") returned 2 [0119.620] lstrlenA (lpString="\x92\x07") returned 2 [0119.620] lstrlenA (lpString="\x92\x07") returned 2 [0119.620] capGetDriverDescriptionA () returned 0x0 [0119.621] GetLastError () returned 0x0 [0119.621] SetLastError (dwErrCode=0x0) [0119.621] OpenThemeData () returned 0x4f30000 [0119.621] GetSystemMetrics (nIndex=32) returned 4 [0119.621] GetSystemMetrics (nIndex=33) returned 4 [0119.621] CloseThemeData () returned 0x0 [0119.622] lstrlenA (lpString="\x92\x07") returned 2 [0119.622] lstrlenA (lpString="\x92\x07") returned 2 [0119.622] lstrlenA (lpString="\x92\x07") returned 2 [0119.622] lstrlenA (lpString="\x92\x07") returned 2 [0119.622] lstrlenA (lpString="\x92\x07") returned 2 [0119.622] lstrlenA (lpString="\x92\x07") returned 2 [0119.622] capGetDriverDescriptionA () returned 0x0 [0119.622] GetLastError () returned 0x0 [0119.622] SetLastError (dwErrCode=0x0) [0119.623] OpenThemeData () returned 0x4f40000 [0119.623] GetSystemMetrics (nIndex=32) returned 4 [0119.623] GetSystemMetrics (nIndex=33) returned 4 [0119.623] CloseThemeData () returned 0x0 [0119.623] lstrlenA (lpString="\x92\x07") returned 2 [0119.623] lstrlenA (lpString="\x92\x07") returned 2 [0119.623] lstrlenA (lpString="\x92\x07") returned 2 [0119.623] lstrlenA (lpString="\x92\x07") returned 2 [0119.623] lstrlenA (lpString="\x92\x07") returned 2 [0119.623] lstrlenA (lpString="\x92\x07") returned 2 [0119.624] capGetDriverDescriptionA () returned 0x0 [0119.624] GetLastError () returned 0x0 [0119.624] SetLastError (dwErrCode=0x0) [0119.624] OpenThemeData () returned 0x4f50000 [0119.625] GetSystemMetrics (nIndex=32) returned 4 [0119.625] GetSystemMetrics (nIndex=33) returned 4 [0119.625] CloseThemeData () returned 0x0 [0119.625] lstrlenA (lpString="\x92\x07") returned 2 [0119.625] lstrlenA (lpString="\x92\x07") returned 2 [0119.625] lstrlenA (lpString="\x92\x07") returned 2 [0119.625] lstrlenA (lpString="\x92\x07") returned 2 [0119.625] lstrlenA (lpString="\x92\x07") returned 2 [0119.625] lstrlenA (lpString="\x92\x07") returned 2 [0119.625] capGetDriverDescriptionA () returned 0x0 [0119.626] GetLastError () returned 0x0 [0119.626] SetLastError (dwErrCode=0x0) [0119.626] OpenThemeData () returned 0x4f60000 [0119.626] GetSystemMetrics (nIndex=32) returned 4 [0119.626] GetSystemMetrics (nIndex=33) returned 4 [0119.626] CloseThemeData () returned 0x0 [0119.627] lstrlenA (lpString="\x92\x07") returned 2 [0119.627] lstrlenA (lpString="\x92\x07") returned 2 [0119.627] lstrlenA (lpString="\x92\x07") returned 2 [0119.627] lstrlenA (lpString="\x92\x07") returned 2 [0119.627] lstrlenA (lpString="\x92\x07") returned 2 [0119.627] lstrlenA (lpString="\x92\x07") returned 2 [0119.627] capGetDriverDescriptionA () returned 0x0 [0119.627] GetLastError () returned 0x0 [0119.628] SetLastError (dwErrCode=0x0) [0119.628] OpenThemeData () returned 0x4f70000 [0120.175] GetSystemMetrics (nIndex=32) returned 4 [0120.175] GetSystemMetrics (nIndex=33) returned 4 [0120.175] CloseThemeData () returned 0x0 [0120.176] lstrlenA (lpString="\x92\x07") returned 2 [0120.176] lstrlenA (lpString="\x92\x07") returned 2 [0120.176] lstrlenA (lpString="\x92\x07") returned 2 [0120.176] lstrlenA (lpString="\x92\x07") returned 2 [0120.176] lstrlenA (lpString="\x92\x07") returned 2 [0120.176] lstrlenA (lpString="\x92\x07") returned 2 [0120.178] capGetDriverDescriptionA () returned 0x0 [0120.179] GetLastError () returned 0x0 [0120.179] SetLastError (dwErrCode=0x0) [0120.179] OpenThemeData () returned 0x4f80000 [0120.180] GetSystemMetrics (nIndex=32) returned 4 [0120.180] GetSystemMetrics (nIndex=33) returned 4 [0120.180] CloseThemeData () returned 0x0 [0120.180] lstrlenA (lpString="\x92\x07") returned 2 [0120.180] lstrlenA (lpString="\x92\x07") returned 2 [0120.180] lstrlenA (lpString="\x92\x07") returned 2 [0120.180] lstrlenA (lpString="\x92\x07") returned 2 [0120.180] lstrlenA (lpString="\x92\x07") returned 2 [0120.180] lstrlenA (lpString="\x92\x07") returned 2 [0120.180] capGetDriverDescriptionA () returned 0x0 [0120.181] GetLastError () returned 0x0 [0120.181] SetLastError (dwErrCode=0x0) [0120.181] OpenThemeData () returned 0x4f90000 [0120.181] GetSystemMetrics (nIndex=32) returned 4 [0120.181] GetSystemMetrics (nIndex=33) returned 4 [0120.181] CloseThemeData () returned 0x0 [0120.182] lstrlenA (lpString="\x92\x07") returned 2 [0120.182] lstrlenA (lpString="\x92\x07") returned 2 [0120.182] lstrlenA (lpString="\x92\x07") returned 2 [0120.182] lstrlenA (lpString="\x92\x07") returned 2 [0120.182] lstrlenA (lpString="\x92\x07") returned 2 [0120.182] lstrlenA (lpString="\x92\x07") returned 2 [0120.182] capGetDriverDescriptionA () returned 0x0 [0120.182] GetLastError () returned 0x0 [0120.182] SetLastError (dwErrCode=0x0) [0120.182] OpenThemeData () returned 0x4fa0000 [0120.183] GetSystemMetrics (nIndex=32) returned 4 [0120.183] GetSystemMetrics (nIndex=33) returned 4 [0120.183] CloseThemeData () returned 0x0 [0120.183] lstrlenA (lpString="\x92\x07") returned 2 [0120.183] lstrlenA (lpString="\x92\x07") returned 2 [0120.184] lstrlenA (lpString="\x92\x07") returned 2 [0120.184] lstrlenA (lpString="\x92\x07") returned 2 [0120.184] lstrlenA (lpString="\x92\x07") returned 2 [0120.184] lstrlenA (lpString="\x92\x07") returned 2 [0120.184] capGetDriverDescriptionA () returned 0x0 [0120.184] GetLastError () returned 0x0 [0120.184] SetLastError (dwErrCode=0x0) [0120.184] OpenThemeData () returned 0x4fb0000 [0120.185] GetSystemMetrics (nIndex=32) returned 4 [0120.185] GetSystemMetrics (nIndex=33) returned 4 [0120.185] CloseThemeData () returned 0x0 [0120.185] lstrlenA (lpString="\x92\x07") returned 2 [0120.185] lstrlenA (lpString="\x92\x07") returned 2 [0120.185] lstrlenA (lpString="\x92\x07") returned 2 [0120.185] lstrlenA (lpString="\x92\x07") returned 2 [0120.185] lstrlenA (lpString="\x92\x07") returned 2 [0120.185] lstrlenA (lpString="\x92\x07") returned 2 [0120.185] capGetDriverDescriptionA () returned 0x0 [0120.186] GetLastError () returned 0x0 [0120.186] SetLastError (dwErrCode=0x0) [0120.186] OpenThemeData () returned 0x4fc0000 [0120.187] GetSystemMetrics (nIndex=32) returned 4 [0120.187] GetSystemMetrics (nIndex=33) returned 4 [0120.187] CloseThemeData () returned 0x0 [0120.187] lstrlenA (lpString="\x92\x07") returned 2 [0120.187] lstrlenA (lpString="\x92\x07") returned 2 [0120.187] lstrlenA (lpString="\x92\x07") returned 2 [0120.187] lstrlenA (lpString="\x92\x07") returned 2 [0120.187] lstrlenA (lpString="\x92\x07") returned 2 [0120.187] lstrlenA (lpString="\x92\x07") returned 2 [0120.187] capGetDriverDescriptionA () returned 0x0 [0120.188] GetLastError () returned 0x0 [0120.188] SetLastError (dwErrCode=0x0) [0120.188] OpenThemeData () returned 0x4fd0000 [0120.188] GetSystemMetrics (nIndex=32) returned 4 [0120.188] GetSystemMetrics (nIndex=33) returned 4 [0120.188] CloseThemeData () returned 0x0 [0120.189] lstrlenA (lpString="\x92\x07") returned 2 [0120.189] lstrlenA (lpString="\x92\x07") returned 2 [0120.189] lstrlenA (lpString="\x92\x07") returned 2 [0120.189] lstrlenA (lpString="\x92\x07") returned 2 [0120.189] lstrlenA (lpString="\x92\x07") returned 2 [0120.189] lstrlenA (lpString="\x92\x07") returned 2 [0120.189] capGetDriverDescriptionA () returned 0x0 [0120.190] GetLastError () returned 0x0 [0120.190] SetLastError (dwErrCode=0x0) [0120.190] OpenThemeData () returned 0x4fe0000 [0120.190] GetSystemMetrics (nIndex=32) returned 4 [0120.190] GetSystemMetrics (nIndex=33) returned 4 [0120.190] CloseThemeData () returned 0x0 [0120.191] lstrlenA (lpString="\x92\x07") returned 2 [0120.191] lstrlenA (lpString="\x92\x07") returned 2 [0120.191] lstrlenA (lpString="\x92\x07") returned 2 [0120.191] lstrlenA (lpString="\x92\x07") returned 2 [0120.191] lstrlenA (lpString="\x92\x07") returned 2 [0120.191] lstrlenA (lpString="\x92\x07") returned 2 [0120.191] capGetDriverDescriptionA () returned 0x0 [0120.191] GetLastError () returned 0x0 [0120.191] SetLastError (dwErrCode=0x0) [0120.191] OpenThemeData () returned 0x4ff0000 [0120.194] GetSystemMetrics (nIndex=32) returned 4 [0120.194] GetSystemMetrics (nIndex=33) returned 4 [0120.194] CloseThemeData () returned 0x0 [0120.194] lstrlenA (lpString="\x92\x07") returned 2 [0120.194] lstrlenA (lpString="\x92\x07") returned 2 [0120.194] lstrlenA (lpString="\x92\x07") returned 2 [0120.195] lstrlenA (lpString="\x92\x07") returned 2 [0120.195] lstrlenA (lpString="\x92\x07") returned 2 [0120.195] lstrlenA (lpString="\x92\x07") returned 2 [0120.195] capGetDriverDescriptionA () returned 0x0 [0120.195] GetLastError () returned 0x0 [0120.195] SetLastError (dwErrCode=0x0) [0120.195] OpenThemeData () returned 0x5000000 [0120.196] GetSystemMetrics (nIndex=32) returned 4 [0120.196] GetSystemMetrics (nIndex=33) returned 4 [0120.196] CloseThemeData () returned 0x0 [0120.196] lstrlenA (lpString="\x92\x07") returned 2 [0120.196] lstrlenA (lpString="\x92\x07") returned 2 [0120.196] lstrlenA (lpString="\x92\x07") returned 2 [0120.196] lstrlenA (lpString="\x92\x07") returned 2 [0120.196] lstrlenA (lpString="\x92\x07") returned 2 [0120.196] lstrlenA (lpString="\x92\x07") returned 2 [0120.196] capGetDriverDescriptionA () returned 0x0 [0120.197] GetLastError () returned 0x0 [0120.197] SetLastError (dwErrCode=0x0) [0120.197] OpenThemeData () returned 0x5010000 [0120.198] GetSystemMetrics (nIndex=32) returned 4 [0120.198] GetSystemMetrics (nIndex=33) returned 4 [0120.198] CloseThemeData () returned 0x0 [0120.198] lstrlenA (lpString="\x92\x07") returned 2 [0120.198] lstrlenA (lpString="\x92\x07") returned 2 [0120.198] lstrlenA (lpString="\x92\x07") returned 2 [0120.198] lstrlenA (lpString="\x92\x07") returned 2 [0120.198] lstrlenA (lpString="\x92\x07") returned 2 [0120.198] lstrlenA (lpString="\x92\x07") returned 2 [0120.198] capGetDriverDescriptionA () returned 0x0 [0120.199] GetLastError () returned 0x0 [0120.199] SetLastError (dwErrCode=0x0) [0120.199] OpenThemeData () returned 0x5020000 [0120.199] GetSystemMetrics (nIndex=32) returned 4 [0120.199] GetSystemMetrics (nIndex=33) returned 4 [0120.199] CloseThemeData () returned 0x0 [0120.200] lstrlenA (lpString="\x92\x07") returned 2 [0120.200] lstrlenA (lpString="\x92\x07") returned 2 [0120.200] lstrlenA (lpString="\x92\x07") returned 2 [0120.200] lstrlenA (lpString="\x92\x07") returned 2 [0120.200] lstrlenA (lpString="\x92\x07") returned 2 [0120.200] lstrlenA (lpString="\x92\x07") returned 2 [0120.200] capGetDriverDescriptionA () returned 0x0 [0120.200] GetLastError () returned 0x0 [0120.201] SetLastError (dwErrCode=0x0) [0120.201] OpenThemeData () returned 0x5030000 [0120.201] GetSystemMetrics (nIndex=32) returned 4 [0120.201] GetSystemMetrics (nIndex=33) returned 4 [0120.201] CloseThemeData () returned 0x0 [0120.202] lstrlenA (lpString="\x92\x07") returned 2 [0120.202] lstrlenA (lpString="\x92\x07") returned 2 [0120.202] lstrlenA (lpString="\x92\x07") returned 2 [0120.202] lstrlenA (lpString="\x92\x07") returned 2 [0120.202] lstrlenA (lpString="\x92\x07") returned 2 [0120.202] lstrlenA (lpString="\x92\x07") returned 2 [0120.202] capGetDriverDescriptionA () returned 0x0 [0120.202] GetLastError () returned 0x0 [0120.202] SetLastError (dwErrCode=0x0) [0120.202] OpenThemeData () returned 0x5040000 [0120.203] GetSystemMetrics (nIndex=32) returned 4 [0120.203] GetSystemMetrics (nIndex=33) returned 4 [0120.203] CloseThemeData () returned 0x0 [0120.203] lstrlenA (lpString="\x92\x07") returned 2 [0120.203] lstrlenA (lpString="\x92\x07") returned 2 [0120.203] lstrlenA (lpString="\x92\x07") returned 2 [0120.203] lstrlenA (lpString="\x92\x07") returned 2 [0120.203] lstrlenA (lpString="\x92\x07") returned 2 [0120.203] lstrlenA (lpString="\x92\x07") returned 2 [0120.203] capGetDriverDescriptionA () returned 0x0 [0120.204] GetLastError () returned 0x0 [0120.204] SetLastError (dwErrCode=0x0) [0120.204] OpenThemeData () returned 0x5050000 [0120.205] GetSystemMetrics (nIndex=32) returned 4 [0120.205] GetSystemMetrics (nIndex=33) returned 4 [0120.205] CloseThemeData () returned 0x0 [0120.205] lstrlenA (lpString="\x92\x07") returned 2 [0120.205] lstrlenA (lpString="\x92\x07") returned 2 [0120.205] lstrlenA (lpString="\x92\x07") returned 2 [0120.205] lstrlenA (lpString="\x92\x07") returned 2 [0120.205] lstrlenA (lpString="\x92\x07") returned 2 [0120.205] lstrlenA (lpString="\x92\x07") returned 2 [0120.205] capGetDriverDescriptionA () returned 0x0 [0120.206] GetLastError () returned 0x0 [0120.206] SetLastError (dwErrCode=0x0) [0120.206] OpenThemeData () returned 0x5060000 [0120.207] GetSystemMetrics (nIndex=32) returned 4 [0120.207] GetSystemMetrics (nIndex=33) returned 4 [0120.207] CloseThemeData () returned 0x0 [0120.457] lstrlenA (lpString="\x92\x07") returned 2 [0120.457] lstrlenA (lpString="\x92\x07") returned 2 [0120.457] lstrlenA (lpString="\x92\x07") returned 2 [0120.457] lstrlenA (lpString="\x92\x07") returned 2 [0120.457] lstrlenA (lpString="\x92\x07") returned 2 [0120.457] lstrlenA (lpString="\x92\x07") returned 2 [0120.457] capGetDriverDescriptionA () returned 0x0 [0120.458] GetLastError () returned 0x0 [0120.458] SetLastError (dwErrCode=0x0) [0120.458] OpenThemeData () returned 0x5070000 [0120.459] GetSystemMetrics (nIndex=32) returned 4 [0120.459] GetSystemMetrics (nIndex=33) returned 4 [0120.459] CloseThemeData () returned 0x0 [0120.460] lstrlenA (lpString="\x92\x07") returned 2 [0120.460] lstrlenA (lpString="\x92\x07") returned 2 [0120.460] lstrlenA (lpString="\x92\x07") returned 2 [0120.460] lstrlenA (lpString="\x92\x07") returned 2 [0120.460] lstrlenA (lpString="\x92\x07") returned 2 [0120.460] lstrlenA (lpString="\x92\x07") returned 2 [0120.460] capGetDriverDescriptionA () returned 0x0 [0120.460] GetLastError () returned 0x0 [0120.460] SetLastError (dwErrCode=0x0) [0120.461] OpenThemeData () returned 0x5080000 [0120.461] GetSystemMetrics (nIndex=32) returned 4 [0120.461] GetSystemMetrics (nIndex=33) returned 4 [0120.461] CloseThemeData () returned 0x0 [0120.461] lstrlenA (lpString="\x92\x07") returned 2 [0120.461] lstrlenA (lpString="\x92\x07") returned 2 [0120.462] lstrlenA (lpString="\x92\x07") returned 2 [0120.462] lstrlenA (lpString="\x92\x07") returned 2 [0120.462] lstrlenA (lpString="\x92\x07") returned 2 [0120.462] lstrlenA (lpString="\x92\x07") returned 2 [0120.462] capGetDriverDescriptionA () returned 0x0 [0120.462] GetLastError () returned 0x0 [0120.462] SetLastError (dwErrCode=0x0) [0120.462] OpenThemeData () returned 0x5090000 [0120.463] GetSystemMetrics (nIndex=32) returned 4 [0120.463] GetSystemMetrics (nIndex=33) returned 4 [0120.463] CloseThemeData () returned 0x0 [0120.463] lstrlenA (lpString="\x92\x07") returned 2 [0120.463] lstrlenA (lpString="\x92\x07") returned 2 [0120.463] lstrlenA (lpString="\x92\x07") returned 2 [0120.463] lstrlenA (lpString="\x92\x07") returned 2 [0120.463] lstrlenA (lpString="\x92\x07") returned 2 [0120.463] lstrlenA (lpString="\x92\x07") returned 2 [0120.464] capGetDriverDescriptionA () returned 0x0 [0120.464] GetLastError () returned 0x0 [0120.464] SetLastError (dwErrCode=0x0) [0120.464] OpenThemeData () returned 0x50a0000 [0120.465] GetSystemMetrics (nIndex=32) returned 4 [0120.465] GetSystemMetrics (nIndex=33) returned 4 [0120.465] CloseThemeData () returned 0x0 [0120.465] lstrlenA (lpString="\x92\x07") returned 2 [0120.465] lstrlenA (lpString="\x92\x07") returned 2 [0120.465] lstrlenA (lpString="\x92\x07") returned 2 [0120.465] lstrlenA (lpString="\x92\x07") returned 2 [0120.465] lstrlenA (lpString="\x92\x07") returned 2 [0120.465] lstrlenA (lpString="\x92\x07") returned 2 [0120.465] capGetDriverDescriptionA () returned 0x0 [0120.466] GetLastError () returned 0x0 [0120.466] SetLastError (dwErrCode=0x0) [0120.466] OpenThemeData () returned 0x50b0000 [0120.466] GetSystemMetrics (nIndex=32) returned 4 [0120.466] GetSystemMetrics (nIndex=33) returned 4 [0120.466] CloseThemeData () returned 0x0 [0120.467] lstrlenA (lpString="\x92\x07") returned 2 [0120.467] lstrlenA (lpString="\x92\x07") returned 2 [0120.467] lstrlenA (lpString="\x92\x07") returned 2 [0120.467] lstrlenA (lpString="\x92\x07") returned 2 [0120.467] lstrlenA (lpString="\x92\x07") returned 2 [0120.467] lstrlenA (lpString="\x92\x07") returned 2 [0120.467] capGetDriverDescriptionA () returned 0x0 [0120.468] GetLastError () returned 0x0 [0120.468] SetLastError (dwErrCode=0x0) [0120.468] OpenThemeData () returned 0x50c0000 [0120.469] GetSystemMetrics (nIndex=32) returned 4 [0120.469] GetSystemMetrics (nIndex=33) returned 4 [0120.469] CloseThemeData () returned 0x0 [0120.470] lstrlenA (lpString="\x92\x07") returned 2 [0120.470] lstrlenA (lpString="\x92\x07") returned 2 [0120.470] lstrlenA (lpString="\x92\x07") returned 2 [0120.470] lstrlenA (lpString="\x92\x07") returned 2 [0120.470] lstrlenA (lpString="\x92\x07") returned 2 [0120.470] lstrlenA (lpString="\x92\x07") returned 2 [0120.470] capGetDriverDescriptionA () returned 0x0 [0120.470] GetLastError () returned 0x0 [0120.471] SetLastError (dwErrCode=0x0) [0120.471] OpenThemeData () returned 0x50d0000 [0120.471] GetSystemMetrics (nIndex=32) returned 4 [0120.471] GetSystemMetrics (nIndex=33) returned 4 [0120.471] CloseThemeData () returned 0x0 [0120.472] lstrlenA (lpString="\x92\x07") returned 2 [0120.472] lstrlenA (lpString="\x92\x07") returned 2 [0120.472] lstrlenA (lpString="\x92\x07") returned 2 [0120.472] lstrlenA (lpString="\x92\x07") returned 2 [0120.472] lstrlenA (lpString="\x92\x07") returned 2 [0120.472] lstrlenA (lpString="\x92\x07") returned 2 [0120.472] capGetDriverDescriptionA () returned 0x0 [0120.472] GetLastError () returned 0x0 [0120.472] SetLastError (dwErrCode=0x0) [0120.472] OpenThemeData () returned 0x50e0000 [0120.473] GetSystemMetrics (nIndex=32) returned 4 [0120.473] GetSystemMetrics (nIndex=33) returned 4 [0120.473] CloseThemeData () returned 0x0 [0120.473] lstrlenA (lpString="\x92\x07") returned 2 [0120.473] lstrlenA (lpString="\x92\x07") returned 2 [0120.473] lstrlenA (lpString="\x92\x07") returned 2 [0120.473] lstrlenA (lpString="\x92\x07") returned 2 [0120.473] lstrlenA (lpString="\x92\x07") returned 2 [0120.473] lstrlenA (lpString="\x92\x07") returned 2 [0120.473] capGetDriverDescriptionA () returned 0x0 [0120.474] GetLastError () returned 0x0 [0120.474] SetLastError (dwErrCode=0x0) [0120.474] OpenThemeData () returned 0x50f0000 [0120.475] GetSystemMetrics (nIndex=32) returned 4 [0120.475] GetSystemMetrics (nIndex=33) returned 4 [0120.475] CloseThemeData () returned 0x0 [0120.475] lstrlenA (lpString="\x92\x07") returned 2 [0120.475] lstrlenA (lpString="\x92\x07") returned 2 [0120.475] lstrlenA (lpString="\x92\x07") returned 2 [0120.475] lstrlenA (lpString="\x92\x07") returned 2 [0120.475] lstrlenA (lpString="\x92\x07") returned 2 [0120.475] lstrlenA (lpString="\x92\x07") returned 2 [0120.475] capGetDriverDescriptionA () returned 0x0 [0120.476] GetLastError () returned 0x0 [0120.476] SetLastError (dwErrCode=0x0) [0120.476] OpenThemeData () returned 0x5100000 [0120.476] GetSystemMetrics (nIndex=32) returned 4 [0120.477] GetSystemMetrics (nIndex=33) returned 4 [0120.477] CloseThemeData () returned 0x0 [0120.477] lstrlenA (lpString="\x92\x07") returned 2 [0120.477] lstrlenA (lpString="\x92\x07") returned 2 [0120.477] lstrlenA (lpString="\x92\x07") returned 2 [0120.477] lstrlenA (lpString="\x92\x07") returned 2 [0120.477] lstrlenA (lpString="\x92\x07") returned 2 [0120.477] lstrlenA (lpString="\x92\x07") returned 2 [0120.477] capGetDriverDescriptionA () returned 0x0 [0120.478] GetLastError () returned 0x0 [0120.478] SetLastError (dwErrCode=0x0) [0120.478] OpenThemeData () returned 0x5110000 [0120.478] GetSystemMetrics (nIndex=32) returned 4 [0120.478] GetSystemMetrics (nIndex=33) returned 4 [0120.478] CloseThemeData () returned 0x0 [0120.479] lstrlenA (lpString="\x92\x07") returned 2 [0120.479] lstrlenA (lpString="\x92\x07") returned 2 [0120.479] lstrlenA (lpString="\x92\x07") returned 2 [0120.479] lstrlenA (lpString="\x92\x07") returned 2 [0120.479] lstrlenA (lpString="\x92\x07") returned 2 [0120.479] lstrlenA (lpString="\x92\x07") returned 2 [0120.479] capGetDriverDescriptionA () returned 0x0 [0120.479] GetLastError () returned 0x0 [0120.479] SetLastError (dwErrCode=0x0) [0120.479] OpenThemeData () returned 0x5120000 [0120.480] GetSystemMetrics (nIndex=32) returned 4 [0120.480] GetSystemMetrics (nIndex=33) returned 4 [0120.480] CloseThemeData () returned 0x0 [0120.480] lstrlenA (lpString="\x92\x07") returned 2 [0120.480] lstrlenA (lpString="\x92\x07") returned 2 [0120.480] lstrlenA (lpString="\x92\x07") returned 2 [0120.480] lstrlenA (lpString="\x92\x07") returned 2 [0120.480] lstrlenA (lpString="\x92\x07") returned 2 [0120.481] lstrlenA (lpString="\x92\x07") returned 2 [0120.481] capGetDriverDescriptionA () returned 0x0 [0120.481] GetLastError () returned 0x0 [0120.481] SetLastError (dwErrCode=0x0) [0120.481] OpenThemeData () returned 0x5130000 [0120.482] GetSystemMetrics (nIndex=32) returned 4 [0120.482] GetSystemMetrics (nIndex=33) returned 4 [0120.482] CloseThemeData () returned 0x0 [0120.482] lstrlenA (lpString="\x92\x07") returned 2 [0120.482] lstrlenA (lpString="\x92\x07") returned 2 [0120.482] lstrlenA (lpString="\x92\x07") returned 2 [0120.482] lstrlenA (lpString="\x92\x07") returned 2 [0120.482] lstrlenA (lpString="\x92\x07") returned 2 [0120.482] lstrlenA (lpString="\x92\x07") returned 2 [0120.482] capGetDriverDescriptionA () returned 0x0 [0120.483] GetLastError () returned 0x0 [0120.483] SetLastError (dwErrCode=0x0) [0120.483] OpenThemeData () returned 0x5140000 [0120.483] GetSystemMetrics (nIndex=32) returned 4 [0120.483] GetSystemMetrics (nIndex=33) returned 4 [0120.483] CloseThemeData () returned 0x0 [0120.484] lstrlenA (lpString="\x92\x07") returned 2 [0120.484] lstrlenA (lpString="\x92\x07") returned 2 [0120.484] lstrlenA (lpString="\x92\x07") returned 2 [0120.484] lstrlenA (lpString="\x92\x07") returned 2 [0120.484] lstrlenA (lpString="\x92\x07") returned 2 [0120.484] lstrlenA (lpString="\x92\x07") returned 2 [0120.484] capGetDriverDescriptionA () returned 0x0 [0120.485] GetLastError () returned 0x0 [0120.485] SetLastError (dwErrCode=0x0) [0120.485] OpenThemeData () returned 0x5150000 [0120.485] GetSystemMetrics (nIndex=32) returned 4 [0120.485] GetSystemMetrics (nIndex=33) returned 4 [0120.485] CloseThemeData () returned 0x0 [0120.486] lstrlenA (lpString="\x92\x07") returned 2 [0120.486] lstrlenA (lpString="\x92\x07") returned 2 [0120.486] lstrlenA (lpString="\x92\x07") returned 2 [0120.486] lstrlenA (lpString="\x92\x07") returned 2 [0120.486] lstrlenA (lpString="\x92\x07") returned 2 [0120.486] lstrlenA (lpString="\x92\x07") returned 2 [0120.486] capGetDriverDescriptionA () returned 0x0 [0120.486] GetLastError () returned 0x0 [0120.486] SetLastError (dwErrCode=0x0) [0120.486] OpenThemeData () returned 0x5160000 [0120.488] GetSystemMetrics (nIndex=32) returned 4 [0120.488] GetSystemMetrics (nIndex=33) returned 4 [0120.488] CloseThemeData () returned 0x0 [0120.488] lstrlenA (lpString="\x92\x07") returned 2 [0120.488] lstrlenA (lpString="\x92\x07") returned 2 [0120.488] lstrlenA (lpString="\x92\x07") returned 2 [0120.488] lstrlenA (lpString="\x92\x07") returned 2 [0120.488] lstrlenA (lpString="\x92\x07") returned 2 [0120.488] lstrlenA (lpString="\x92\x07") returned 2 [0120.488] capGetDriverDescriptionA () returned 0x0 [0120.489] GetLastError () returned 0x0 [0120.489] SetLastError (dwErrCode=0x0) [0120.489] OpenThemeData () returned 0x5170000 [0120.489] GetSystemMetrics (nIndex=32) returned 4 [0120.490] GetSystemMetrics (nIndex=33) returned 4 [0120.490] CloseThemeData () returned 0x0 [0120.490] lstrlenA (lpString="\x92\x07") returned 2 [0120.490] lstrlenA (lpString="\x92\x07") returned 2 [0120.490] lstrlenA (lpString="\x92\x07") returned 2 [0120.490] capGetDriverDescriptionA () returned 0x0 [0120.490] GetLastError () returned 0x0 [0120.491] SetLastError (dwErrCode=0x0) [0120.491] OpenThemeData () returned 0x5180000 [0120.491] GetSystemMetrics (nIndex=32) returned 4 [0120.491] GetSystemMetrics (nIndex=33) returned 4 [0120.491] CloseThemeData () returned 0x0 [0120.972] capGetDriverDescriptionA () returned 0x0 [0120.972] GetLastError () returned 0x0 [0120.973] SetLastError (dwErrCode=0x0) [0120.973] OpenThemeData () returned 0x5190000 [0120.973] GetSystemMetrics (nIndex=32) returned 4 [0120.973] GetSystemMetrics (nIndex=33) returned 4 [0120.973] CloseThemeData () returned 0x0 [0120.974] capGetDriverDescriptionA () returned 0x0 [0120.974] GetLastError () returned 0x0 [0120.975] SetLastError (dwErrCode=0x0) [0120.975] OpenThemeData () returned 0x51a0000 [0120.975] GetSystemMetrics (nIndex=32) returned 4 [0120.975] GetSystemMetrics (nIndex=33) returned 4 [0120.975] CloseThemeData () returned 0x0 [0120.976] capGetDriverDescriptionA () returned 0x0 [0120.976] GetLastError () returned 0x0 [0120.976] SetLastError (dwErrCode=0x0) [0120.976] OpenThemeData () returned 0x51b0000 [0120.977] GetSystemMetrics (nIndex=32) returned 4 [0120.977] GetSystemMetrics (nIndex=33) returned 4 [0120.977] CloseThemeData () returned 0x0 [0120.977] capGetDriverDescriptionA () returned 0x0 [0120.978] GetLastError () returned 0x0 [0120.978] SetLastError (dwErrCode=0x0) [0120.978] OpenThemeData () returned 0x51c0000 [0120.979] GetSystemMetrics (nIndex=32) returned 4 [0120.979] GetSystemMetrics (nIndex=33) returned 4 [0120.979] CloseThemeData () returned 0x0 [0120.979] capGetDriverDescriptionA () returned 0x0 [0120.980] GetLastError () returned 0x0 [0120.980] SetLastError (dwErrCode=0x0) [0120.980] OpenThemeData () returned 0x51d0000 [0120.981] GetSystemMetrics (nIndex=32) returned 4 [0120.981] GetSystemMetrics (nIndex=33) returned 4 [0120.981] CloseThemeData () returned 0x0 [0120.981] capGetDriverDescriptionA () returned 0x0 [0120.982] GetLastError () returned 0x0 [0120.982] SetLastError (dwErrCode=0x0) [0120.982] OpenThemeData () returned 0x51e0000 [0120.983] GetSystemMetrics (nIndex=32) returned 4 [0120.983] GetSystemMetrics (nIndex=33) returned 4 [0120.983] CloseThemeData () returned 0x0 [0120.983] capGetDriverDescriptionA () returned 0x0 [0120.984] GetLastError () returned 0x0 [0120.984] SetLastError (dwErrCode=0x0) [0120.984] OpenThemeData () returned 0x51f0000 [0120.985] GetSystemMetrics (nIndex=32) returned 4 [0120.985] GetSystemMetrics (nIndex=33) returned 4 [0120.985] CloseThemeData () returned 0x0 [0120.985] capGetDriverDescriptionA () returned 0x0 [0120.986] GetLastError () returned 0x0 [0120.986] SetLastError (dwErrCode=0x0) [0120.986] OpenThemeData () returned 0x5200000 [0120.986] GetSystemMetrics (nIndex=32) returned 4 [0120.986] GetSystemMetrics (nIndex=33) returned 4 [0120.986] CloseThemeData () returned 0x0 [0120.987] capGetDriverDescriptionA () returned 0x0 [0120.988] GetLastError () returned 0x0 [0120.988] SetLastError (dwErrCode=0x0) [0120.988] OpenThemeData () returned 0x5210000 [0120.988] GetSystemMetrics (nIndex=32) returned 4 [0120.988] GetSystemMetrics (nIndex=33) returned 4 [0120.988] CloseThemeData () returned 0x0 [0120.989] capGetDriverDescriptionA () returned 0x0 [0120.989] GetLastError () returned 0x0 [0120.989] SetLastError (dwErrCode=0x0) [0120.989] OpenThemeData () returned 0x5220000 [0120.990] GetSystemMetrics (nIndex=32) returned 4 [0120.990] GetSystemMetrics (nIndex=33) returned 4 [0120.990] CloseThemeData () returned 0x0 [0120.990] capGetDriverDescriptionA () returned 0x0 [0120.991] GetLastError () returned 0x0 [0120.991] SetLastError (dwErrCode=0x0) [0120.991] OpenThemeData () returned 0x5230000 [0120.992] GetSystemMetrics (nIndex=32) returned 4 [0120.992] GetSystemMetrics (nIndex=33) returned 4 [0120.992] CloseThemeData () returned 0x0 [0120.992] capGetDriverDescriptionA () returned 0x0 [0120.993] GetLastError () returned 0x0 [0120.993] SetLastError (dwErrCode=0x0) [0120.993] OpenThemeData () returned 0x5240000 [0120.993] GetSystemMetrics (nIndex=32) returned 4 [0120.993] GetSystemMetrics (nIndex=33) returned 4 [0120.993] CloseThemeData () returned 0x0 [0120.994] capGetDriverDescriptionA () returned 0x0 [0120.995] GetLastError () returned 0x0 [0120.995] SetLastError (dwErrCode=0x0) [0120.995] OpenThemeData () returned 0x5250000 [0120.995] GetSystemMetrics (nIndex=32) returned 4 [0120.995] GetSystemMetrics (nIndex=33) returned 4 [0120.995] CloseThemeData () returned 0x0 [0120.996] capGetDriverDescriptionA () returned 0x0 [0120.996] GetLastError () returned 0x0 [0120.996] SetLastError (dwErrCode=0x0) [0120.996] OpenThemeData () returned 0x5260000 [0120.997] GetSystemMetrics (nIndex=32) returned 4 [0120.997] GetSystemMetrics (nIndex=33) returned 4 [0120.997] CloseThemeData () returned 0x0 [0120.997] capGetDriverDescriptionA () returned 0x0 [0120.998] GetLastError () returned 0x0 [0120.998] SetLastError (dwErrCode=0x0) [0120.998] OpenThemeData () returned 0x5270000 [0120.999] GetSystemMetrics (nIndex=32) returned 4 [0120.999] GetSystemMetrics (nIndex=33) returned 4 [0120.999] CloseThemeData () returned 0x0 [0120.999] capGetDriverDescriptionA () returned 0x0 [0121.000] GetLastError () returned 0x0 [0121.000] SetLastError (dwErrCode=0x0) [0121.000] OpenThemeData () returned 0x5280000 [0121.000] GetSystemMetrics (nIndex=32) returned 4 [0121.000] GetSystemMetrics (nIndex=33) returned 4 [0121.000] CloseThemeData () returned 0x0 [0121.001] capGetDriverDescriptionA () returned 0x0 [0121.001] GetLastError () returned 0x0 [0121.001] SetLastError (dwErrCode=0x0) [0121.001] OpenThemeData () returned 0x5290000 [0121.002] GetSystemMetrics (nIndex=32) returned 4 [0121.002] GetSystemMetrics (nIndex=33) returned 4 [0121.002] CloseThemeData () returned 0x0 [0121.002] capGetDriverDescriptionA () returned 0x0 [0121.003] GetLastError () returned 0x0 [0121.003] SetLastError (dwErrCode=0x0) [0121.003] OpenThemeData () returned 0x52a0000 [0121.004] GetSystemMetrics (nIndex=32) returned 4 [0121.004] GetSystemMetrics (nIndex=33) returned 4 [0121.004] CloseThemeData () returned 0x0 [0121.004] capGetDriverDescriptionA () returned 0x0 [0121.005] GetLastError () returned 0x0 [0121.005] SetLastError (dwErrCode=0x0) [0121.005] OpenThemeData () returned 0x52b0000 [0121.879] GetSystemMetrics (nIndex=32) returned 4 [0121.879] GetSystemMetrics (nIndex=33) returned 4 [0121.879] CloseThemeData () returned 0x0 [0121.879] capGetDriverDescriptionA () returned 0x0 [0121.880] GetLastError () returned 0x0 [0121.880] SetLastError (dwErrCode=0x0) [0121.880] OpenThemeData () returned 0x52c0000 [0121.881] GetSystemMetrics (nIndex=32) returned 4 [0121.881] GetSystemMetrics (nIndex=33) returned 4 [0121.881] CloseThemeData () returned 0x0 [0121.881] capGetDriverDescriptionA () returned 0x0 [0121.882] GetLastError () returned 0x0 [0121.882] SetLastError (dwErrCode=0x0) [0121.882] OpenThemeData () returned 0x52d0000 [0121.882] GetSystemMetrics (nIndex=32) returned 4 [0121.882] GetSystemMetrics (nIndex=33) returned 4 [0121.882] CloseThemeData () returned 0x0 [0121.883] capGetDriverDescriptionA () returned 0x0 [0121.883] GetLastError () returned 0x0 [0121.883] SetLastError (dwErrCode=0x0) [0121.883] OpenThemeData () returned 0x52e0000 [0121.884] GetSystemMetrics (nIndex=32) returned 4 [0121.884] GetSystemMetrics (nIndex=33) returned 4 [0121.884] CloseThemeData () returned 0x0 [0121.884] capGetDriverDescriptionA () returned 0x0 [0121.885] GetLastError () returned 0x0 [0121.885] SetLastError (dwErrCode=0x0) [0121.885] OpenThemeData () returned 0x52f0000 [0121.885] GetSystemMetrics (nIndex=32) returned 4 [0121.885] GetSystemMetrics (nIndex=33) returned 4 [0121.885] CloseThemeData () returned 0x0 [0121.886] capGetDriverDescriptionA () returned 0x0 [0121.887] GetLastError () returned 0x0 [0121.887] SetLastError (dwErrCode=0x0) [0121.887] OpenThemeData () returned 0x5300000 [0121.887] GetSystemMetrics (nIndex=32) returned 4 [0121.887] GetSystemMetrics (nIndex=33) returned 4 [0121.887] CloseThemeData () returned 0x0 [0121.888] capGetDriverDescriptionA () returned 0x0 [0121.888] GetLastError () returned 0x0 [0121.888] SetLastError (dwErrCode=0x0) [0121.888] OpenThemeData () returned 0x5310000 [0121.889] GetSystemMetrics (nIndex=32) returned 4 [0121.889] GetSystemMetrics (nIndex=33) returned 4 [0121.889] CloseThemeData () returned 0x0 [0121.889] capGetDriverDescriptionA () returned 0x0 [0121.890] GetLastError () returned 0x0 [0121.890] SetLastError (dwErrCode=0x0) [0121.890] OpenThemeData () returned 0x5320000 [0121.890] GetSystemMetrics (nIndex=32) returned 4 [0121.890] GetSystemMetrics (nIndex=33) returned 4 [0121.890] CloseThemeData () returned 0x0 [0121.891] capGetDriverDescriptionA () returned 0x0 [0121.892] GetLastError () returned 0x0 [0121.892] SetLastError (dwErrCode=0x0) [0121.892] OpenThemeData () returned 0x5330000 [0121.892] GetSystemMetrics (nIndex=32) returned 4 [0121.892] GetSystemMetrics (nIndex=33) returned 4 [0121.892] CloseThemeData () returned 0x0 [0121.893] capGetDriverDescriptionA () returned 0x0 [0121.893] GetLastError () returned 0x0 [0121.893] SetLastError (dwErrCode=0x0) [0121.893] OpenThemeData () returned 0x5340000 [0121.894] GetSystemMetrics (nIndex=32) returned 4 [0121.894] GetSystemMetrics (nIndex=33) returned 4 [0121.894] CloseThemeData () returned 0x0 [0121.894] capGetDriverDescriptionA () returned 0x0 [0121.895] GetLastError () returned 0x0 [0121.895] SetLastError (dwErrCode=0x0) [0121.895] OpenThemeData () returned 0x5350000 [0121.895] GetSystemMetrics (nIndex=32) returned 4 [0121.895] GetSystemMetrics (nIndex=33) returned 4 [0121.895] CloseThemeData () returned 0x0 [0121.896] capGetDriverDescriptionA () returned 0x0 [0121.896] GetLastError () returned 0x0 [0121.896] SetLastError (dwErrCode=0x0) [0121.896] OpenThemeData () returned 0x5360000 [0121.897] GetSystemMetrics (nIndex=32) returned 4 [0121.897] GetSystemMetrics (nIndex=33) returned 4 [0121.897] CloseThemeData () returned 0x0 [0121.897] capGetDriverDescriptionA () returned 0x0 [0121.898] GetLastError () returned 0x0 [0121.898] SetLastError (dwErrCode=0x0) [0121.898] OpenThemeData () returned 0x5370000 [0121.898] GetSystemMetrics (nIndex=32) returned 4 [0121.898] GetSystemMetrics (nIndex=33) returned 4 [0121.899] CloseThemeData () returned 0x0 [0121.899] capGetDriverDescriptionA () returned 0x0 [0121.899] GetLastError () returned 0x0 [0121.900] SetLastError (dwErrCode=0x0) [0121.900] OpenThemeData () returned 0x5380000 [0121.900] GetSystemMetrics (nIndex=32) returned 4 [0121.900] GetSystemMetrics (nIndex=33) returned 4 [0121.900] CloseThemeData () returned 0x0 [0121.901] capGetDriverDescriptionA () returned 0x0 [0121.901] GetLastError () returned 0x0 [0121.901] SetLastError (dwErrCode=0x0) [0121.901] OpenThemeData () returned 0x5390000 [0121.902] GetSystemMetrics (nIndex=32) returned 4 [0121.902] GetSystemMetrics (nIndex=33) returned 4 [0121.902] CloseThemeData () returned 0x0 [0121.902] capGetDriverDescriptionA () returned 0x0 [0121.903] GetLastError () returned 0x0 [0121.903] SetLastError (dwErrCode=0x0) [0121.903] OpenThemeData () returned 0x53a0000 [0121.903] GetSystemMetrics (nIndex=32) returned 4 [0121.903] GetSystemMetrics (nIndex=33) returned 4 [0121.903] CloseThemeData () returned 0x0 [0121.904] capGetDriverDescriptionA () returned 0x0 [0121.904] GetLastError () returned 0x0 [0121.904] SetLastError (dwErrCode=0x0) [0121.904] OpenThemeData () returned 0x53b0000 [0121.905] GetSystemMetrics (nIndex=32) returned 4 [0121.905] GetSystemMetrics (nIndex=33) returned 4 [0121.905] CloseThemeData () returned 0x0 [0121.905] capGetDriverDescriptionA () returned 0x0 [0121.906] GetLastError () returned 0x0 [0121.906] SetLastError (dwErrCode=0x0) [0121.906] OpenThemeData () returned 0x53c0000 [0121.906] GetSystemMetrics (nIndex=32) returned 4 [0121.906] GetSystemMetrics (nIndex=33) returned 4 [0121.906] CloseThemeData () returned 0x0 [0121.907] capGetDriverDescriptionA () returned 0x0 [0121.907] GetLastError () returned 0x0 [0121.907] SetLastError (dwErrCode=0x0) [0121.907] OpenThemeData () returned 0x53d0000 [0121.908] GetSystemMetrics (nIndex=32) returned 4 [0121.908] GetSystemMetrics (nIndex=33) returned 4 [0121.908] CloseThemeData () returned 0x0 [0121.908] capGetDriverDescriptionA () returned 0x0 [0121.909] GetLastError () returned 0x0 [0121.909] SetLastError (dwErrCode=0x0) [0121.909] OpenThemeData () returned 0x53e0000 [0121.910] GetSystemMetrics (nIndex=32) returned 4 [0121.910] GetSystemMetrics (nIndex=33) returned 4 [0121.910] CloseThemeData () returned 0x0 [0121.910] capGetDriverDescriptionA () returned 0x0 [0121.911] GetLastError () returned 0x0 [0121.911] SetLastError (dwErrCode=0x0) [0121.911] OpenThemeData () returned 0x53f0000 [0121.911] GetSystemMetrics (nIndex=32) returned 4 [0121.911] GetSystemMetrics (nIndex=33) returned 4 [0121.911] CloseThemeData () returned 0x0 [0121.912] capGetDriverDescriptionA () returned 0x0 [0121.912] GetLastError () returned 0x0 [0121.912] SetLastError (dwErrCode=0x0) [0121.912] OpenThemeData () returned 0x5400000 [0121.913] GetSystemMetrics (nIndex=32) returned 4 [0121.913] GetSystemMetrics (nIndex=33) returned 4 [0121.913] CloseThemeData () returned 0x0 [0121.913] capGetDriverDescriptionA () returned 0x0 [0121.914] GetLastError () returned 0x0 [0121.914] SetLastError (dwErrCode=0x0) [0121.914] OpenThemeData () returned 0x5410000 [0121.914] GetSystemMetrics (nIndex=32) returned 4 [0121.914] GetSystemMetrics (nIndex=33) returned 4 [0121.914] CloseThemeData () returned 0x0 [0122.535] capGetDriverDescriptionA () returned 0x0 [0122.536] GetLastError () returned 0x0 [0122.536] SetLastError (dwErrCode=0x0) [0122.536] OpenThemeData () returned 0x5420000 [0122.536] GetSystemMetrics (nIndex=32) returned 4 [0122.536] GetSystemMetrics (nIndex=33) returned 4 [0122.536] CloseThemeData () returned 0x0 [0122.537] capGetDriverDescriptionA () returned 0x0 [0122.537] GetLastError () returned 0x0 [0122.537] SetLastError (dwErrCode=0x0) [0122.537] OpenThemeData () returned 0x5430000 [0122.538] GetSystemMetrics (nIndex=32) returned 4 [0122.538] GetSystemMetrics (nIndex=33) returned 4 [0122.538] CloseThemeData () returned 0x0 [0122.538] capGetDriverDescriptionA () returned 0x0 [0122.539] GetLastError () returned 0x0 [0122.539] SetLastError (dwErrCode=0x0) [0122.539] OpenThemeData () returned 0x5440000 [0122.539] GetSystemMetrics (nIndex=32) returned 4 [0122.539] GetSystemMetrics (nIndex=33) returned 4 [0122.539] CloseThemeData () returned 0x0 [0122.540] capGetDriverDescriptionA () returned 0x0 [0122.540] GetLastError () returned 0x0 [0122.540] SetLastError (dwErrCode=0x0) [0122.540] OpenThemeData () returned 0x5450000 [0122.541] GetSystemMetrics (nIndex=32) returned 4 [0122.541] GetSystemMetrics (nIndex=33) returned 4 [0122.541] CloseThemeData () returned 0x0 [0122.541] capGetDriverDescriptionA () returned 0x0 [0122.542] GetLastError () returned 0x0 [0122.542] SetLastError (dwErrCode=0x0) [0122.542] OpenThemeData () returned 0x5460000 [0122.543] GetSystemMetrics (nIndex=32) returned 4 [0122.543] GetSystemMetrics (nIndex=33) returned 4 [0122.543] CloseThemeData () returned 0x0 [0122.543] capGetDriverDescriptionA () returned 0x0 [0122.543] GetLastError () returned 0x0 [0122.544] SetLastError (dwErrCode=0x0) [0122.544] OpenThemeData () returned 0x5470000 [0122.544] GetSystemMetrics (nIndex=32) returned 4 [0122.544] GetSystemMetrics (nIndex=33) returned 4 [0122.544] CloseThemeData () returned 0x0 [0122.544] capGetDriverDescriptionA () returned 0x0 [0122.545] GetLastError () returned 0x0 [0122.545] SetLastError (dwErrCode=0x0) [0122.545] OpenThemeData () returned 0x5480000 [0122.546] GetSystemMetrics (nIndex=32) returned 4 [0122.546] GetSystemMetrics (nIndex=33) returned 4 [0122.546] CloseThemeData () returned 0x0 [0122.546] capGetDriverDescriptionA () returned 0x0 [0122.546] GetLastError () returned 0x0 [0122.547] SetLastError (dwErrCode=0x0) [0122.547] OpenThemeData () returned 0x5490000 [0122.547] GetSystemMetrics (nIndex=32) returned 4 [0122.547] GetSystemMetrics (nIndex=33) returned 4 [0122.547] CloseThemeData () returned 0x0 [0122.547] capGetDriverDescriptionA () returned 0x0 [0122.548] GetLastError () returned 0x0 [0122.548] SetLastError (dwErrCode=0x0) [0122.548] OpenThemeData () returned 0x54a0000 [0122.549] GetSystemMetrics (nIndex=32) returned 4 [0122.549] GetSystemMetrics (nIndex=33) returned 4 [0122.549] CloseThemeData () returned 0x0 [0122.549] capGetDriverDescriptionA () returned 0x0 [0122.550] GetLastError () returned 0x0 [0122.550] SetLastError (dwErrCode=0x0) [0122.550] OpenThemeData () returned 0x54b0000 [0122.551] GetSystemMetrics (nIndex=32) returned 4 [0122.551] GetSystemMetrics (nIndex=33) returned 4 [0122.551] CloseThemeData () returned 0x0 [0122.551] capGetDriverDescriptionA () returned 0x0 [0122.552] GetLastError () returned 0x0 [0122.552] SetLastError (dwErrCode=0x0) [0122.552] OpenThemeData () returned 0x54c0000 [0122.552] GetSystemMetrics (nIndex=32) returned 4 [0122.552] GetSystemMetrics (nIndex=33) returned 4 [0122.552] CloseThemeData () returned 0x0 [0122.553] capGetDriverDescriptionA () returned 0x0 [0122.553] GetLastError () returned 0x0 [0122.553] SetLastError (dwErrCode=0x0) [0122.553] OpenThemeData () returned 0x54d0000 [0122.554] GetSystemMetrics (nIndex=32) returned 4 [0122.554] GetSystemMetrics (nIndex=33) returned 4 [0122.554] CloseThemeData () returned 0x0 [0122.554] capGetDriverDescriptionA () returned 0x0 [0122.555] GetLastError () returned 0x0 [0122.555] SetLastError (dwErrCode=0x0) [0122.555] OpenThemeData () returned 0x54e0000 [0122.555] GetSystemMetrics (nIndex=32) returned 4 [0122.555] GetSystemMetrics (nIndex=33) returned 4 [0122.555] CloseThemeData () returned 0x0 [0122.556] capGetDriverDescriptionA () returned 0x0 [0122.556] GetLastError () returned 0x0 [0122.556] SetLastError (dwErrCode=0x0) [0122.556] OpenThemeData () returned 0x54f0000 [0122.557] GetSystemMetrics (nIndex=32) returned 4 [0122.557] GetSystemMetrics (nIndex=33) returned 4 [0122.557] CloseThemeData () returned 0x0 [0122.557] capGetDriverDescriptionA () returned 0x0 [0122.558] GetLastError () returned 0x0 [0122.558] SetLastError (dwErrCode=0x0) [0122.558] OpenThemeData () returned 0x5500000 [0122.559] GetSystemMetrics (nIndex=32) returned 4 [0122.559] GetSystemMetrics (nIndex=33) returned 4 [0122.559] CloseThemeData () returned 0x0 [0122.559] capGetDriverDescriptionA () returned 0x0 [0122.560] GetLastError () returned 0x0 [0122.560] SetLastError (dwErrCode=0x0) [0122.560] OpenThemeData () returned 0x5510000 [0122.560] GetSystemMetrics (nIndex=32) returned 4 [0122.560] GetSystemMetrics (nIndex=33) returned 4 [0122.560] CloseThemeData () returned 0x0 [0122.561] capGetDriverDescriptionA () returned 0x0 [0122.561] GetLastError () returned 0x0 [0122.561] SetLastError (dwErrCode=0x0) [0122.561] OpenThemeData () returned 0x5520000 [0122.562] GetSystemMetrics (nIndex=32) returned 4 [0122.562] GetSystemMetrics (nIndex=33) returned 4 [0122.562] CloseThemeData () returned 0x0 [0122.562] capGetDriverDescriptionA () returned 0x0 [0122.563] GetLastError () returned 0x0 [0122.563] SetLastError (dwErrCode=0x0) [0122.563] OpenThemeData () returned 0x5530000 [0122.563] GetSystemMetrics (nIndex=32) returned 4 [0122.563] GetSystemMetrics (nIndex=33) returned 4 [0122.563] CloseThemeData () returned 0x0 [0122.564] capGetDriverDescriptionA () returned 0x0 [0122.564] GetLastError () returned 0x0 [0122.564] SetLastError (dwErrCode=0x0) [0122.564] OpenThemeData () returned 0x5540000 [0122.565] GetSystemMetrics (nIndex=32) returned 4 [0122.565] GetSystemMetrics (nIndex=33) returned 4 [0122.565] CloseThemeData () returned 0x0 [0122.566] capGetDriverDescriptionA () returned 0x0 [0122.566] GetLastError () returned 0x0 [0122.566] SetLastError (dwErrCode=0x0) [0122.566] OpenThemeData () returned 0x5550000 [0122.567] GetSystemMetrics (nIndex=32) returned 4 [0122.567] GetSystemMetrics (nIndex=33) returned 4 [0122.567] CloseThemeData () returned 0x0 [0122.567] capGetDriverDescriptionA () returned 0x0 [0122.568] GetLastError () returned 0x0 [0122.568] SetLastError (dwErrCode=0x0) [0122.568] OpenThemeData () returned 0x5560000 [0122.568] GetSystemMetrics (nIndex=32) returned 4 [0122.568] GetSystemMetrics (nIndex=33) returned 4 [0122.568] CloseThemeData () returned 0x0 [0122.569] capGetDriverDescriptionA () returned 0x0 [0122.569] GetLastError () returned 0x0 [0122.569] SetLastError (dwErrCode=0x0) [0122.569] OpenThemeData () returned 0x5570000 [0122.570] GetSystemMetrics (nIndex=32) returned 4 [0122.570] GetSystemMetrics (nIndex=33) returned 4 [0122.570] CloseThemeData () returned 0x0 [0122.570] capGetDriverDescriptionA () returned 0x0 [0122.571] GetLastError () returned 0x0 [0122.571] SetLastError (dwErrCode=0x0) [0122.571] OpenThemeData () returned 0x5580000 [0122.572] GetSystemMetrics (nIndex=32) returned 4 [0122.572] GetSystemMetrics (nIndex=33) returned 4 [0122.572] CloseThemeData () returned 0x0 [0122.572] capGetDriverDescriptionA () returned 0x0 [0122.573] GetLastError () returned 0x0 [0122.573] SetLastError (dwErrCode=0x0) [0122.573] OpenThemeData () returned 0x5590000 [0122.573] GetSystemMetrics (nIndex=32) returned 4 [0122.573] GetSystemMetrics (nIndex=33) returned 4 [0122.573] CloseThemeData () returned 0x0 [0122.574] capGetDriverDescriptionA () returned 0x0 [0122.574] GetLastError () returned 0x0 [0122.574] SetLastError (dwErrCode=0x0) [0122.574] OpenThemeData () returned 0x55a0000 [0122.575] GetSystemMetrics (nIndex=32) returned 4 [0122.575] GetSystemMetrics (nIndex=33) returned 4 [0122.575] CloseThemeData () returned 0x0 [0122.575] capGetDriverDescriptionA () returned 0x0 [0122.576] GetLastError () returned 0x0 [0122.576] SetLastError (dwErrCode=0x0) [0122.576] OpenThemeData () returned 0x55b0000 [0122.576] GetSystemMetrics (nIndex=32) returned 4 [0122.577] GetSystemMetrics (nIndex=33) returned 4 [0122.577] CloseThemeData () returned 0x0 [0122.577] capGetDriverDescriptionA () returned 0x0 [0122.577] GetLastError () returned 0x0 [0122.578] SetLastError (dwErrCode=0x0) [0122.578] OpenThemeData () returned 0x55c0000 [0122.578] GetSystemMetrics (nIndex=32) returned 4 [0122.578] GetSystemMetrics (nIndex=33) returned 4 [0122.578] CloseThemeData () returned 0x0 [0122.579] capGetDriverDescriptionA () returned 0x0 [0122.579] GetLastError () returned 0x0 [0122.579] SetLastError (dwErrCode=0x0) [0122.579] OpenThemeData () returned 0x55d0000 [0122.580] GetSystemMetrics (nIndex=32) returned 4 [0122.580] GetSystemMetrics (nIndex=33) returned 4 [0122.580] CloseThemeData () returned 0x0 [0122.580] capGetDriverDescriptionA () returned 0x0 [0122.928] GetLastError () returned 0x0 [0122.928] SetLastError (dwErrCode=0x0) [0122.928] OpenThemeData () returned 0x55e0000 [0122.929] GetSystemMetrics (nIndex=32) returned 4 [0122.929] GetSystemMetrics (nIndex=33) returned 4 [0122.929] CloseThemeData () returned 0x0 [0122.930] capGetDriverDescriptionA () returned 0x0 [0122.930] GetLastError () returned 0x0 [0122.930] SetLastError (dwErrCode=0x0) [0122.930] OpenThemeData () returned 0x55f0000 [0122.931] GetSystemMetrics (nIndex=32) returned 4 [0122.931] GetSystemMetrics (nIndex=33) returned 4 [0122.931] CloseThemeData () returned 0x0 [0122.931] capGetDriverDescriptionA () returned 0x0 [0122.932] GetLastError () returned 0x0 [0122.932] SetLastError (dwErrCode=0x0) [0122.932] OpenThemeData () returned 0x5600000 [0122.932] GetSystemMetrics (nIndex=32) returned 4 [0122.932] GetSystemMetrics (nIndex=33) returned 4 [0122.932] CloseThemeData () returned 0x0 [0122.933] capGetDriverDescriptionA () returned 0x0 [0122.933] GetLastError () returned 0x0 [0122.934] SetLastError (dwErrCode=0x0) [0122.934] OpenThemeData () returned 0x5610000 [0122.934] GetSystemMetrics (nIndex=32) returned 4 [0122.934] GetSystemMetrics (nIndex=33) returned 4 [0122.934] CloseThemeData () returned 0x0 [0122.935] capGetDriverDescriptionA () returned 0x0 [0122.935] GetLastError () returned 0x0 [0122.935] SetLastError (dwErrCode=0x0) [0122.935] OpenThemeData () returned 0x5620000 [0122.936] GetSystemMetrics (nIndex=32) returned 4 [0122.936] GetSystemMetrics (nIndex=33) returned 4 [0122.936] CloseThemeData () returned 0x0 [0122.936] capGetDriverDescriptionA () returned 0x0 [0122.937] GetLastError () returned 0x0 [0122.937] SetLastError (dwErrCode=0x0) [0122.937] OpenThemeData () returned 0x5630000 [0122.937] GetSystemMetrics (nIndex=32) returned 4 [0122.937] GetSystemMetrics (nIndex=33) returned 4 [0122.937] CloseThemeData () returned 0x0 [0122.938] capGetDriverDescriptionA () returned 0x0 [0122.938] GetLastError () returned 0x0 [0122.939] SetLastError (dwErrCode=0x0) [0122.939] OpenThemeData () returned 0x5640000 [0122.939] GetSystemMetrics (nIndex=32) returned 4 [0122.939] GetSystemMetrics (nIndex=33) returned 4 [0122.939] CloseThemeData () returned 0x0 [0122.940] capGetDriverDescriptionA () returned 0x0 [0122.940] GetLastError () returned 0x0 [0122.940] SetLastError (dwErrCode=0x0) [0122.941] OpenThemeData () returned 0x5650000 [0122.941] GetSystemMetrics (nIndex=32) returned 4 [0122.941] GetSystemMetrics (nIndex=33) returned 4 [0122.941] CloseThemeData () returned 0x0 [0122.942] capGetDriverDescriptionA () returned 0x0 [0122.942] GetLastError () returned 0x0 [0122.942] SetLastError (dwErrCode=0x0) [0122.942] OpenThemeData () returned 0x5660000 [0122.943] GetSystemMetrics (nIndex=32) returned 4 [0122.943] GetSystemMetrics (nIndex=33) returned 4 [0122.943] CloseThemeData () returned 0x0 [0122.943] capGetDriverDescriptionA () returned 0x0 [0122.944] GetLastError () returned 0x0 [0122.944] SetLastError (dwErrCode=0x0) [0122.944] OpenThemeData () returned 0x5670000 [0122.944] GetSystemMetrics (nIndex=32) returned 4 [0122.944] GetSystemMetrics (nIndex=33) returned 4 [0122.945] CloseThemeData () returned 0x0 [0122.945] capGetDriverDescriptionA () returned 0x0 [0122.945] GetLastError () returned 0x0 [0122.946] SetLastError (dwErrCode=0x0) [0122.946] OpenThemeData () returned 0x5680000 [0122.946] GetSystemMetrics (nIndex=32) returned 4 [0122.946] GetSystemMetrics (nIndex=33) returned 4 [0122.946] CloseThemeData () returned 0x0 [0122.947] capGetDriverDescriptionA () returned 0x0 [0122.947] GetLastError () returned 0x0 [0122.947] SetLastError (dwErrCode=0x0) [0122.947] OpenThemeData () returned 0x5690000 [0122.948] GetSystemMetrics (nIndex=32) returned 4 [0122.948] GetSystemMetrics (nIndex=33) returned 4 [0122.948] CloseThemeData () returned 0x0 [0122.948] capGetDriverDescriptionA () returned 0x0 [0122.949] GetLastError () returned 0x0 [0122.949] SetLastError (dwErrCode=0x0) [0122.949] OpenThemeData () returned 0x56a0000 [0122.949] GetSystemMetrics (nIndex=32) returned 4 [0122.950] GetSystemMetrics (nIndex=33) returned 4 [0122.950] CloseThemeData () returned 0x0 [0122.950] capGetDriverDescriptionA () returned 0x0 [0122.951] GetLastError () returned 0x0 [0122.951] SetLastError (dwErrCode=0x0) [0122.951] OpenThemeData () returned 0x56b0000 [0122.951] GetSystemMetrics (nIndex=32) returned 4 [0122.951] GetSystemMetrics (nIndex=33) returned 4 [0122.951] CloseThemeData () returned 0x0 [0122.952] capGetDriverDescriptionA () returned 0x0 [0122.952] GetLastError () returned 0x0 [0122.952] SetLastError (dwErrCode=0x0) [0122.952] OpenThemeData () returned 0x56c0000 [0122.953] GetSystemMetrics (nIndex=32) returned 4 [0122.953] GetSystemMetrics (nIndex=33) returned 4 [0122.953] CloseThemeData () returned 0x0 [0122.953] capGetDriverDescriptionA () returned 0x0 [0122.954] GetLastError () returned 0x0 [0122.954] SetLastError (dwErrCode=0x0) [0122.954] OpenThemeData () returned 0x56d0000 [0122.955] GetSystemMetrics (nIndex=32) returned 4 [0122.955] GetSystemMetrics (nIndex=33) returned 4 [0122.955] CloseThemeData () returned 0x0 [0122.955] capGetDriverDescriptionA () returned 0x0 [0122.956] GetLastError () returned 0x0 [0122.956] SetLastError (dwErrCode=0x0) [0122.956] OpenThemeData () returned 0x56e0000 [0122.956] GetSystemMetrics (nIndex=32) returned 4 [0122.956] GetSystemMetrics (nIndex=33) returned 4 [0122.956] CloseThemeData () returned 0x0 [0122.957] capGetDriverDescriptionA () returned 0x0 [0122.957] GetLastError () returned 0x0 [0122.957] SetLastError (dwErrCode=0x0) [0122.957] OpenThemeData () returned 0x56f0000 [0122.958] GetSystemMetrics (nIndex=32) returned 4 [0122.958] GetSystemMetrics (nIndex=33) returned 4 [0122.958] CloseThemeData () returned 0x0 [0122.959] capGetDriverDescriptionA () returned 0x0 [0122.959] GetLastError () returned 0x0 [0122.959] SetLastError (dwErrCode=0x0) [0122.959] OpenThemeData () returned 0x5700000 [0122.960] GetSystemMetrics (nIndex=32) returned 4 [0122.960] GetSystemMetrics (nIndex=33) returned 4 [0122.960] CloseThemeData () returned 0x0 [0122.960] capGetDriverDescriptionA () returned 0x0 [0122.961] GetLastError () returned 0x0 [0122.961] SetLastError (dwErrCode=0x0) [0122.961] OpenThemeData () returned 0x5710000 [0122.961] GetSystemMetrics (nIndex=32) returned 4 [0122.961] GetSystemMetrics (nIndex=33) returned 4 [0122.962] CloseThemeData () returned 0x0 [0122.962] capGetDriverDescriptionA () returned 0x0 [0122.963] GetLastError () returned 0x0 [0122.963] SetLastError (dwErrCode=0x0) [0122.963] OpenThemeData () returned 0x5720000 [0122.963] GetSystemMetrics (nIndex=32) returned 4 [0122.963] GetSystemMetrics (nIndex=33) returned 4 [0122.963] CloseThemeData () returned 0x0 [0122.964] capGetDriverDescriptionA () returned 0x0 [0122.964] GetLastError () returned 0x0 [0122.964] SetLastError (dwErrCode=0x0) [0122.964] OpenThemeData () returned 0x5730000 [0122.965] GetSystemMetrics (nIndex=32) returned 4 [0122.965] GetSystemMetrics (nIndex=33) returned 4 [0122.965] CloseThemeData () returned 0x0 [0122.965] capGetDriverDescriptionA () returned 0x0 [0122.966] GetLastError () returned 0x0 [0122.966] SetLastError (dwErrCode=0x0) [0122.966] OpenThemeData () returned 0x5740000 [0122.967] GetSystemMetrics (nIndex=32) returned 4 [0122.967] GetSystemMetrics (nIndex=33) returned 4 [0122.967] CloseThemeData () returned 0x0 [0122.967] capGetDriverDescriptionA () returned 0x0 [0122.968] GetLastError () returned 0x0 [0122.968] SetLastError (dwErrCode=0x0) [0122.968] OpenThemeData () returned 0x5750000 [0122.968] GetSystemMetrics (nIndex=32) returned 4 [0122.968] GetSystemMetrics (nIndex=33) returned 4 [0122.968] CloseThemeData () returned 0x0 [0122.969] capGetDriverDescriptionA () returned 0x0 [0122.969] GetLastError () returned 0x0 [0122.969] SetLastError (dwErrCode=0x0) [0122.969] OpenThemeData () returned 0x5760000 [0122.970] GetSystemMetrics (nIndex=32) returned 4 [0122.970] GetSystemMetrics (nIndex=33) returned 4 [0122.970] CloseThemeData () returned 0x0 [0122.970] capGetDriverDescriptionA () returned 0x0 [0122.971] GetLastError () returned 0x0 [0122.971] SetLastError (dwErrCode=0x0) [0122.971] OpenThemeData () returned 0x5770000 [0123.661] GetSystemMetrics (nIndex=32) returned 4 [0123.661] GetSystemMetrics (nIndex=33) returned 4 [0123.661] CloseThemeData () returned 0x0 [0123.661] capGetDriverDescriptionA () returned 0x0 [0123.662] GetLastError () returned 0x0 [0123.662] SetLastError (dwErrCode=0x0) [0123.662] OpenThemeData () returned 0x5780000 [0123.663] GetSystemMetrics (nIndex=32) returned 4 [0123.663] GetSystemMetrics (nIndex=33) returned 4 [0123.663] CloseThemeData () returned 0x0 [0123.663] capGetDriverDescriptionA () returned 0x0 [0123.664] GetLastError () returned 0x0 [0123.664] SetLastError (dwErrCode=0x0) [0123.664] OpenThemeData () returned 0x5790000 [0123.664] GetSystemMetrics (nIndex=32) returned 4 [0123.664] GetSystemMetrics (nIndex=33) returned 4 [0123.664] CloseThemeData () returned 0x0 [0123.665] capGetDriverDescriptionA () returned 0x0 [0123.665] GetLastError () returned 0x0 [0123.665] SetLastError (dwErrCode=0x0) [0123.665] OpenThemeData () returned 0x57a0000 [0123.666] GetSystemMetrics (nIndex=32) returned 4 [0123.666] GetSystemMetrics (nIndex=33) returned 4 [0123.666] CloseThemeData () returned 0x0 [0123.666] capGetDriverDescriptionA () returned 0x0 [0123.667] GetLastError () returned 0x0 [0123.667] SetLastError (dwErrCode=0x0) [0123.667] OpenThemeData () returned 0x57b0000 [0123.667] GetSystemMetrics (nIndex=32) returned 4 [0123.667] GetSystemMetrics (nIndex=33) returned 4 [0123.668] CloseThemeData () returned 0x0 [0123.668] capGetDriverDescriptionA () returned 0x0 [0123.669] GetLastError () returned 0x0 [0123.669] SetLastError (dwErrCode=0x0) [0123.669] OpenThemeData () returned 0x57c0000 [0123.669] GetSystemMetrics (nIndex=32) returned 4 [0123.669] GetSystemMetrics (nIndex=33) returned 4 [0123.669] CloseThemeData () returned 0x0 [0123.672] capGetDriverDescriptionA () returned 0x0 [0123.673] GetLastError () returned 0x0 [0123.673] SetLastError (dwErrCode=0x0) [0123.673] OpenThemeData () returned 0x57d0000 [0123.673] GetSystemMetrics (nIndex=32) returned 4 [0123.673] GetSystemMetrics (nIndex=33) returned 4 [0123.673] CloseThemeData () returned 0x0 [0123.674] capGetDriverDescriptionA () returned 0x0 [0123.674] GetLastError () returned 0x0 [0123.674] SetLastError (dwErrCode=0x0) [0123.674] OpenThemeData () returned 0x57e0000 [0123.675] GetSystemMetrics (nIndex=32) returned 4 [0123.675] GetSystemMetrics (nIndex=33) returned 4 [0123.675] CloseThemeData () returned 0x0 [0123.675] capGetDriverDescriptionA () returned 0x0 [0123.676] GetLastError () returned 0x0 [0123.676] SetLastError (dwErrCode=0x0) [0123.676] OpenThemeData () returned 0x57f0000 [0123.676] GetSystemMetrics (nIndex=32) returned 4 [0123.676] GetSystemMetrics (nIndex=33) returned 4 [0123.676] CloseThemeData () returned 0x0 [0123.677] capGetDriverDescriptionA () returned 0x0 [0123.677] GetLastError () returned 0x0 [0123.677] SetLastError (dwErrCode=0x0) [0123.677] OpenThemeData () returned 0x5800000 [0123.678] GetSystemMetrics (nIndex=32) returned 4 [0123.678] GetSystemMetrics (nIndex=33) returned 4 [0123.678] CloseThemeData () returned 0x0 [0123.678] capGetDriverDescriptionA () returned 0x0 [0123.679] GetLastError () returned 0x0 [0123.679] SetLastError (dwErrCode=0x0) [0123.679] OpenThemeData () returned 0x5810000 [0123.679] GetSystemMetrics (nIndex=32) returned 4 [0123.679] GetSystemMetrics (nIndex=33) returned 4 [0123.679] CloseThemeData () returned 0x0 [0123.680] capGetDriverDescriptionA () returned 0x0 [0123.680] GetLastError () returned 0x0 [0123.681] SetLastError (dwErrCode=0x0) [0123.681] OpenThemeData () returned 0x5820000 [0123.681] GetSystemMetrics (nIndex=32) returned 4 [0123.681] GetSystemMetrics (nIndex=33) returned 4 [0123.681] CloseThemeData () returned 0x0 [0123.681] capGetDriverDescriptionA () returned 0x0 [0123.682] GetLastError () returned 0x0 [0123.682] SetLastError (dwErrCode=0x0) [0123.682] OpenThemeData () returned 0x5830000 [0123.683] GetSystemMetrics (nIndex=32) returned 4 [0123.683] GetSystemMetrics (nIndex=33) returned 4 [0123.683] CloseThemeData () returned 0x0 [0123.683] capGetDriverDescriptionA () returned 0x0 [0123.683] GetLastError () returned 0x0 [0123.684] SetLastError (dwErrCode=0x0) [0123.684] OpenThemeData () returned 0x5840000 [0123.684] GetSystemMetrics (nIndex=32) returned 4 [0123.684] GetSystemMetrics (nIndex=33) returned 4 [0123.684] CloseThemeData () returned 0x0 [0123.684] capGetDriverDescriptionA () returned 0x0 [0123.685] GetLastError () returned 0x0 [0123.685] SetLastError (dwErrCode=0x0) [0123.685] OpenThemeData () returned 0x5850000 [0123.686] GetSystemMetrics (nIndex=32) returned 4 [0123.686] GetSystemMetrics (nIndex=33) returned 4 [0123.686] CloseThemeData () returned 0x0 [0123.686] capGetDriverDescriptionA () returned 0x0 [0123.687] GetLastError () returned 0x0 [0123.687] SetLastError (dwErrCode=0x0) [0123.687] OpenThemeData () returned 0x5860000 [0123.687] GetSystemMetrics (nIndex=32) returned 4 [0123.687] GetSystemMetrics (nIndex=33) returned 4 [0123.687] CloseThemeData () returned 0x0 [0123.687] capGetDriverDescriptionA () returned 0x0 [0123.688] GetLastError () returned 0x0 [0123.688] SetLastError (dwErrCode=0x0) [0123.688] OpenThemeData () returned 0x5870000 [0123.689] GetSystemMetrics (nIndex=32) returned 4 [0123.689] GetSystemMetrics (nIndex=33) returned 4 [0123.689] CloseThemeData () returned 0x0 [0123.689] capGetDriverDescriptionA () returned 0x0 [0123.690] GetLastError () returned 0x0 [0123.690] SetLastError (dwErrCode=0x0) [0123.690] OpenThemeData () returned 0x5880000 [0123.690] GetSystemMetrics (nIndex=32) returned 4 [0123.690] GetSystemMetrics (nIndex=33) returned 4 [0123.690] CloseThemeData () returned 0x0 [0123.691] capGetDriverDescriptionA () returned 0x0 [0123.691] GetLastError () returned 0x0 [0123.691] SetLastError (dwErrCode=0x0) [0123.691] OpenThemeData () returned 0x5890000 [0123.692] GetSystemMetrics (nIndex=32) returned 4 [0123.692] GetSystemMetrics (nIndex=33) returned 4 [0123.692] CloseThemeData () returned 0x0 [0123.692] capGetDriverDescriptionA () returned 0x0 [0123.693] GetLastError () returned 0x0 [0123.693] SetLastError (dwErrCode=0x0) [0123.693] OpenThemeData () returned 0x58a0000 [0123.693] GetSystemMetrics (nIndex=32) returned 4 [0123.693] GetSystemMetrics (nIndex=33) returned 4 [0123.693] CloseThemeData () returned 0x0 [0123.694] capGetDriverDescriptionA () returned 0x0 [0123.694] GetLastError () returned 0x0 [0123.694] SetLastError (dwErrCode=0x0) [0123.694] OpenThemeData () returned 0x58b0000 [0123.695] GetSystemMetrics (nIndex=32) returned 4 [0123.695] GetSystemMetrics (nIndex=33) returned 4 [0123.695] CloseThemeData () returned 0x0 [0123.695] capGetDriverDescriptionA () returned 0x0 [0123.696] GetLastError () returned 0x0 [0123.696] SetLastError (dwErrCode=0x0) [0123.696] OpenThemeData () returned 0x58c0000 [0123.698] GetSystemMetrics (nIndex=32) returned 4 [0123.698] GetSystemMetrics (nIndex=33) returned 4 [0123.698] CloseThemeData () returned 0x0 [0123.699] capGetDriverDescriptionA () returned 0x0 [0123.699] GetLastError () returned 0x0 [0123.699] SetLastError (dwErrCode=0x0) [0123.699] OpenThemeData () returned 0x58d0000 [0123.700] GetSystemMetrics (nIndex=32) returned 4 [0123.700] GetSystemMetrics (nIndex=33) returned 4 [0123.700] CloseThemeData () returned 0x0 [0123.700] capGetDriverDescriptionA () returned 0x0 [0123.701] GetLastError () returned 0x0 [0123.701] SetLastError (dwErrCode=0x0) [0123.701] OpenThemeData () returned 0x58e0000 [0123.701] GetSystemMetrics (nIndex=32) returned 4 [0123.701] GetSystemMetrics (nIndex=33) returned 4 [0123.701] CloseThemeData () returned 0x0 [0123.702] capGetDriverDescriptionA () returned 0x0 [0123.702] GetLastError () returned 0x0 [0123.702] SetLastError (dwErrCode=0x0) [0123.702] OpenThemeData () returned 0x58f0000 [0123.703] GetSystemMetrics (nIndex=32) returned 4 [0123.703] GetSystemMetrics (nIndex=33) returned 4 [0123.703] CloseThemeData () returned 0x0 [0123.703] capGetDriverDescriptionA () returned 0x0 [0123.704] GetLastError () returned 0x0 [0123.704] SetLastError (dwErrCode=0x0) [0123.704] OpenThemeData () returned 0x5900000 [0123.704] GetSystemMetrics (nIndex=32) returned 4 [0123.704] GetSystemMetrics (nIndex=33) returned 4 [0123.704] CloseThemeData () returned 0x0 [0123.705] capGetDriverDescriptionA () returned 0x0 [0123.705] GetLastError () returned 0x0 [0123.705] SetLastError (dwErrCode=0x0) [0123.705] OpenThemeData () returned 0x5910000 [0123.706] GetSystemMetrics (nIndex=32) returned 4 [0123.706] GetSystemMetrics (nIndex=33) returned 4 [0123.706] CloseThemeData () returned 0x0 [0124.080] capGetDriverDescriptionA () returned 0x0 [0124.081] GetLastError () returned 0x0 [0124.081] SetLastError (dwErrCode=0x0) [0124.081] OpenThemeData () returned 0x5920000 [0124.082] GetSystemMetrics (nIndex=32) returned 4 [0124.082] GetSystemMetrics (nIndex=33) returned 4 [0124.082] CloseThemeData () returned 0x0 [0124.082] capGetDriverDescriptionA () returned 0x0 [0124.083] GetLastError () returned 0x0 [0124.083] SetLastError (dwErrCode=0x0) [0124.083] OpenThemeData () returned 0x5930000 [0124.083] GetSystemMetrics (nIndex=32) returned 4 [0124.083] GetSystemMetrics (nIndex=33) returned 4 [0124.083] CloseThemeData () returned 0x0 [0124.083] capGetDriverDescriptionA () returned 0x0 [0124.084] GetLastError () returned 0x0 [0124.084] SetLastError (dwErrCode=0x0) [0124.084] OpenThemeData () returned 0x5940000 [0124.085] GetSystemMetrics (nIndex=32) returned 4 [0124.085] GetSystemMetrics (nIndex=33) returned 4 [0124.085] CloseThemeData () returned 0x0 [0124.085] capGetDriverDescriptionA () returned 0x0 [0124.086] GetLastError () returned 0x0 [0124.086] SetLastError (dwErrCode=0x0) [0124.086] OpenThemeData () returned 0x5950000 [0124.086] GetSystemMetrics (nIndex=32) returned 4 [0124.086] GetSystemMetrics (nIndex=33) returned 4 [0124.086] CloseThemeData () returned 0x0 [0124.086] capGetDriverDescriptionA () returned 0x0 [0124.087] GetLastError () returned 0x0 [0124.087] SetLastError (dwErrCode=0x0) [0124.087] OpenThemeData () returned 0x5960000 [0124.087] GetSystemMetrics (nIndex=32) returned 4 [0124.087] GetSystemMetrics (nIndex=33) returned 4 [0124.088] CloseThemeData () returned 0x0 [0124.088] capGetDriverDescriptionA () returned 0x0 [0124.088] GetLastError () returned 0x0 [0124.088] SetLastError (dwErrCode=0x0) [0124.089] OpenThemeData () returned 0x5970000 [0124.089] GetSystemMetrics (nIndex=32) returned 4 [0124.089] GetSystemMetrics (nIndex=33) returned 4 [0124.089] CloseThemeData () returned 0x0 [0124.089] capGetDriverDescriptionA () returned 0x0 [0124.090] GetLastError () returned 0x0 [0124.090] SetLastError (dwErrCode=0x0) [0124.090] OpenThemeData () returned 0x5980000 [0124.090] GetSystemMetrics (nIndex=32) returned 4 [0124.090] GetSystemMetrics (nIndex=33) returned 4 [0124.090] CloseThemeData () returned 0x0 [0124.091] capGetDriverDescriptionA () returned 0x0 [0124.091] GetLastError () returned 0x0 [0124.091] SetLastError (dwErrCode=0x0) [0124.091] OpenThemeData () returned 0x5990000 [0124.092] GetSystemMetrics (nIndex=32) returned 4 [0124.092] GetSystemMetrics (nIndex=33) returned 4 [0124.092] CloseThemeData () returned 0x0 [0124.092] capGetDriverDescriptionA () returned 0x0 [0124.093] GetLastError () returned 0x0 [0124.093] SetLastError (dwErrCode=0x0) [0124.093] OpenThemeData () returned 0x59a0000 [0124.093] GetSystemMetrics (nIndex=32) returned 4 [0124.093] GetSystemMetrics (nIndex=33) returned 4 [0124.093] CloseThemeData () returned 0x0 [0124.094] capGetDriverDescriptionA () returned 0x0 [0124.094] GetLastError () returned 0x0 [0124.094] SetLastError (dwErrCode=0x0) [0124.094] OpenThemeData () returned 0x59b0000 [0124.095] GetSystemMetrics (nIndex=32) returned 4 [0124.095] GetSystemMetrics (nIndex=33) returned 4 [0124.095] CloseThemeData () returned 0x0 [0124.095] capGetDriverDescriptionA () returned 0x0 [0124.096] GetLastError () returned 0x0 [0124.096] SetLastError (dwErrCode=0x0) [0124.096] OpenThemeData () returned 0x59c0000 [0124.096] GetSystemMetrics (nIndex=32) returned 4 [0124.096] GetSystemMetrics (nIndex=33) returned 4 [0124.096] CloseThemeData () returned 0x0 [0124.097] capGetDriverDescriptionA () returned 0x0 [0124.098] GetLastError () returned 0x0 [0124.098] SetLastError (dwErrCode=0x0) [0124.098] OpenThemeData () returned 0x59d0000 [0124.098] GetSystemMetrics (nIndex=32) returned 4 [0124.098] GetSystemMetrics (nIndex=33) returned 4 [0124.098] CloseThemeData () returned 0x0 [0124.098] capGetDriverDescriptionA () returned 0x0 [0124.099] GetLastError () returned 0x0 [0124.099] SetLastError (dwErrCode=0x0) [0124.099] OpenThemeData () returned 0x59e0000 [0124.100] GetSystemMetrics (nIndex=32) returned 4 [0124.100] GetSystemMetrics (nIndex=33) returned 4 [0124.100] CloseThemeData () returned 0x0 [0124.100] capGetDriverDescriptionA () returned 0x0 [0124.100] GetLastError () returned 0x0 [0124.101] SetLastError (dwErrCode=0x0) [0124.101] OpenThemeData () returned 0x59f0000 [0124.101] GetSystemMetrics (nIndex=32) returned 4 [0124.101] GetSystemMetrics (nIndex=33) returned 4 [0124.101] CloseThemeData () returned 0x0 [0124.101] capGetDriverDescriptionA () returned 0x0 [0124.102] GetLastError () returned 0x0 [0124.102] SetLastError (dwErrCode=0x0) [0124.102] OpenThemeData () returned 0x5a00000 [0124.102] GetSystemMetrics (nIndex=32) returned 4 [0124.102] GetSystemMetrics (nIndex=33) returned 4 [0124.102] CloseThemeData () returned 0x0 [0124.103] capGetDriverDescriptionA () returned 0x0 [0124.103] GetLastError () returned 0x0 [0124.103] SetLastError (dwErrCode=0x0) [0124.103] OpenThemeData () returned 0x5a10000 [0124.104] GetSystemMetrics (nIndex=32) returned 4 [0124.104] GetSystemMetrics (nIndex=33) returned 4 [0124.104] CloseThemeData () returned 0x0 [0124.104] capGetDriverDescriptionA () returned 0x0 [0124.105] GetLastError () returned 0x0 [0124.105] SetLastError (dwErrCode=0x0) [0124.105] OpenThemeData () returned 0x5a20000 [0124.105] GetSystemMetrics (nIndex=32) returned 4 [0124.105] GetSystemMetrics (nIndex=33) returned 4 [0124.105] CloseThemeData () returned 0x0 [0124.106] capGetDriverDescriptionA () returned 0x0 [0124.106] GetLastError () returned 0x0 [0124.106] SetLastError (dwErrCode=0x0) [0124.106] OpenThemeData () returned 0x5a30000 [0124.107] GetSystemMetrics (nIndex=32) returned 4 [0124.107] GetSystemMetrics (nIndex=33) returned 4 [0124.107] CloseThemeData () returned 0x0 [0124.107] capGetDriverDescriptionA () returned 0x0 [0124.108] GetLastError () returned 0x0 [0124.108] SetLastError (dwErrCode=0x0) [0124.108] OpenThemeData () returned 0x5a40000 [0124.108] GetSystemMetrics (nIndex=32) returned 4 [0124.108] GetSystemMetrics (nIndex=33) returned 4 [0124.108] CloseThemeData () returned 0x0 [0124.108] capGetDriverDescriptionA () returned 0x0 [0124.109] GetLastError () returned 0x0 [0124.109] SetLastError (dwErrCode=0x0) [0124.109] OpenThemeData () returned 0x5a50000 [0124.110] GetSystemMetrics (nIndex=32) returned 4 [0124.110] GetSystemMetrics (nIndex=33) returned 4 [0124.110] CloseThemeData () returned 0x0 [0124.110] capGetDriverDescriptionA () returned 0x0 [0124.110] GetLastError () returned 0x0 [0124.111] SetLastError (dwErrCode=0x0) [0124.111] OpenThemeData () returned 0x5a60000 [0124.111] GetSystemMetrics (nIndex=32) returned 4 [0124.111] GetSystemMetrics (nIndex=33) returned 4 [0124.111] CloseThemeData () returned 0x0 [0124.111] capGetDriverDescriptionA () returned 0x0 [0124.112] GetLastError () returned 0x0 [0124.112] SetLastError (dwErrCode=0x0) [0124.112] OpenThemeData () returned 0x5a70000 [0124.736] GetSystemMetrics (nIndex=32) returned 4 [0124.736] GetSystemMetrics (nIndex=33) returned 4 [0124.736] CloseThemeData () returned 0x0 [0124.737] capGetDriverDescriptionA () returned 0x0 [0124.738] GetLastError () returned 0x0 [0124.738] SetLastError (dwErrCode=0x0) [0124.738] OpenThemeData () returned 0x5a80000 [0124.746] GetSystemMetrics (nIndex=32) returned 4 [0124.746] GetSystemMetrics (nIndex=33) returned 4 [0124.746] CloseThemeData () returned 0x0 [0124.746] capGetDriverDescriptionA () returned 0x0 [0124.747] GetLastError () returned 0x0 [0124.747] SetLastError (dwErrCode=0x0) [0124.747] OpenThemeData () returned 0x5a90000 [0124.748] GetSystemMetrics (nIndex=32) returned 4 [0124.748] GetSystemMetrics (nIndex=33) returned 4 [0124.748] CloseThemeData () returned 0x0 [0124.748] capGetDriverDescriptionA () returned 0x0 [0124.749] GetLastError () returned 0x0 [0124.749] SetLastError (dwErrCode=0x0) [0124.749] OpenThemeData () returned 0x5aa0000 [0124.749] GetSystemMetrics (nIndex=32) returned 4 [0124.749] GetSystemMetrics (nIndex=33) returned 4 [0124.749] CloseThemeData () returned 0x0 [0124.750] capGetDriverDescriptionA () returned 0x0 [0124.750] GetLastError () returned 0x0 [0124.750] SetLastError (dwErrCode=0x0) [0124.750] OpenThemeData () returned 0x5ab0000 [0124.751] GetSystemMetrics (nIndex=32) returned 4 [0124.751] GetSystemMetrics (nIndex=33) returned 4 [0124.751] CloseThemeData () returned 0x0 [0124.751] capGetDriverDescriptionA () returned 0x0 [0124.752] GetLastError () returned 0x0 [0124.752] SetLastError (dwErrCode=0x0) [0124.752] OpenThemeData () returned 0x5ac0000 [0124.752] GetSystemMetrics (nIndex=32) returned 4 [0124.753] GetSystemMetrics (nIndex=33) returned 4 [0124.753] CloseThemeData () returned 0x0 [0124.753] capGetDriverDescriptionA () returned 0x0 [0124.753] GetLastError () returned 0x0 [0124.754] SetLastError (dwErrCode=0x0) [0124.754] OpenThemeData () returned 0x5ad0000 [0124.754] GetSystemMetrics (nIndex=32) returned 4 [0124.754] GetSystemMetrics (nIndex=33) returned 4 [0124.754] CloseThemeData () returned 0x0 [0124.754] capGetDriverDescriptionA () returned 0x0 [0124.755] GetLastError () returned 0x0 [0124.755] SetLastError (dwErrCode=0x0) [0124.755] OpenThemeData () returned 0x5ae0000 [0124.756] GetSystemMetrics (nIndex=32) returned 4 [0124.756] GetSystemMetrics (nIndex=33) returned 4 [0124.756] CloseThemeData () returned 0x0 [0124.756] capGetDriverDescriptionA () returned 0x0 [0124.756] GetLastError () returned 0x0 [0124.757] SetLastError (dwErrCode=0x0) [0124.757] OpenThemeData () returned 0x5af0000 [0124.757] GetSystemMetrics (nIndex=32) returned 4 [0124.757] GetSystemMetrics (nIndex=33) returned 4 [0124.757] CloseThemeData () returned 0x0 [0124.757] capGetDriverDescriptionA () returned 0x0 [0124.758] GetLastError () returned 0x0 [0124.758] SetLastError (dwErrCode=0x0) [0124.758] OpenThemeData () returned 0x5b00000 [0124.758] GetSystemMetrics (nIndex=32) returned 4 [0124.758] GetSystemMetrics (nIndex=33) returned 4 [0124.758] CloseThemeData () returned 0x0 [0124.759] capGetDriverDescriptionA () returned 0x0 [0124.759] GetLastError () returned 0x0 [0124.759] SetLastError (dwErrCode=0x0) [0124.759] OpenThemeData () returned 0x5b10000 [0124.760] GetSystemMetrics (nIndex=32) returned 4 [0124.760] GetSystemMetrics (nIndex=33) returned 4 [0124.760] CloseThemeData () returned 0x0 [0124.760] capGetDriverDescriptionA () returned 0x0 [0124.761] GetLastError () returned 0x0 [0124.761] SetLastError (dwErrCode=0x0) [0124.761] OpenThemeData () returned 0x5b20000 [0124.761] GetSystemMetrics (nIndex=32) returned 4 [0124.761] GetSystemMetrics (nIndex=33) returned 4 [0124.761] CloseThemeData () returned 0x0 [0124.762] capGetDriverDescriptionA () returned 0x0 [0124.762] GetLastError () returned 0x0 [0124.762] SetLastError (dwErrCode=0x0) [0124.762] OpenThemeData () returned 0x5b30000 [0124.763] GetSystemMetrics (nIndex=32) returned 4 [0124.763] GetSystemMetrics (nIndex=33) returned 4 [0124.763] CloseThemeData () returned 0x0 [0124.763] capGetDriverDescriptionA () returned 0x0 [0124.764] GetLastError () returned 0x0 [0124.764] SetLastError (dwErrCode=0x0) [0124.764] OpenThemeData () returned 0x5b40000 [0124.764] GetSystemMetrics (nIndex=32) returned 4 [0124.764] GetSystemMetrics (nIndex=33) returned 4 [0124.764] CloseThemeData () returned 0x0 [0124.765] capGetDriverDescriptionA () returned 0x0 [0124.765] GetLastError () returned 0x0 [0124.765] SetLastError (dwErrCode=0x0) [0124.765] OpenThemeData () returned 0x5b50000 [0124.766] GetSystemMetrics (nIndex=32) returned 4 [0124.766] GetSystemMetrics (nIndex=33) returned 4 [0124.766] CloseThemeData () returned 0x0 [0124.766] capGetDriverDescriptionA () returned 0x0 [0124.767] GetLastError () returned 0x0 [0124.767] SetLastError (dwErrCode=0x0) [0124.767] OpenThemeData () returned 0x5b60000 [0124.767] GetSystemMetrics (nIndex=32) returned 4 [0124.767] GetSystemMetrics (nIndex=33) returned 4 [0124.767] CloseThemeData () returned 0x0 [0124.768] capGetDriverDescriptionA () returned 0x0 [0124.768] GetLastError () returned 0x0 [0124.769] SetLastError (dwErrCode=0x0) [0124.769] OpenThemeData () returned 0x5b70000 [0124.769] GetSystemMetrics (nIndex=32) returned 4 [0124.769] GetSystemMetrics (nIndex=33) returned 4 [0124.769] CloseThemeData () returned 0x0 [0124.769] capGetDriverDescriptionA () returned 0x0 [0124.770] GetLastError () returned 0x0 [0124.770] SetLastError (dwErrCode=0x0) [0124.770] OpenThemeData () returned 0x5b80000 [0124.770] GetSystemMetrics (nIndex=32) returned 4 [0124.770] GetSystemMetrics (nIndex=33) returned 4 [0124.771] CloseThemeData () returned 0x0 [0124.771] capGetDriverDescriptionA () returned 0x0 [0124.771] GetLastError () returned 0x0 [0124.771] SetLastError (dwErrCode=0x0) [0124.772] OpenThemeData () returned 0x5b90000 [0124.772] GetSystemMetrics (nIndex=32) returned 4 [0124.772] GetSystemMetrics (nIndex=33) returned 4 [0124.772] CloseThemeData () returned 0x0 [0124.772] capGetDriverDescriptionA () returned 0x0 [0124.773] GetLastError () returned 0x0 [0124.773] SetLastError (dwErrCode=0x0) [0124.773] OpenThemeData () returned 0x5ba0000 [0124.773] GetSystemMetrics (nIndex=32) returned 4 [0124.773] GetSystemMetrics (nIndex=33) returned 4 [0124.773] CloseThemeData () returned 0x0 [0124.774] capGetDriverDescriptionA () returned 0x0 [0124.774] GetLastError () returned 0x0 [0124.774] SetLastError (dwErrCode=0x0) [0124.774] OpenThemeData () returned 0x5bb0000 [0124.775] GetSystemMetrics (nIndex=32) returned 4 [0124.775] GetSystemMetrics (nIndex=33) returned 4 [0124.775] CloseThemeData () returned 0x0 [0124.775] capGetDriverDescriptionA () returned 0x0 [0124.776] GetLastError () returned 0x0 [0124.776] SetLastError (dwErrCode=0x0) [0124.776] OpenThemeData () returned 0x5bc0000 [0124.776] GetSystemMetrics (nIndex=32) returned 4 [0124.776] GetSystemMetrics (nIndex=33) returned 4 [0124.776] CloseThemeData () returned 0x0 [0124.777] capGetDriverDescriptionA () returned 0x0 [0124.777] GetLastError () returned 0x0 [0124.777] SetLastError (dwErrCode=0x0) [0124.777] OpenThemeData () returned 0x5bd0000 [0124.778] GetSystemMetrics (nIndex=32) returned 4 [0124.778] GetSystemMetrics (nIndex=33) returned 4 [0124.778] CloseThemeData () returned 0x0 [0124.778] capGetDriverDescriptionA () returned 0x0 [0124.779] GetLastError () returned 0x0 [0124.779] SetLastError (dwErrCode=0x0) [0124.779] OpenThemeData () returned 0x5be0000 [0124.779] GetSystemMetrics (nIndex=32) returned 4 [0124.779] GetSystemMetrics (nIndex=33) returned 4 [0124.779] CloseThemeData () returned 0x0 [0124.780] capGetDriverDescriptionA () returned 0x0 [0124.780] GetLastError () returned 0x0 [0124.780] SetLastError (dwErrCode=0x0) [0124.780] OpenThemeData () returned 0x5bf0000 [0124.781] GetSystemMetrics (nIndex=32) returned 4 [0124.781] GetSystemMetrics (nIndex=33) returned 4 [0124.781] CloseThemeData () returned 0x0 [0124.781] capGetDriverDescriptionA () returned 0x0 [0124.782] GetLastError () returned 0x0 [0124.782] SetLastError (dwErrCode=0x0) [0124.782] OpenThemeData () returned 0x5c00000 [0124.782] GetSystemMetrics (nIndex=32) returned 4 [0124.782] GetSystemMetrics (nIndex=33) returned 4 [0124.782] CloseThemeData () returned 0x0 [0124.783] capGetDriverDescriptionA () returned 0x0 [0124.783] GetLastError () returned 0x0 [0124.783] SetLastError (dwErrCode=0x0) Thread: id = 24 os_tid = 0x58c Thread: id = 305 os_tid = 0x14c0 Thread: id = 316 os_tid = 0x14ec Process: id = "4" image_name = "lhzeuvwtslan.exe" filename = "c:\\users\\fd1hvy\\desktop\\lhzeuvwtslan.exe" page_root = "0x24c62000" os_pid = "0xfa4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13a8" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\LhzeuvWtslan.exe\" 8 LAN" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 25 os_tid = 0xfa0 [0097.657] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0097.657] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x74d70000 [0097.661] GetProcAddress (hModule=0x74d70000, lpProcName="InitializeCriticalSectionEx") returned 0x74e67060 [0097.661] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x74d70000 [0097.661] GetProcAddress (hModule=0x74d70000, lpProcName="FlsAlloc") returned 0x74e6bea0 [0097.662] GetProcAddress (hModule=0x74d70000, lpProcName="FlsSetValue") returned 0x74e62550 [0097.663] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x74d70000 [0097.663] GetProcAddress (hModule=0x74d70000, lpProcName="InitializeCriticalSectionEx") returned 0x74e67060 [0097.663] GetProcessHeap () returned 0x5d0000 [0097.663] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x74d70000 [0097.664] GetProcAddress (hModule=0x74d70000, lpProcName="FlsAlloc") returned 0x74e6bea0 [0097.664] GetLastError () returned 0xcb [0097.664] GetProcAddress (hModule=0x74d70000, lpProcName="FlsGetValue") returned 0x74e570c0 [0097.664] GetProcAddress (hModule=0x74d70000, lpProcName="FlsSetValue") returned 0x74e62550 [0097.664] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x364) returned 0x5fa908 [0097.664] SetLastError (dwErrCode=0xcb) [0097.665] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xe00) returned 0x5fac78 [0097.857] GetStartupInfoW (in: lpStartupInfo=0x19fe9c | out: lpStartupInfo=0x19fe9c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\LhzeuvWtslan.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0097.857] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0097.857] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0097.857] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0097.857] GetCommandLineA () returned="\"C:\\Users\\FD1HVy\\Desktop\\LhzeuvWtslan.exe\" 8 LAN" [0097.857] GetCommandLineW () returned="\"C:\\Users\\FD1HVy\\Desktop\\LhzeuvWtslan.exe\" 8 LAN" [0097.857] GetACP () returned 0x4e4 [0097.857] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x220) returned 0x5f8470 [0097.857] IsValidCodePage (CodePage=0x4e4) returned 1 [0097.858] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19febc | out: lpCPInfo=0x19febc) returned 1 [0097.858] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19f784 | out: lpCPInfo=0x19f784) returned 1 [0097.858] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0097.858] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x19f528, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿỂ㔈Ā") returned 256 [0097.858] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿỂ㔈Ā", cchSrc=256, lpCharType=0x19f798 | out: lpCharType=0x19f798) returned 1 [0097.858] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0097.858] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x19f4d8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0097.858] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x74d70000 [0097.858] GetProcAddress (hModule=0x74d70000, lpProcName="LCMapStringEx") returned 0x74e4ed00 [0097.858] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0097.858] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x19f2c8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0097.858] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x19fc98, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿø c?Ôþ\x19", lpUsedDefaultChar=0x0) returned 256 [0097.858] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0097.858] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x19f4f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ흹㔇Ā") returned 256 [0097.858] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ흹㔇Ā", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0097.858] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ흹㔇Ā", cchSrc=256, lpDestStr=0x19f2e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0097.858] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x19fb98, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿø c?Ôþ\x19", lpUsedDefaultChar=0x0) returned 256 [0097.858] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x80) returned 0x5e8098 [0097.858] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x19fce0, nSize=0x105 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\LhzeuvWtslan.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\lhzeuvwtslan.exe")) returned 0x28 [0097.858] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x73b80000 [0097.859] GetProcAddress (hModule=0x73b80000, lpProcName="AreFileApisANSI") returned 0x73b94280 [0097.859] AreFileApisANSI () returned 1 [0097.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\LhzeuvWtslan.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0097.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\LhzeuvWtslan.exe", cchWideChar=-1, lpMultiByteStr=0x350c3940, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\Desktop\\LhzeuvWtslan.exe", lpUsedDefaultChar=0x0) returned 41 [0097.859] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x3f) returned 0x5e3af8 [0097.859] RtlInitializeSListHead (in: ListHead=0x350c3870 | out: ListHead=0x350c3870) [0097.859] GetLastError () returned 0x0 [0097.859] SetLastError (dwErrCode=0x0) [0097.859] GetEnvironmentStringsW () returned 0x5fba80* [0097.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0097.859] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x565) returned 0x5f8ad0 [0097.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x5f8ad0, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0097.859] FreeEnvironmentStringsW (penv=0x5fba80) returned 1 [0097.859] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x94) returned 0x5e7cb0 [0097.859] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x1f) returned 0x5f4d68 [0097.859] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x28) returned 0x5ec830 [0097.859] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x37) returned 0x5f1bd8 [0097.859] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x3c) returned 0x5e3ea0 [0097.859] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x31) returned 0x5f1818 [0097.859] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x14) returned 0x5eba50 [0097.859] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x24) returned 0x5ec9e0 [0097.859] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xd) returned 0x5f9618 [0097.859] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x17) returned 0x5ebb70 [0097.859] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x2b) returned 0x5e1d38 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x15) returned 0x5ebd70 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x17) returned 0x5ebb90 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x22) returned 0x5ec740 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xe) returned 0x5f9690 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xc1) returned 0x5e6d48 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x3e) returned 0x5e3fc0 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x1b) returned 0x5f4c50 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x1d) returned 0x5f4b38 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x48) returned 0x5e86e8 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5eba70 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb9f0 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x1b) returned 0x5f4c00 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x24) returned 0x5ec950 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x29) returned 0x5e1ad0 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x1e) returned 0x5f4c28 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x6b) returned 0x5e4680 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x17) returned 0x5eb9d0 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xf) returned 0x5f97b0 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x16) returned 0x5ebbb0 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x28) returned 0x5ec7d0 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x27) returned 0x5ec920 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5ebc10 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x21) returned 0x5ec710 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x10) returned 0x5f96a8 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x1c) returned 0x5f4c78 [0097.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5eba30 [0097.860] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5f8ad0 | out: hHeap=0x5d0000) returned 1 [0097.860] GetModuleHandleW (lpModuleName="api-ms-win-core-synch-l1-2-0.dll") returned 0x74d70000 [0097.861] GetProcAddress (hModule=0x74d70000, lpProcName="SleepConditionVariableCS") returned 0x74edfca0 [0097.861] GetProcAddress (hModule=0x74d70000, lpProcName="WakeAllConditionVariable") returned 0x76f28a90 [0097.861] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x800) returned 0x5f8ad0 [0097.861] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0097.861] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x35063e92) returned 0x0 [0097.861] GetStartupInfoW (in: lpStartupInfo=0x19ff00 | out: lpStartupInfo=0x19ff00*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\LhzeuvWtslan.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0097.861] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x3bd8) returned 0x5fbec8 [0097.861] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x5c) returned 0x5d6788 [0097.861] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc0) returned 0x5e44e8 [0097.861] FtpSetCurrentDirectoryA (hConnect=0x350c2a70, lpszDirectory=0x0) returned 0 [0097.862] wglShareLists () returned 0x0 [0097.862] GetFocus () returned 0x0 [0097.862] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0097.862] GetFocus () returned 0x0 [0097.862] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0097.862] GetFocus () returned 0x0 [0097.862] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0097.862] GetFocus () returned 0x0 [0097.862] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0097.862] GetFocus () returned 0x0 [0097.862] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0097.862] GetFocus () returned 0x0 [0097.862] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0097.862] GetFocus () returned 0x0 [0097.862] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0097.862] GetFocus () returned 0x0 [0097.863] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0097.863] GetFocus () returned 0x0 [0097.863] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0097.863] GetFocus () returned 0x0 [0097.863] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0097.863] GetFocus () returned 0x0 [0097.863] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0097.863] GetFocus () returned 0x0 [0097.863] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0097.863] GetFocus () returned 0x0 [0097.863] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0097.863] GetFocus () returned 0x0 [0097.863] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0097.863] GetFocus () returned 0x0 [0097.863] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0097.863] GetFocus () returned 0x0 [0097.863] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0097.863] GetFocus () returned 0x0 [0097.863] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0097.863] GetFocus () returned 0x0 [0097.863] DrawFocusRect (hDC=0x0, lprc=0x19fc7c) returned 0 [0097.863] SetFocus (hWnd=0x0) returned 0x0 [0097.863] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.864] SetFocus (hWnd=0x0) returned 0x0 [0097.864] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.864] SetFocus (hWnd=0x0) returned 0x0 [0097.864] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.864] SetFocus (hWnd=0x0) returned 0x0 [0097.864] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.864] SetFocus (hWnd=0x0) returned 0x0 [0097.864] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.864] SetFocus (hWnd=0x0) returned 0x0 [0097.864] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.864] SetFocus (hWnd=0x0) returned 0x0 [0097.864] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.864] SetFocus (hWnd=0x0) returned 0x0 [0097.864] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.864] SetFocus (hWnd=0x0) returned 0x0 [0097.864] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.864] SetFocus (hWnd=0x0) returned 0x0 [0097.864] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.864] SetFocus (hWnd=0x0) returned 0x0 [0097.864] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.864] SetFocus (hWnd=0x0) returned 0x0 [0097.864] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.864] SetFocus (hWnd=0x0) returned 0x0 [0097.865] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.865] SetFocus (hWnd=0x0) returned 0x0 [0097.865] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.865] SetFocus (hWnd=0x0) returned 0x0 [0097.865] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.865] SetFocus (hWnd=0x0) returned 0x0 [0097.865] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.865] SetFocus (hWnd=0x0) returned 0x0 [0097.865] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.865] SetFocus (hWnd=0x0) returned 0x0 [0097.865] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.865] SetFocus (hWnd=0x0) returned 0x0 [0097.865] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.865] SetFocus (hWnd=0x0) returned 0x0 [0097.865] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.865] SetFocus (hWnd=0x0) returned 0x0 [0097.865] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.865] SetFocus (hWnd=0x0) returned 0x0 [0097.865] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.865] SetFocus (hWnd=0x0) returned 0x0 [0097.865] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.865] SetFocus (hWnd=0x0) returned 0x0 [0097.865] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.865] SetFocus (hWnd=0x0) returned 0x0 [0097.865] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.866] SetFocus (hWnd=0x0) returned 0x0 [0097.866] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.866] SetFocus (hWnd=0x0) returned 0x0 [0097.866] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.866] SetFocus (hWnd=0x0) returned 0x0 [0097.866] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.866] SetFocus (hWnd=0x0) returned 0x0 [0097.866] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.866] SetFocus (hWnd=0x0) returned 0x0 [0097.866] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.866] SetFocus (hWnd=0x0) returned 0x0 [0097.866] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.866] SetFocus (hWnd=0x0) returned 0x0 [0097.866] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.866] SetFocus (hWnd=0x0) returned 0x0 [0097.866] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.866] SetFocus (hWnd=0x0) returned 0x0 [0097.866] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.866] SetFocus (hWnd=0x0) returned 0x0 [0097.866] SendMessageA (hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0097.866] GetLastError () returned 0x578 [0097.866] GetStockObject (i=1) returned 0x900014 [0097.866] NetGetJoinInformation (in: lpServer=0x0, lpNameBuffer=0x19fc68, BufferType=0x19fc70 | out: lpNameBuffer=0x19fc68*="WORKGROUP", BufferType=0x19fc70) returned 0x0 [0098.177] NetApiBufferFree (Buffer=0x5ec860) returned 0x0 [0098.177] CreateHalftonePalette (hdc=0x0) returned 0x80854 [0098.177] SelectPalette (hdc=0x0, hPal=0x0, bForceBkgd=0) returned 0x0 [0098.177] RealizePalette (hdc=0x0) returned 0xffffffff [0098.177] DeleteObject (ho=0x0) returned 0 [0098.177] QuerySecurityPackageInfoW (in: pPackageName=0x350a9f90, ppPackageInfo=0x19fc6c | out: ppPackageInfo=0x19fc6c) returned 0x0 [0098.238] AcquireCredentialsHandleW (in: pPrincipal=0x0, pPackage=0x350a9f9c, fCredentialUse=0x2, pvLogonId=0x0, pAuthData=0x0, pGetKeyFn=0x0, pvGetKeyArgument=0x0, phCredential=0x19fc7c, ptsExpiry=0x19fc74 | out: phCredential=0x19fc7c, ptsExpiry=0x19fc74) returned 0x0 [0098.239] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xb48) returned 0x605988 [0098.239] SetLayout (hdc=0x1, l=0x1) returned 0xffffffff [0098.239] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName="lll") returned 0x2d8 [0098.239] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8) returned 0x601f28 [0098.239] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x20) returned 0x5f46d8 [0098.239] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x5f98e8 [0098.239] SetTextJustification (hdc=0x0, extra=0, count=0) returned 0 [0098.239] GetCursorPos (in: lpPoint=0x19f990 | out: lpPoint=0x19f990*(x=286, y=695)) returned 1 [0098.239] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.239] GetCursorPos (in: lpPoint=0x19f9c8 | out: lpPoint=0x19f9c8*(x=286, y=695)) returned 1 [0098.239] FindResourceExA (hModule=0x35000000, lpType="CODE", lpName="MYCODE", wLanguage=0x0) returned 0x0 [0098.239] PdhAddCounterW (in: hQuery=0x0, szFullCounterPath=0x0, dwUserData=0x0, phCounter=0x19f9a8 | out: phCounter=0x19f9a8) returned 0xc0000bbd [0098.239] GetMenuCheckMarkDimensions () returned 983055 [0098.240] GetCursorPos (in: lpPoint=0x350c34e4 | out: lpPoint=0x350c34e4*(x=286, y=695)) returned 1 [0098.240] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0x12b) returned 0x102 [0098.556] TrackPopupMenuEx (param_1=0x0, param_2=0x40, param_3=286, param_4=695, param_5=0x0, param_6=0x0) returned 0 [0098.557] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.557] GetCursorPos (in: lpPoint=0x19f9c8 | out: lpPoint=0x19f9c8*(x=286, y=695)) returned 1 [0098.557] GetScrollPos (hWnd=0x0, nBar=22) returned 0 [0098.557] GetScrollRange (in: hWnd=0x0, nBar=22, lpMinPos=0x19f980, lpMaxPos=0x19f9a8 | out: lpMinPos=0x19f980, lpMaxPos=0x19f9a8) returned 0 [0098.557] FindResourceExA (hModule=0x35000000, lpType="CODE", lpName="MYCODE", wLanguage=0x0) returned 0x0 [0098.557] PdhAddCounterW (in: hQuery=0x0, szFullCounterPath=0x0, dwUserData=0x0, phCounter=0x19f9a8 | out: phCounter=0x19f9a8) returned 0xc0000bbd [0098.557] GetMenuCheckMarkDimensions () returned 983055 [0098.557] GetCursorPos (in: lpPoint=0x350c34e4 | out: lpPoint=0x350c34e4*(x=286, y=695)) returned 1 [0098.557] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0x12b) returned 0x102 [0099.119] TrackPopupMenuEx (param_1=0x0, param_2=0x40, param_3=1257, param_4=803, param_5=0x0, param_6=0x0) returned 0 [0099.119] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0099.119] GetCursorPos (in: lpPoint=0x19f9c8 | out: lpPoint=0x19f9c8*(x=286, y=695)) returned 1 [0099.119] FindResourceExA (hModule=0x35000000, lpType="CODE", lpName="MYCODE", wLanguage=0x0) returned 0x0 [0099.119] PdhAddCounterW (in: hQuery=0x0, szFullCounterPath=0x0, dwUserData=0x0, phCounter=0x19f9a8 | out: phCounter=0x19f9a8) returned 0xc0000bbd [0099.119] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.120] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.120] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.120] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.120] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.120] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.120] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.120] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.120] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.120] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.120] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.120] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.120] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.120] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.120] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.120] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.120] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.120] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.120] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.120] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.120] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.120] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.120] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.120] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.120] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.120] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.121] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.121] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.121] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.121] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.121] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.121] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.121] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.121] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.121] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.121] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.121] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.121] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.121] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.121] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.121] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.121] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.121] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.121] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.121] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.121] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.121] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.121] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.121] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.121] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.121] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.121] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.121] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.121] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.122] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.122] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.122] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.122] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.122] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.122] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.122] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.122] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.122] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.122] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.122] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.122] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.122] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.122] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.122] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.122] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.122] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.122] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.122] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.122] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.122] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.122] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.122] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.122] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.122] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.122] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.122] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.122] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.123] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.123] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.123] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.123] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.123] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.123] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.123] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.123] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.123] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.123] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.123] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.123] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.123] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.123] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.123] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.123] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.123] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.123] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.123] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.123] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.123] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.123] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.123] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.123] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.123] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.123] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.123] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.123] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.124] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.124] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.124] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.124] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.124] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.124] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.124] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.124] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.124] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.124] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.124] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.124] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.124] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.124] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.124] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.124] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.124] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.124] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.124] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.124] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.124] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.124] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.124] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.124] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.124] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.124] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.124] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.124] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.125] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.125] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.125] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.125] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.125] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.125] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.125] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.125] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.125] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.125] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.125] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.125] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.125] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.125] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.125] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.125] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.125] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.125] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.125] GetClassLongA (hWnd=0x0, nIndex=-26) returned 0x0 [0099.125] SetClassLongA (hWnd=0x0, nIndex=-26, dwNewLong=512) returned 0x0 [0099.125] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5f98e8 | out: hHeap=0x5d0000) returned 1 [0099.125] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5f46d8 | out: hHeap=0x5d0000) returned 1 [0099.125] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f28 | out: hHeap=0x5d0000) returned 1 [0099.125] FillConsoleOutputCharacterA (in: hConsoleOutput=0x0, cCharacter=32, nLength=0x0, dwWriteCoord=0x0, lpNumberOfCharsWritten=0x19f9a8 | out: lpNumberOfCharsWritten=0x19f9a8) returned 0 [0099.125] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x602078 [0099.125] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x6020f8 [0099.125] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x602078 | out: hHeap=0x5d0000) returned 1 [0099.125] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x601fb8 [0099.125] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6020f8 | out: hHeap=0x5d0000) returned 1 [0099.125] GetFocus () returned 0x0 [0099.126] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.126] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.126] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.126] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.126] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.126] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.126] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.126] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.126] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.126] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601fb8 | out: hHeap=0x5d0000) returned 1 [0099.126] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x6020f8 [0099.126] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x6020e8 [0099.126] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6020f8 | out: hHeap=0x5d0000) returned 1 [0099.126] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x601f98 [0099.126] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6020e8 | out: hHeap=0x5d0000) returned 1 [0099.126] GetFocus () returned 0x0 [0099.126] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.126] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.126] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.126] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.126] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.126] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.127] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.127] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.127] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.127] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f98 | out: hHeap=0x5d0000) returned 1 [0099.127] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x601fd8 [0099.127] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x601f78 [0099.127] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601fd8 | out: hHeap=0x5d0000) returned 1 [0099.127] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x6020f8 [0099.127] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f78 | out: hHeap=0x5d0000) returned 1 [0099.127] GetFocus () returned 0x0 [0099.127] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.127] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.127] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.127] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.127] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.127] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.127] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.127] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.127] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.127] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6020f8 | out: hHeap=0x5d0000) returned 1 [0099.127] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x602038 [0099.127] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x601f78 [0099.127] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x602038 | out: hHeap=0x5d0000) returned 1 [0099.127] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x601f18 [0099.127] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f78 | out: hHeap=0x5d0000) returned 1 [0099.127] GetFocus () returned 0x0 [0099.128] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.128] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.128] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.128] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.128] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.128] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.128] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.128] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.128] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.128] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f18 | out: hHeap=0x5d0000) returned 1 [0099.128] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x601fd8 [0099.128] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x6020c8 [0099.128] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601fd8 | out: hHeap=0x5d0000) returned 1 [0099.128] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x602098 [0099.128] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6020c8 | out: hHeap=0x5d0000) returned 1 [0099.128] GetFocus () returned 0x0 [0099.128] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.128] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.128] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.128] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.128] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.128] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.129] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.129] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.129] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.129] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x602098 | out: hHeap=0x5d0000) returned 1 [0099.129] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x601fa8 [0099.129] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x6020b8 [0099.129] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601fa8 | out: hHeap=0x5d0000) returned 1 [0099.129] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x6020c8 [0099.129] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6020b8 | out: hHeap=0x5d0000) returned 1 [0099.129] GetFocus () returned 0x0 [0099.129] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.129] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.129] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.129] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.129] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.129] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.129] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.129] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.129] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.129] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6020c8 | out: hHeap=0x5d0000) returned 1 [0099.129] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x601fd8 [0099.129] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x601f78 [0099.129] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601fd8 | out: hHeap=0x5d0000) returned 1 [0099.129] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x602098 [0099.129] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f78 | out: hHeap=0x5d0000) returned 1 [0099.129] GetFocus () returned 0x0 [0099.130] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.130] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.130] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.130] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.130] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.130] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.130] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.130] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.130] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.130] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x602098 | out: hHeap=0x5d0000) returned 1 [0099.130] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x601f78 [0099.130] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x601f98 [0099.130] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f78 | out: hHeap=0x5d0000) returned 1 [0099.130] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x601fe8 [0099.130] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f98 | out: hHeap=0x5d0000) returned 1 [0099.130] GetFocus () returned 0x0 [0099.130] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.130] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.130] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.130] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.130] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.130] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.130] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.131] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.131] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.131] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601fe8 | out: hHeap=0x5d0000) returned 1 [0099.131] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x6020f8 [0099.131] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x601fb8 [0099.131] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6020f8 | out: hHeap=0x5d0000) returned 1 [0099.131] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x601f28 [0099.131] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601fb8 | out: hHeap=0x5d0000) returned 1 [0099.131] GetFocus () returned 0x0 [0099.131] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.131] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.131] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.131] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.131] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.131] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.131] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.131] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.131] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.131] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f28 | out: hHeap=0x5d0000) returned 1 [0099.131] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x601ff8 [0099.131] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x6020e8 [0099.131] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601ff8 | out: hHeap=0x5d0000) returned 1 [0099.131] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x601fd8 [0099.131] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6020e8 | out: hHeap=0x5d0000) returned 1 [0099.131] GetFocus () returned 0x0 [0099.131] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.132] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.132] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.132] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.132] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.132] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.132] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.132] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.132] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.132] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601fd8 | out: hHeap=0x5d0000) returned 1 [0099.132] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x6020a8 [0099.132] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x602048 [0099.132] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6020a8 | out: hHeap=0x5d0000) returned 1 [0099.132] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x601f48 [0099.132] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x602048 | out: hHeap=0x5d0000) returned 1 [0099.132] GetFocus () returned 0x0 [0099.132] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.132] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.132] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.132] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.132] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.132] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.132] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.132] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.133] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.133] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f48 | out: hHeap=0x5d0000) returned 1 [0099.133] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x601f18 [0099.133] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x601f88 [0099.133] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f18 | out: hHeap=0x5d0000) returned 1 [0099.133] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x602038 [0099.133] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f88 | out: hHeap=0x5d0000) returned 1 [0099.133] GetFocus () returned 0x0 [0099.133] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.133] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.133] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.133] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.133] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.133] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.133] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.133] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.133] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.133] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x602038 | out: hHeap=0x5d0000) returned 1 [0099.133] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x601f78 [0099.133] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x601f88 [0099.133] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f78 | out: hHeap=0x5d0000) returned 1 [0099.133] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x6020e8 [0099.133] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f88 | out: hHeap=0x5d0000) returned 1 [0099.133] GetFocus () returned 0x0 [0099.133] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.133] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.134] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.134] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.134] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.134] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.134] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.134] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.134] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.134] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6020e8 | out: hHeap=0x5d0000) returned 1 [0099.134] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x6020b8 [0099.134] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x601f98 [0099.134] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6020b8 | out: hHeap=0x5d0000) returned 1 [0099.134] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x601f78 [0099.134] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f98 | out: hHeap=0x5d0000) returned 1 [0099.134] GetFocus () returned 0x0 [0099.134] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.134] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.134] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.134] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.134] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.134] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.135] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.135] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.135] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.135] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f78 | out: hHeap=0x5d0000) returned 1 [0099.135] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x602018 [0099.135] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x602008 [0099.135] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x602018 | out: hHeap=0x5d0000) returned 1 [0099.135] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x601f18 [0099.135] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x602008 | out: hHeap=0x5d0000) returned 1 [0099.135] GetFocus () returned 0x0 [0099.135] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.135] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.135] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.135] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.135] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.135] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.135] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.135] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.135] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.135] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f18 | out: hHeap=0x5d0000) returned 1 [0099.135] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x602008 [0099.135] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x601f88 [0099.135] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x602008 | out: hHeap=0x5d0000) returned 1 [0099.135] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x6020c8 [0099.135] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f88 | out: hHeap=0x5d0000) returned 1 [0099.135] GetFocus () returned 0x0 [0099.136] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.136] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.136] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.136] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.136] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.136] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.136] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.136] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.136] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.136] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6020c8 | out: hHeap=0x5d0000) returned 1 [0099.136] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x601fd8 [0099.136] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x6020f8 [0099.136] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601fd8 | out: hHeap=0x5d0000) returned 1 [0099.136] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x602078 [0099.136] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6020f8 | out: hHeap=0x5d0000) returned 1 [0099.136] GetFocus () returned 0x0 [0099.136] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.136] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.136] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.136] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.136] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.136] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.136] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.137] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.137] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.137] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x602078 | out: hHeap=0x5d0000) returned 1 [0099.137] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x602098 [0099.137] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x6020e8 [0099.137] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x602098 | out: hHeap=0x5d0000) returned 1 [0099.137] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x602018 [0099.137] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6020e8 | out: hHeap=0x5d0000) returned 1 [0099.137] GetFocus () returned 0x0 [0099.137] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.137] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.137] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.137] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.137] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.137] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.137] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.137] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.137] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.137] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x602018 | out: hHeap=0x5d0000) returned 1 [0099.137] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x601f78 [0099.137] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x6020c8 [0099.137] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f78 | out: hHeap=0x5d0000) returned 1 [0099.137] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x602008 [0099.137] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6020c8 | out: hHeap=0x5d0000) returned 1 [0099.137] GetFocus () returned 0x0 [0099.138] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.138] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.138] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.138] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.138] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.138] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.138] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.138] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.138] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.138] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x602008 | out: hHeap=0x5d0000) returned 1 [0099.138] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x602018 [0099.138] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x602068 [0099.138] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x602018 | out: hHeap=0x5d0000) returned 1 [0099.138] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x601fd8 [0099.138] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x602068 | out: hHeap=0x5d0000) returned 1 [0099.138] GetFocus () returned 0x0 [0099.138] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.138] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.138] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.138] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.138] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.138] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.138] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.139] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.139] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.139] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601fd8 | out: hHeap=0x5d0000) returned 1 [0099.139] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x601f38 [0099.139] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x602078 [0099.139] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f38 | out: hHeap=0x5d0000) returned 1 [0099.139] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x6020b8 [0099.139] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x602078 | out: hHeap=0x5d0000) returned 1 [0099.139] GetFocus () returned 0x0 [0099.139] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.139] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.139] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.139] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.139] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.139] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.139] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.139] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.139] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.139] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6020b8 | out: hHeap=0x5d0000) returned 1 [0099.139] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x601fd8 [0099.139] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x602058 [0099.139] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601fd8 | out: hHeap=0x5d0000) returned 1 [0099.139] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x602098 [0099.139] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x602058 | out: hHeap=0x5d0000) returned 1 [0099.139] GetFocus () returned 0x0 [0099.139] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.140] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.140] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.140] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.140] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.140] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.140] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.140] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.140] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.140] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x602098 | out: hHeap=0x5d0000) returned 1 [0099.140] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x601f18 [0099.140] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x6020e8 [0099.140] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f18 | out: hHeap=0x5d0000) returned 1 [0099.140] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x601f88 [0099.140] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6020e8 | out: hHeap=0x5d0000) returned 1 [0099.140] GetFocus () returned 0x0 [0099.140] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.140] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.140] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.140] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.140] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.140] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.140] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.140] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.141] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.141] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f88 | out: hHeap=0x5d0000) returned 1 [0099.141] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x601f18 [0099.141] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x6020f8 [0099.141] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f18 | out: hHeap=0x5d0000) returned 1 [0099.141] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x6020c8 [0099.141] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6020f8 | out: hHeap=0x5d0000) returned 1 [0099.141] GetFocus () returned 0x0 [0099.141] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.141] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.141] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.141] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.141] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.141] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.141] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.141] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.141] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.141] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6020c8 | out: hHeap=0x5d0000) returned 1 [0099.141] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x601f78 [0099.141] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x601f88 [0099.141] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f78 | out: hHeap=0x5d0000) returned 1 [0099.141] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x601ff8 [0099.141] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f88 | out: hHeap=0x5d0000) returned 1 [0099.141] GetFocus () returned 0x0 [0099.141] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.141] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.142] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601ff8 | out: hHeap=0x5d0000) returned 1 [0099.142] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x602018 [0099.142] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x601ff8 [0099.142] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x602018 | out: hHeap=0x5d0000) returned 1 [0099.142] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x601f18 [0099.142] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601ff8 | out: hHeap=0x5d0000) returned 1 [0099.142] GetFocus () returned 0x0 [0099.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.142] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.143] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.143] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f18 | out: hHeap=0x5d0000) returned 1 [0099.143] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x601f18 [0099.143] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x602048 [0099.143] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f18 | out: hHeap=0x5d0000) returned 1 [0099.143] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x6020a8 [0099.143] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x602048 | out: hHeap=0x5d0000) returned 1 [0099.143] GetFocus () returned 0x0 [0099.143] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.143] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.143] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.143] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.143] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.143] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.143] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.143] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.143] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.143] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6020a8 | out: hHeap=0x5d0000) returned 1 [0099.143] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x2) returned 0x601f78 [0099.143] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x601ff8 [0099.143] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601f78 | out: hHeap=0x5d0000) returned 1 [0099.143] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x6020b8 [0099.143] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x601ff8 | out: hHeap=0x5d0000) returned 1 [0099.143] GetFocus () returned 0x0 [0099.143] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.143] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.144] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.144] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.144] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.144] SetMenu (hWnd=0x0, hMenu=0x0) returned 0 [0099.144] GetFocus () returned 0x0 [0099.144] GetFocus () returned 0x0 [0099.145] GetFocus () returned 0x0 [0099.145] GetFocus () returned 0x0 [0099.145] GetFocus () returned 0x0 [0099.145] GetFocus () returned 0x0 [0099.145] GetFocus () returned 0x0 [0099.146] GetFocus () returned 0x0 [0099.146] GetFocus () returned 0x0 [0099.146] GetFocus () returned 0x0 [0099.146] GetFocus () returned 0x0 [0099.146] GetFocus () returned 0x0 [0099.147] GetFocus () returned 0x0 [0099.147] GetFocus () returned 0x0 [0099.147] GetFocus () returned 0x0 [0099.147] GetFocus () returned 0x0 [0099.148] GetFocus () returned 0x0 [0099.148] GetFocus () returned 0x0 [0099.148] GetFocus () returned 0x0 [0099.148] GetFocus () returned 0x0 [0099.148] GetFocus () returned 0x0 [0099.149] GetFocus () returned 0x0 [0099.149] GetFocus () returned 0x0 [0099.149] GetFocus () returned 0x0 [0099.150] GetFocus () returned 0x0 [0099.150] GetFocus () returned 0x0 [0099.150] GetFocus () returned 0x0 [0099.151] GetFocus () returned 0x0 [0099.151] GetFocus () returned 0x0 [0099.151] GetFocus () returned 0x0 [0099.151] GetFocus () returned 0x0 [0099.151] GetFocus () returned 0x0 [0099.152] GetFocus () returned 0x0 [0099.152] GetFocus () returned 0x0 [0099.152] GetFocus () returned 0x0 [0099.152] GetFocus () returned 0x0 [0099.153] GetFocus () returned 0x0 [0099.153] GetFocus () returned 0x0 [0099.153] GetFocus () returned 0x0 [0099.153] GetFocus () returned 0x0 [0099.153] GetFocus () returned 0x0 [0099.154] GetFocus () returned 0x0 [0099.154] GetFocus () returned 0x0 [0099.154] GetFocus () returned 0x0 [0099.154] GetFocus () returned 0x0 [0099.154] GetFocus () returned 0x0 [0099.155] GetFocus () returned 0x0 [0099.155] GetFocus () returned 0x0 [0099.155] GetFocus () returned 0x0 [0099.155] GetFocus () returned 0x0 [0099.156] GetFocus () returned 0x0 [0099.156] GetFocus () returned 0x0 [0099.156] GetFocus () returned 0x0 [0099.156] GetFocus () returned 0x0 [0099.156] GetFocus () returned 0x0 [0099.157] GetFocus () returned 0x0 [0099.157] GetFocus () returned 0x0 [0099.157] GetFocus () returned 0x0 [0099.157] GetFocus () returned 0x0 [0099.158] GetFocus () returned 0x0 [0099.158] GetFocus () returned 0x0 [0099.158] GetFocus () returned 0x0 [0099.158] GetFocus () returned 0x0 [0099.158] GetFocus () returned 0x0 [0099.159] GetFocus () returned 0x0 [0099.159] GetFocus () returned 0x0 [0099.159] GetFocus () returned 0x0 [0099.159] GetFocus () returned 0x0 [0099.159] GetFocus () returned 0x0 [0099.160] GetFocus () returned 0x0 [0099.160] GetFocus () returned 0x0 [0099.160] GetFocus () returned 0x0 [0099.160] GetFocus () returned 0x0 [0099.161] GetFocus () returned 0x0 [0099.161] GetFocus () returned 0x0 [0099.161] GetFocus () returned 0x0 [0099.161] GetFocus () returned 0x0 [0099.161] GetFocus () returned 0x0 [0099.162] GetFocus () returned 0x0 [0099.162] GetFocus () returned 0x0 [0099.162] GetFocus () returned 0x0 [0099.162] GetFocus () returned 0x0 [0099.163] GetFocus () returned 0x0 [0099.163] GetFocus () returned 0x0 [0099.163] GetFocus () returned 0x0 [0099.163] GetFocus () returned 0x0 [0099.163] GetFocus () returned 0x0 [0099.164] GetFocus () returned 0x0 [0099.164] GetFocus () returned 0x0 [0099.164] GetFocus () returned 0x0 [0099.164] GetFocus () returned 0x0 [0099.165] GetFocus () returned 0x0 [0099.165] GetFocus () returned 0x0 [0099.261] GetFocus () returned 0x0 [0099.262] GetFocus () returned 0x0 [0099.262] GetFocus () returned 0x0 [0099.262] GetFocus () returned 0x0 [0099.262] GetFocus () returned 0x0 [0099.263] GetFocus () returned 0x0 [0099.263] GetFocus () returned 0x0 [0099.263] GetFocus () returned 0x0 [0099.263] GetFocus () returned 0x0 [0099.263] GetFocus () returned 0x0 [0099.264] GetFocus () returned 0x0 [0099.264] GetFocus () returned 0x0 [0099.264] GetFocus () returned 0x0 [0099.264] GetFocus () returned 0x0 [0099.265] GetFocus () returned 0x0 [0099.265] GetFocus () returned 0x0 [0099.265] GetFocus () returned 0x0 [0099.265] GetFocus () returned 0x0 [0099.265] GetFocus () returned 0x0 [0099.266] GetFocus () returned 0x0 [0099.266] GetFocus () returned 0x0 [0099.266] GetFocus () returned 0x0 [0099.266] GetFocus () returned 0x0 [0099.267] GetFocus () returned 0x0 [0099.267] GetFocus () returned 0x0 [0099.267] GetFocus () returned 0x0 [0099.267] GetFocus () returned 0x0 [0099.267] GetFocus () returned 0x0 [0099.268] GetFocus () returned 0x0 [0099.268] GetFocus () returned 0x0 [0099.268] GetFocus () returned 0x0 [0099.268] GetFocus () returned 0x0 [0099.269] GetFocus () returned 0x0 [0099.269] GetFocus () returned 0x0 [0099.269] GetFocus () returned 0x0 [0099.269] GetFocus () returned 0x0 [0099.269] GetFocus () returned 0x0 [0099.270] GetFocus () returned 0x0 [0099.270] GetFocus () returned 0x0 [0099.270] GetFocus () returned 0x0 [0099.270] GetFocus () returned 0x0 [0099.271] GetFocus () returned 0x0 [0099.271] GetFocus () returned 0x0 [0099.271] GetFocus () returned 0x0 [0099.271] GetFocus () returned 0x0 [0099.271] GetFocus () returned 0x0 [0099.272] GetFocus () returned 0x0 [0099.272] GetFocus () returned 0x0 [0099.272] GetFocus () returned 0x0 [0099.272] GetFocus () returned 0x0 [0099.273] GetFocus () returned 0x0 [0099.273] GetFocus () returned 0x0 [0099.273] GetFocus () returned 0x0 [0099.273] GetFocus () returned 0x0 [0099.273] GetFocus () returned 0x0 [0099.274] GetFocus () returned 0x0 [0099.274] GetFocus () returned 0x0 [0099.274] GetFocus () returned 0x0 [0099.275] GetFocus () returned 0x0 [0099.275] GetFocus () returned 0x0 [0099.275] GetFocus () returned 0x0 [0099.275] GetFocus () returned 0x0 [0099.276] GetFocus () returned 0x0 [0099.276] GetFocus () returned 0x0 [0099.276] GetFocus () returned 0x0 [0099.276] GetFocus () returned 0x0 [0099.277] GetFocus () returned 0x0 [0099.277] GetFocus () returned 0x0 [0099.277] GetFocus () returned 0x0 [0099.277] GetFocus () returned 0x0 [0099.278] GetFocus () returned 0x0 [0099.278] GetFocus () returned 0x0 [0099.278] GetFocus () returned 0x0 [0099.278] GetFocus () returned 0x0 [0099.278] GetFocus () returned 0x0 [0099.279] GetFocus () returned 0x0 [0099.279] GetFocus () returned 0x0 [0099.279] GetFocus () returned 0x0 [0099.279] GetFocus () returned 0x0 [0099.280] GetFocus () returned 0x0 [0099.280] GetFocus () returned 0x0 [0099.280] GetFocus () returned 0x0 [0099.280] GetFocus () returned 0x0 [0099.281] GetFocus () returned 0x0 [0099.281] GetFocus () returned 0x0 [0099.281] GetFocus () returned 0x0 [0099.281] GetFocus () returned 0x0 [0099.281] GetFocus () returned 0x0 [0099.282] GetFocus () returned 0x0 [0099.282] GetFocus () returned 0x0 [0099.282] GetFocus () returned 0x0 [0099.282] GetFocus () returned 0x0 [0099.282] GetFocus () returned 0x0 [0099.283] GetFocus () returned 0x0 [0099.290] GetFocus () returned 0x0 [0099.291] GetFocus () returned 0x0 [0099.291] GetFocus () returned 0x0 [0099.291] GetFocus () returned 0x0 [0099.291] GetFocus () returned 0x0 [0099.292] GetFocus () returned 0x0 [0099.292] GetFocus () returned 0x0 [0099.292] GetFocus () returned 0x0 [0099.292] GetFocus () returned 0x0 [0099.292] GetFocus () returned 0x0 [0099.293] GetFocus () returned 0x0 [0099.293] GetFocus () returned 0x0 [0099.293] GetFocus () returned 0x0 [0099.293] GetFocus () returned 0x0 [0099.294] GetFocus () returned 0x0 [0099.294] GetFocus () returned 0x0 [0099.294] GetFocus () returned 0x0 [0099.294] GetFocus () returned 0x0 [0099.295] GetFocus () returned 0x0 [0099.295] GetFocus () returned 0x0 [0099.295] GetFocus () returned 0x0 [0099.295] GetFocus () returned 0x0 [0099.296] GetFocus () returned 0x0 [0099.296] GetFocus () returned 0x0 [0099.296] GetFocus () returned 0x0 [0099.296] GetFocus () returned 0x0 [0099.297] GetFocus () returned 0x0 [0099.297] GetFocus () returned 0x0 [0099.297] GetFocus () returned 0x0 [0099.297] GetFocus () returned 0x0 [0099.297] GetFocus () returned 0x0 [0099.298] GetFocus () returned 0x0 [0099.298] GetFocus () returned 0x0 [0099.298] GetFocus () returned 0x0 [0101.555] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0x10a0859 [0101.555] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa085a [0101.555] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa085b [0101.555] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa085c [0101.555] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa085d [0101.555] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa085e [0101.649] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa085f [0101.649] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0860 [0101.649] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0861 [0101.649] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0862 [0101.650] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0863 [0101.650] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0864 [0101.650] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0865 [0101.650] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0866 [0101.650] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0867 [0101.650] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0868 [0101.650] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0869 [0101.650] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa086a [0101.650] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa086b [0101.650] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa086c [0101.650] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa086d [0101.650] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa086e [0101.650] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa086f [0101.650] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0870 [0101.650] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0871 [0101.650] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0872 [0101.650] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0873 [0101.650] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0874 [0101.650] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0875 [0101.651] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0876 [0101.651] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0877 [0101.651] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0878 [0101.651] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0879 [0101.651] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa087a [0101.651] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa087b [0101.651] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa087c [0101.651] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa087d [0101.651] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa087e [0101.651] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa087f [0101.651] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0880 [0101.651] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0881 [0101.651] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0882 [0101.651] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0883 [0101.651] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0884 [0101.651] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0885 [0101.651] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0886 [0101.651] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0887 [0101.651] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0888 [0101.651] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0889 [0101.651] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa088a [0101.652] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa088b [0101.652] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa088c [0101.652] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa088d [0101.652] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa088e [0101.652] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa088f [0101.652] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0890 [0101.652] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0891 [0101.652] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0892 [0101.652] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0893 [0101.652] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0894 [0101.652] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0895 [0101.652] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0896 [0101.652] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0897 [0101.652] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0898 [0101.652] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa0899 [0101.652] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa089a [0101.652] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa089b [0101.652] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa089c [0101.652] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa089d [0101.652] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa089e [0101.652] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa089f [0101.652] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa08a0 [0101.653] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa08a1 [0101.653] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa08a2 [0101.653] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa08a3 [0101.653] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa08a4 [0101.653] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa08a5 [0101.653] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa08a6 [0101.653] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa08a7 [0101.653] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa08a8 [0101.653] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa08a9 [0101.653] CreateFontA (cHeight=30, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x81, iOutPrecision=0x3, iClipPrecision=0x2, iQuality=0x1, iPitchAndFamily=0x12, pszFaceName="u") returned 0xa08aa [0101.653] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x400) returned 0x6064d8 [0101.653] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f9a4 | out: ppstm=0x19f9a4*=0x5f4750) returned 0x0 [0101.656] IStream:SetSize (This=0x5f4750, libNewSize=0x400) returned 0x0 [0101.656] IStream:RemoteSeek (in: This=0x5f4750, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0101.656] LoadLibraryA (lpLibFileName="kernel32") returned 0x73b80000 [0101.656] ISequentialStream:RemoteWrite (in: This=0x5f4750, pv=0x6064d8*=0xc0, cb=0x400, pcbWritten=0x0 | out: pcbWritten=0x0) returned 0x0 [0101.656] GdipAlloc (size=0x10) returned 0x0 [0101.656] GetProcAddress (hModule=0x73b80000, lpProcName="VirtualAlloc") returned 0x73b96970 [0101.656] IUnknown:Release (This=0x5f4750) returned 0x0 [0101.656] VirtualAlloc (lpAddress=0x0, dwSize=0x34000, flAllocationType=0x3000, flProtect=0x40) returned 0x530000 [0101.657] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName="doroga") returned 0x2dc [0101.658] GetCursorPos (in: lpPoint=0x19f9c8 | out: lpPoint=0x19f9c8*(x=286, y=695)) returned 1 [0101.658] GetStockObject (i=6) returned 0xb00018 [0101.658] SelectObject (hdc=0x0, h=0xb00018) returned 0x0 [0101.658] GetCursorPos (in: lpPoint=0x19f990 | out: lpPoint=0x19f990*(x=286, y=695)) returned 1 [0101.658] DrawIconEx (hdc=0x0, xLeft=5, yTop=10, hIcon=0x0, cxWidth=10, cyWidth=15, istepIfAniCur=0x0, hbrFlickerFreeDraw=0x0, diFlags=0x3) returned 0 [0101.658] GetConsoleWindow () returned 0x0 [0101.658] GetDC (hWnd=0x0) returned 0x10858 [0101.658] CreatePen (iStyle=0, cWidth=2, color=0x13ac13) returned 0x3008ab [0101.658] ImpersonateLoggedOnUser (hToken=0x0) returned 0 [0101.658] SendInput (cInputs=0x1, pInputs=0x19f94c, cbSize=28) returned 0x1 [0101.659] WaitForSingleObject (hHandle=0x2dc, dwMilliseconds=0xbb6) returned 0x102 [0105.023] GetStockObject (i=6) returned 0xb00018 [0105.023] SelectObject (hdc=0x0, h=0xb00018) returned 0x0 [0105.023] GetCursorPos (in: lpPoint=0x19f990 | out: lpPoint=0x19f990*(x=798, y=402)) returned 1 [0105.023] DrawIconEx (hdc=0x0, xLeft=5, yTop=10, hIcon=0x0, cxWidth=10, cyWidth=15, istepIfAniCur=0x0, hbrFlickerFreeDraw=0x0, diFlags=0x3) returned 0 [0105.023] GetConsoleWindow () returned 0x0 [0105.023] GetDC (hWnd=0x0) returned 0x108ac [0105.024] CreatePen (iStyle=0, cWidth=2, color=0x52ac53) returned 0x13008ad [0105.024] ImpersonateLoggedOnUser (hToken=0x0) returned 0 [0105.024] SendInput (cInputs=0x1, pInputs=0x19f94c, cbSize=28) returned 0x1 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.026] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0105.027] GetDC (hWnd=0x0) returned 0x108ae [0105.028] wglCreateContext () returned 0x0 [0105.028] wglMakeCurrent () returned 0x0 [0105.029] GetDlgItem (hDlg=0x0, nIDDlgItem=1951716248) returned 0x0 [0105.029] GetDlgItem (hDlg=0x0, nIDDlgItem=0) returned 0x0 [0105.029] lstrlenA (lpString="\x92\x07") returned 2 [0105.029] lstrlenA (lpString="\x92\x07") returned 2 [0105.029] lstrlenA (lpString="\x92\x07") returned 2 [0105.029] lstrlenA (lpString="\x92\x07") returned 2 [0105.029] lstrlenA (lpString="\x92\x07") returned 2 [0105.029] lstrlenA (lpString="\x92\x07") returned 2 [0105.030] capGetDriverDescriptionA () returned 0x0 [0105.032] GetLastError () returned 0x0 [0105.032] SetLastError (dwErrCode=0x0) [0105.032] OpenThemeData () returned 0x10000 [0105.391] GetSystemMetrics (nIndex=32) returned 4 [0105.391] GetSystemMetrics (nIndex=33) returned 4 [0105.391] CloseThemeData () returned 0x0 [0105.392] lstrlenA (lpString="\x92\x07") returned 2 [0105.392] lstrlenA (lpString="\x92\x07") returned 2 [0105.392] lstrlenA (lpString="\x92\x07") returned 2 [0105.392] lstrlenA (lpString="\x92\x07") returned 2 [0105.392] lstrlenA (lpString="\x92\x07") returned 2 [0105.392] lstrlenA (lpString="\x92\x07") returned 2 [0105.392] capGetDriverDescriptionA () returned 0x0 [0105.393] GetLastError () returned 0x0 [0105.393] SetLastError (dwErrCode=0x0) [0105.393] OpenThemeData () returned 0x20000 [0105.394] GetSystemMetrics (nIndex=32) returned 4 [0105.394] GetSystemMetrics (nIndex=33) returned 4 [0105.394] CloseThemeData () returned 0x0 [0105.394] lstrlenA (lpString="\x92\x07") returned 2 [0105.394] lstrlenA (lpString="\x92\x07") returned 2 [0105.394] lstrlenA (lpString="\x92\x07") returned 2 [0105.394] lstrlenA (lpString="\x92\x07") returned 2 [0105.394] lstrlenA (lpString="\x92\x07") returned 2 [0105.394] lstrlenA (lpString="\x92\x07") returned 2 [0105.394] capGetDriverDescriptionA () returned 0x0 [0105.395] GetLastError () returned 0x0 [0105.395] SetLastError (dwErrCode=0x0) [0105.395] OpenThemeData () returned 0x30000 [0105.395] GetSystemMetrics (nIndex=32) returned 4 [0105.395] GetSystemMetrics (nIndex=33) returned 4 [0105.395] CloseThemeData () returned 0x0 [0105.396] lstrlenA (lpString="\x92\x07") returned 2 [0105.396] lstrlenA (lpString="\x92\x07") returned 2 [0105.396] lstrlenA (lpString="\x92\x07") returned 2 [0105.396] lstrlenA (lpString="\x92\x07") returned 2 [0105.396] lstrlenA (lpString="\x92\x07") returned 2 [0105.396] lstrlenA (lpString="\x92\x07") returned 2 [0105.396] capGetDriverDescriptionA () returned 0x0 [0105.397] GetLastError () returned 0x0 [0105.397] SetLastError (dwErrCode=0x0) [0105.397] OpenThemeData () returned 0x40000 [0105.397] GetSystemMetrics (nIndex=32) returned 4 [0105.397] GetSystemMetrics (nIndex=33) returned 4 [0105.397] CloseThemeData () returned 0x0 [0105.398] lstrlenA (lpString="\x92\x07") returned 2 [0105.398] lstrlenA (lpString="\x92\x07") returned 2 [0105.398] lstrlenA (lpString="\x92\x07") returned 2 [0105.398] lstrlenA (lpString="\x92\x07") returned 2 [0105.398] lstrlenA (lpString="\x92\x07") returned 2 [0105.398] lstrlenA (lpString="\x92\x07") returned 2 [0105.398] capGetDriverDescriptionA () returned 0x0 [0105.398] GetLastError () returned 0x0 [0105.399] SetLastError (dwErrCode=0x0) [0105.399] OpenThemeData () returned 0x50000 [0105.399] GetSystemMetrics (nIndex=32) returned 4 [0105.399] GetSystemMetrics (nIndex=33) returned 4 [0105.399] CloseThemeData () returned 0x0 [0105.399] lstrlenA (lpString="\x92\x07") returned 2 [0105.399] lstrlenA (lpString="\x92\x07") returned 2 [0105.399] lstrlenA (lpString="\x92\x07") returned 2 [0105.399] lstrlenA (lpString="\x92\x07") returned 2 [0105.399] lstrlenA (lpString="\x92\x07") returned 2 [0105.399] lstrlenA (lpString="\x92\x07") returned 2 [0105.400] capGetDriverDescriptionA () returned 0x0 [0105.400] GetLastError () returned 0x0 [0105.400] SetLastError (dwErrCode=0x0) [0105.400] OpenThemeData () returned 0x60000 [0105.401] GetSystemMetrics (nIndex=32) returned 4 [0105.401] GetSystemMetrics (nIndex=33) returned 4 [0105.401] CloseThemeData () returned 0x0 [0105.401] lstrlenA (lpString="\x92\x07") returned 2 [0105.401] lstrlenA (lpString="\x92\x07") returned 2 [0105.401] lstrlenA (lpString="\x92\x07") returned 2 [0105.401] lstrlenA (lpString="\x92\x07") returned 2 [0105.401] lstrlenA (lpString="\x92\x07") returned 2 [0105.401] lstrlenA (lpString="\x92\x07") returned 2 [0105.401] capGetDriverDescriptionA () returned 0x0 [0105.402] GetLastError () returned 0x0 [0105.402] SetLastError (dwErrCode=0x0) [0105.402] OpenThemeData () returned 0x70000 [0105.403] GetSystemMetrics (nIndex=32) returned 4 [0105.403] GetSystemMetrics (nIndex=33) returned 4 [0105.403] CloseThemeData () returned 0x0 [0105.403] lstrlenA (lpString="\x92\x07") returned 2 [0105.403] lstrlenA (lpString="\x92\x07") returned 2 [0105.403] lstrlenA (lpString="\x92\x07") returned 2 [0105.403] lstrlenA (lpString="\x92\x07") returned 2 [0105.403] lstrlenA (lpString="\x92\x07") returned 2 [0105.403] lstrlenA (lpString="\x92\x07") returned 2 [0105.403] capGetDriverDescriptionA () returned 0x0 [0105.404] GetLastError () returned 0x0 [0105.404] SetLastError (dwErrCode=0x0) [0105.404] OpenThemeData () returned 0x80000 [0105.404] GetSystemMetrics (nIndex=32) returned 4 [0105.404] GetSystemMetrics (nIndex=33) returned 4 [0105.404] CloseThemeData () returned 0x0 [0105.405] lstrlenA (lpString="\x92\x07") returned 2 [0105.405] lstrlenA (lpString="\x92\x07") returned 2 [0105.405] lstrlenA (lpString="\x92\x07") returned 2 [0105.405] lstrlenA (lpString="\x92\x07") returned 2 [0105.405] lstrlenA (lpString="\x92\x07") returned 2 [0105.405] lstrlenA (lpString="\x92\x07") returned 2 [0105.405] capGetDriverDescriptionA () returned 0x0 [0105.406] GetLastError () returned 0x0 [0105.406] SetLastError (dwErrCode=0x0) [0105.406] OpenThemeData () returned 0x90000 [0105.406] GetSystemMetrics (nIndex=32) returned 4 [0105.406] GetSystemMetrics (nIndex=33) returned 4 [0105.406] CloseThemeData () returned 0x0 [0105.406] lstrlenA (lpString="\x92\x07") returned 2 [0105.406] lstrlenA (lpString="\x92\x07") returned 2 [0105.406] lstrlenA (lpString="\x92\x07") returned 2 [0105.406] lstrlenA (lpString="\x92\x07") returned 2 [0105.406] lstrlenA (lpString="\x92\x07") returned 2 [0105.407] lstrlenA (lpString="\x92\x07") returned 2 [0105.407] capGetDriverDescriptionA () returned 0x0 [0105.407] GetLastError () returned 0x0 [0105.407] SetLastError (dwErrCode=0x0) [0105.407] OpenThemeData () returned 0xa0000 [0105.408] GetSystemMetrics (nIndex=32) returned 4 [0105.408] GetSystemMetrics (nIndex=33) returned 4 [0105.408] CloseThemeData () returned 0x0 [0105.408] lstrlenA (lpString="\x92\x07") returned 2 [0105.408] lstrlenA (lpString="\x92\x07") returned 2 [0105.408] lstrlenA (lpString="\x92\x07") returned 2 [0105.408] lstrlenA (lpString="\x92\x07") returned 2 [0105.408] lstrlenA (lpString="\x92\x07") returned 2 [0105.408] lstrlenA (lpString="\x92\x07") returned 2 [0105.408] capGetDriverDescriptionA () returned 0x0 [0105.409] GetLastError () returned 0x0 [0105.409] SetLastError (dwErrCode=0x0) [0105.409] OpenThemeData () returned 0xb0000 [0105.410] GetSystemMetrics (nIndex=32) returned 4 [0105.410] GetSystemMetrics (nIndex=33) returned 4 [0105.410] CloseThemeData () returned 0x0 [0105.410] lstrlenA (lpString="\x92\x07") returned 2 [0105.410] lstrlenA (lpString="\x92\x07") returned 2 [0105.410] lstrlenA (lpString="\x92\x07") returned 2 [0105.410] lstrlenA (lpString="\x92\x07") returned 2 [0105.410] lstrlenA (lpString="\x92\x07") returned 2 [0105.410] lstrlenA (lpString="\x92\x07") returned 2 [0105.410] capGetDriverDescriptionA () returned 0x0 [0105.411] GetLastError () returned 0x0 [0105.411] SetLastError (dwErrCode=0x0) [0105.411] OpenThemeData () returned 0xc0000 [0105.411] GetSystemMetrics (nIndex=32) returned 4 [0105.411] GetSystemMetrics (nIndex=33) returned 4 [0105.411] CloseThemeData () returned 0x0 [0105.412] lstrlenA (lpString="\x92\x07") returned 2 [0105.412] lstrlenA (lpString="\x92\x07") returned 2 [0105.412] lstrlenA (lpString="\x92\x07") returned 2 [0105.412] lstrlenA (lpString="\x92\x07") returned 2 [0105.412] lstrlenA (lpString="\x92\x07") returned 2 [0105.412] lstrlenA (lpString="\x92\x07") returned 2 [0105.412] capGetDriverDescriptionA () returned 0x0 [0105.413] GetLastError () returned 0x0 [0105.413] SetLastError (dwErrCode=0x0) [0105.413] OpenThemeData () returned 0xd0000 [0105.413] GetSystemMetrics (nIndex=32) returned 4 [0105.413] GetSystemMetrics (nIndex=33) returned 4 [0105.413] CloseThemeData () returned 0x0 [0105.414] lstrlenA (lpString="\x92\x07") returned 2 [0105.414] lstrlenA (lpString="\x92\x07") returned 2 [0105.414] lstrlenA (lpString="\x92\x07") returned 2 [0105.414] lstrlenA (lpString="\x92\x07") returned 2 [0105.414] lstrlenA (lpString="\x92\x07") returned 2 [0105.414] lstrlenA (lpString="\x92\x07") returned 2 [0105.414] capGetDriverDescriptionA () returned 0x0 [0105.414] GetLastError () returned 0x0 [0105.414] SetLastError (dwErrCode=0x0) [0105.414] OpenThemeData () returned 0xe0000 [0105.415] GetSystemMetrics (nIndex=32) returned 4 [0105.415] GetSystemMetrics (nIndex=33) returned 4 [0105.415] CloseThemeData () returned 0x0 [0105.415] lstrlenA (lpString="\x92\x07") returned 2 [0105.415] lstrlenA (lpString="\x92\x07") returned 2 [0105.415] lstrlenA (lpString="\x92\x07") returned 2 [0105.415] lstrlenA (lpString="\x92\x07") returned 2 [0105.415] lstrlenA (lpString="\x92\x07") returned 2 [0105.415] lstrlenA (lpString="\x92\x07") returned 2 [0105.415] capGetDriverDescriptionA () returned 0x0 [0105.416] GetLastError () returned 0x0 [0105.416] SetLastError (dwErrCode=0x0) [0105.416] OpenThemeData () returned 0xf0000 [0105.417] GetSystemMetrics (nIndex=32) returned 4 [0105.417] GetSystemMetrics (nIndex=33) returned 4 [0105.417] CloseThemeData () returned 0x0 [0105.417] lstrlenA (lpString="\x92\x07") returned 2 [0105.417] lstrlenA (lpString="\x92\x07") returned 2 [0105.417] lstrlenA (lpString="\x92\x07") returned 2 [0105.417] lstrlenA (lpString="\x92\x07") returned 2 [0105.417] lstrlenA (lpString="\x92\x07") returned 2 [0105.417] lstrlenA (lpString="\x92\x07") returned 2 [0105.417] capGetDriverDescriptionA () returned 0x0 [0105.418] GetLastError () returned 0x0 [0105.418] SetLastError (dwErrCode=0x0) [0105.418] OpenThemeData () returned 0x100000 [0105.419] GetSystemMetrics (nIndex=32) returned 4 [0105.419] GetSystemMetrics (nIndex=33) returned 4 [0105.419] CloseThemeData () returned 0x0 [0105.419] lstrlenA (lpString="\x92\x07") returned 2 [0105.419] lstrlenA (lpString="\x92\x07") returned 2 [0105.419] lstrlenA (lpString="\x92\x07") returned 2 [0105.419] lstrlenA (lpString="\x92\x07") returned 2 [0105.419] lstrlenA (lpString="\x92\x07") returned 2 [0105.419] lstrlenA (lpString="\x92\x07") returned 2 [0105.419] capGetDriverDescriptionA () returned 0x0 [0105.420] GetLastError () returned 0x0 [0105.420] SetLastError (dwErrCode=0x0) [0105.420] OpenThemeData () returned 0x110000 [0105.420] GetSystemMetrics (nIndex=32) returned 4 [0105.420] GetSystemMetrics (nIndex=33) returned 4 [0105.420] CloseThemeData () returned 0x0 [0105.421] lstrlenA (lpString="\x92\x07") returned 2 [0105.421] lstrlenA (lpString="\x92\x07") returned 2 [0105.421] lstrlenA (lpString="\x92\x07") returned 2 [0105.421] lstrlenA (lpString="\x92\x07") returned 2 [0105.421] lstrlenA (lpString="\x92\x07") returned 2 [0105.421] lstrlenA (lpString="\x92\x07") returned 2 [0105.421] capGetDriverDescriptionA () returned 0x0 [0105.422] GetLastError () returned 0x0 [0105.422] SetLastError (dwErrCode=0x0) [0105.422] OpenThemeData () returned 0x120000 [0105.423] GetSystemMetrics (nIndex=32) returned 4 [0105.423] GetSystemMetrics (nIndex=33) returned 4 [0105.423] CloseThemeData () returned 0x0 [0105.423] lstrlenA (lpString="\x92\x07") returned 2 [0105.423] lstrlenA (lpString="\x92\x07") returned 2 [0105.423] lstrlenA (lpString="\x92\x07") returned 2 [0105.423] lstrlenA (lpString="\x92\x07") returned 2 [0105.423] lstrlenA (lpString="\x92\x07") returned 2 [0105.423] lstrlenA (lpString="\x92\x07") returned 2 [0105.423] capGetDriverDescriptionA () returned 0x0 [0105.424] GetLastError () returned 0x0 [0105.424] SetLastError (dwErrCode=0x0) [0105.424] OpenThemeData () returned 0x130000 [0105.424] GetSystemMetrics (nIndex=32) returned 4 [0105.424] GetSystemMetrics (nIndex=33) returned 4 [0105.424] CloseThemeData () returned 0x0 [0105.425] lstrlenA (lpString="\x92\x07") returned 2 [0105.425] lstrlenA (lpString="\x92\x07") returned 2 [0105.425] lstrlenA (lpString="\x92\x07") returned 2 [0105.425] lstrlenA (lpString="\x92\x07") returned 2 [0105.425] lstrlenA (lpString="\x92\x07") returned 2 [0105.425] lstrlenA (lpString="\x92\x07") returned 2 [0105.425] capGetDriverDescriptionA () returned 0x0 [0105.426] GetLastError () returned 0x0 [0105.426] SetLastError (dwErrCode=0x0) [0105.426] OpenThemeData () returned 0x140000 [0105.426] GetSystemMetrics (nIndex=32) returned 4 [0105.426] GetSystemMetrics (nIndex=33) returned 4 [0105.426] CloseThemeData () returned 0x0 [0105.426] lstrlenA (lpString="\x92\x07") returned 2 [0105.426] lstrlenA (lpString="\x92\x07") returned 2 [0105.426] lstrlenA (lpString="\x92\x07") returned 2 [0105.426] lstrlenA (lpString="\x92\x07") returned 2 [0105.426] lstrlenA (lpString="\x92\x07") returned 2 [0105.427] lstrlenA (lpString="\x92\x07") returned 2 [0105.427] capGetDriverDescriptionA () returned 0x0 [0105.427] GetLastError () returned 0x0 [0105.427] SetLastError (dwErrCode=0x0) [0105.427] OpenThemeData () returned 0x150000 [0105.428] GetSystemMetrics (nIndex=32) returned 4 [0105.428] GetSystemMetrics (nIndex=33) returned 4 [0105.428] CloseThemeData () returned 0x0 [0105.428] lstrlenA (lpString="\x92\x07") returned 2 [0105.428] lstrlenA (lpString="\x92\x07") returned 2 [0105.428] lstrlenA (lpString="\x92\x07") returned 2 [0105.428] lstrlenA (lpString="\x92\x07") returned 2 [0105.428] lstrlenA (lpString="\x92\x07") returned 2 [0105.428] lstrlenA (lpString="\x92\x07") returned 2 [0105.428] capGetDriverDescriptionA () returned 0x0 [0106.020] GetLastError () returned 0x0 [0106.020] SetLastError (dwErrCode=0x0) [0106.020] OpenThemeData () returned 0x160000 [0106.020] GetSystemMetrics (nIndex=32) returned 4 [0106.020] GetSystemMetrics (nIndex=33) returned 4 [0106.020] CloseThemeData () returned 0x0 [0106.021] lstrlenA (lpString="\x92\x07") returned 2 [0106.021] lstrlenA (lpString="\x92\x07") returned 2 [0106.021] lstrlenA (lpString="\x92\x07") returned 2 [0106.021] lstrlenA (lpString="\x92\x07") returned 2 [0106.021] lstrlenA (lpString="\x92\x07") returned 2 [0106.021] lstrlenA (lpString="\x92\x07") returned 2 [0106.021] capGetDriverDescriptionA () returned 0x0 [0106.021] GetLastError () returned 0x0 [0106.021] SetLastError (dwErrCode=0x0) [0106.021] OpenThemeData () returned 0x170000 [0106.022] GetSystemMetrics (nIndex=32) returned 4 [0106.022] GetSystemMetrics (nIndex=33) returned 4 [0106.022] CloseThemeData () returned 0x0 [0106.022] lstrlenA (lpString="\x92\x07") returned 2 [0106.022] lstrlenA (lpString="\x92\x07") returned 2 [0106.022] lstrlenA (lpString="\x92\x07") returned 2 [0106.022] lstrlenA (lpString="\x92\x07") returned 2 [0106.122] lstrlenA (lpString="\x92\x07") returned 2 [0106.122] lstrlenA (lpString="\x92\x07") returned 2 [0106.122] capGetDriverDescriptionA () returned 0x0 [0106.125] GetLastError () returned 0x0 [0106.125] SetLastError (dwErrCode=0x0) [0106.125] OpenThemeData () returned 0x180000 [0106.127] GetSystemMetrics (nIndex=32) returned 4 [0106.127] GetSystemMetrics (nIndex=33) returned 4 [0106.127] CloseThemeData () returned 0x0 [0106.130] lstrlenA (lpString="\x92\x07") returned 2 [0106.130] lstrlenA (lpString="\x92\x07") returned 2 [0106.130] lstrlenA (lpString="\x92\x07") returned 2 [0106.130] lstrlenA (lpString="\x92\x07") returned 2 [0106.130] lstrlenA (lpString="\x92\x07") returned 2 [0106.130] lstrlenA (lpString="\x92\x07") returned 2 [0106.130] capGetDriverDescriptionA () returned 0x0 [0106.133] GetLastError () returned 0x0 [0106.133] SetLastError (dwErrCode=0x0) [0106.133] OpenThemeData () returned 0x190000 [0106.139] GetSystemMetrics (nIndex=32) returned 4 [0106.139] GetSystemMetrics (nIndex=33) returned 4 [0106.139] CloseThemeData () returned 0x0 [0106.140] lstrlenA (lpString="\x92\x07") returned 2 [0106.140] lstrlenA (lpString="\x92\x07") returned 2 [0106.140] lstrlenA (lpString="\x92\x07") returned 2 [0106.142] lstrlenA (lpString="\x92\x07") returned 2 [0106.142] lstrlenA (lpString="\x92\x07") returned 2 [0106.142] lstrlenA (lpString="\x92\x07") returned 2 [0106.143] capGetDriverDescriptionA () returned 0x0 [0106.147] GetLastError () returned 0x0 [0106.147] SetLastError (dwErrCode=0x0) [0106.147] OpenThemeData () returned 0x1a0000 [0106.149] GetSystemMetrics (nIndex=32) returned 4 [0106.149] GetSystemMetrics (nIndex=33) returned 4 [0106.149] CloseThemeData () returned 0x0 [0106.150] lstrlenA (lpString="\x92\x07") returned 2 [0106.150] lstrlenA (lpString="\x92\x07") returned 2 [0106.150] lstrlenA (lpString="\x92\x07") returned 2 [0106.151] lstrlenA (lpString="\x92\x07") returned 2 [0106.151] lstrlenA (lpString="\x92\x07") returned 2 [0106.151] lstrlenA (lpString="\x92\x07") returned 2 [0106.151] capGetDriverDescriptionA () returned 0x0 [0106.154] GetLastError () returned 0x0 [0106.154] SetLastError (dwErrCode=0x0) [0106.154] OpenThemeData () returned 0x1b0000 [0106.155] GetSystemMetrics (nIndex=32) returned 4 [0106.155] GetSystemMetrics (nIndex=33) returned 4 [0106.155] CloseThemeData () returned 0x0 [0106.155] lstrlenA (lpString="\x92\x07") returned 2 [0106.155] lstrlenA (lpString="\x92\x07") returned 2 [0106.155] lstrlenA (lpString="\x92\x07") returned 2 [0106.155] lstrlenA (lpString="\x92\x07") returned 2 [0106.155] lstrlenA (lpString="\x92\x07") returned 2 [0106.155] lstrlenA (lpString="\x92\x07") returned 2 [0106.155] capGetDriverDescriptionA () returned 0x0 [0106.156] GetLastError () returned 0x0 [0106.156] SetLastError (dwErrCode=0x0) [0106.156] OpenThemeData () returned 0x1c0000 [0106.156] GetSystemMetrics (nIndex=32) returned 4 [0106.156] GetSystemMetrics (nIndex=33) returned 4 [0106.156] CloseThemeData () returned 0x0 [0106.157] lstrlenA (lpString="\x92\x07") returned 2 [0106.157] lstrlenA (lpString="\x92\x07") returned 2 [0106.157] lstrlenA (lpString="\x92\x07") returned 2 [0106.157] lstrlenA (lpString="\x92\x07") returned 2 [0106.157] lstrlenA (lpString="\x92\x07") returned 2 [0106.157] lstrlenA (lpString="\x92\x07") returned 2 [0106.157] capGetDriverDescriptionA () returned 0x0 [0106.157] GetLastError () returned 0x0 [0106.157] SetLastError (dwErrCode=0x0) [0106.157] OpenThemeData () returned 0x1d0000 [0106.158] GetSystemMetrics (nIndex=32) returned 4 [0106.158] GetSystemMetrics (nIndex=33) returned 4 [0106.158] CloseThemeData () returned 0x0 [0106.158] lstrlenA (lpString="\x92\x07") returned 2 [0106.158] lstrlenA (lpString="\x92\x07") returned 2 [0106.158] lstrlenA (lpString="\x92\x07") returned 2 [0106.158] lstrlenA (lpString="\x92\x07") returned 2 [0106.159] lstrlenA (lpString="\x92\x07") returned 2 [0106.159] lstrlenA (lpString="\x92\x07") returned 2 [0106.159] capGetDriverDescriptionA () returned 0x0 [0106.159] GetLastError () returned 0x0 [0106.159] SetLastError (dwErrCode=0x0) [0106.159] OpenThemeData () returned 0x1e0000 [0106.160] GetSystemMetrics (nIndex=32) returned 4 [0106.160] GetSystemMetrics (nIndex=33) returned 4 [0106.160] CloseThemeData () returned 0x0 [0106.160] lstrlenA (lpString="\x92\x07") returned 2 [0106.160] lstrlenA (lpString="\x92\x07") returned 2 [0106.160] lstrlenA (lpString="\x92\x07") returned 2 [0106.160] lstrlenA (lpString="\x92\x07") returned 2 [0106.160] lstrlenA (lpString="\x92\x07") returned 2 [0106.160] lstrlenA (lpString="\x92\x07") returned 2 [0106.160] capGetDriverDescriptionA () returned 0x0 [0106.161] GetLastError () returned 0x0 [0106.161] SetLastError (dwErrCode=0x0) [0106.161] OpenThemeData () returned 0x1f0000 [0106.161] GetSystemMetrics (nIndex=32) returned 4 [0106.161] GetSystemMetrics (nIndex=33) returned 4 [0106.161] CloseThemeData () returned 0x0 [0106.162] lstrlenA (lpString="\x92\x07") returned 2 [0106.162] lstrlenA (lpString="\x92\x07") returned 2 [0106.162] lstrlenA (lpString="\x92\x07") returned 2 [0106.162] lstrlenA (lpString="\x92\x07") returned 2 [0106.162] lstrlenA (lpString="\x92\x07") returned 2 [0106.162] lstrlenA (lpString="\x92\x07") returned 2 [0106.162] capGetDriverDescriptionA () returned 0x0 [0106.162] GetLastError () returned 0x0 [0106.162] SetLastError (dwErrCode=0x0) [0106.162] OpenThemeData () returned 0x200000 [0106.165] GetSystemMetrics (nIndex=32) returned 4 [0106.165] GetSystemMetrics (nIndex=33) returned 4 [0106.166] CloseThemeData () returned 0x0 [0106.166] lstrlenA (lpString="\x92\x07") returned 2 [0106.166] lstrlenA (lpString="\x92\x07") returned 2 [0106.166] lstrlenA (lpString="\x92\x07") returned 2 [0106.166] lstrlenA (lpString="\x92\x07") returned 2 [0106.166] lstrlenA (lpString="\x92\x07") returned 2 [0106.166] lstrlenA (lpString="\x92\x07") returned 2 [0106.166] capGetDriverDescriptionA () returned 0x0 [0106.167] GetLastError () returned 0x0 [0106.167] SetLastError (dwErrCode=0x0) [0106.167] OpenThemeData () returned 0x210000 [0106.167] GetSystemMetrics (nIndex=32) returned 4 [0106.167] GetSystemMetrics (nIndex=33) returned 4 [0106.167] CloseThemeData () returned 0x0 [0106.168] lstrlenA (lpString="\x92\x07") returned 2 [0106.168] lstrlenA (lpString="\x92\x07") returned 2 [0106.168] lstrlenA (lpString="\x92\x07") returned 2 [0106.168] lstrlenA (lpString="\x92\x07") returned 2 [0106.168] lstrlenA (lpString="\x92\x07") returned 2 [0106.168] lstrlenA (lpString="\x92\x07") returned 2 [0106.168] capGetDriverDescriptionA () returned 0x0 [0106.168] GetLastError () returned 0x0 [0106.168] SetLastError (dwErrCode=0x0) [0106.169] OpenThemeData () returned 0x220000 [0106.169] GetSystemMetrics (nIndex=32) returned 4 [0106.169] GetSystemMetrics (nIndex=33) returned 4 [0106.169] CloseThemeData () returned 0x0 [0106.169] lstrlenA (lpString="\x92\x07") returned 2 [0106.169] lstrlenA (lpString="\x92\x07") returned 2 [0106.169] lstrlenA (lpString="\x92\x07") returned 2 [0106.169] lstrlenA (lpString="\x92\x07") returned 2 [0106.169] lstrlenA (lpString="\x92\x07") returned 2 [0106.169] lstrlenA (lpString="\x92\x07") returned 2 [0106.169] capGetDriverDescriptionA () returned 0x0 [0106.170] GetLastError () returned 0x0 [0106.170] SetLastError (dwErrCode=0x0) [0106.170] OpenThemeData () returned 0x230000 [0106.171] GetSystemMetrics (nIndex=32) returned 4 [0106.171] GetSystemMetrics (nIndex=33) returned 4 [0106.171] CloseThemeData () returned 0x0 [0106.171] lstrlenA (lpString="\x92\x07") returned 2 [0106.171] lstrlenA (lpString="\x92\x07") returned 2 [0106.171] lstrlenA (lpString="\x92\x07") returned 2 [0106.171] lstrlenA (lpString="\x92\x07") returned 2 [0106.171] lstrlenA (lpString="\x92\x07") returned 2 [0106.171] lstrlenA (lpString="\x92\x07") returned 2 [0106.172] capGetDriverDescriptionA () returned 0x0 [0106.172] GetLastError () returned 0x0 [0106.172] SetLastError (dwErrCode=0x0) [0106.172] OpenThemeData () returned 0x240000 [0106.173] GetSystemMetrics (nIndex=32) returned 4 [0106.173] GetSystemMetrics (nIndex=33) returned 4 [0106.173] CloseThemeData () returned 0x0 [0106.173] lstrlenA (lpString="\x92\x07") returned 2 [0106.173] lstrlenA (lpString="\x92\x07") returned 2 [0106.173] lstrlenA (lpString="\x92\x07") returned 2 [0106.173] lstrlenA (lpString="\x92\x07") returned 2 [0106.173] lstrlenA (lpString="\x92\x07") returned 2 [0106.173] lstrlenA (lpString="\x92\x07") returned 2 [0106.173] capGetDriverDescriptionA () returned 0x0 [0106.174] GetLastError () returned 0x0 [0106.174] SetLastError (dwErrCode=0x0) [0106.174] OpenThemeData () returned 0x250000 [0106.174] GetSystemMetrics (nIndex=32) returned 4 [0106.174] GetSystemMetrics (nIndex=33) returned 4 [0106.174] CloseThemeData () returned 0x0 [0106.175] lstrlenA (lpString="\x92\x07") returned 2 [0106.175] lstrlenA (lpString="\x92\x07") returned 2 [0106.175] lstrlenA (lpString="\x92\x07") returned 2 [0106.175] lstrlenA (lpString="\x92\x07") returned 2 [0106.175] lstrlenA (lpString="\x92\x07") returned 2 [0106.175] lstrlenA (lpString="\x92\x07") returned 2 [0106.175] capGetDriverDescriptionA () returned 0x0 [0106.175] GetLastError () returned 0x0 [0106.175] SetLastError (dwErrCode=0x0) [0106.175] OpenThemeData () returned 0x260000 [0106.176] GetSystemMetrics (nIndex=32) returned 4 [0106.176] GetSystemMetrics (nIndex=33) returned 4 [0106.176] CloseThemeData () returned 0x0 [0106.452] lstrlenA (lpString="\x92\x07") returned 2 [0106.452] lstrlenA (lpString="\x92\x07") returned 2 [0106.452] lstrlenA (lpString="\x92\x07") returned 2 [0106.452] lstrlenA (lpString="\x92\x07") returned 2 [0106.452] lstrlenA (lpString="\x92\x07") returned 2 [0106.452] lstrlenA (lpString="\x92\x07") returned 2 [0106.452] capGetDriverDescriptionA () returned 0x0 [0106.453] GetLastError () returned 0x0 [0106.453] SetLastError (dwErrCode=0x0) [0106.453] OpenThemeData () returned 0x270000 [0106.453] GetSystemMetrics (nIndex=32) returned 4 [0106.453] GetSystemMetrics (nIndex=33) returned 4 [0106.453] CloseThemeData () returned 0x0 [0106.454] lstrlenA (lpString="\x92\x07") returned 2 [0106.454] lstrlenA (lpString="\x92\x07") returned 2 [0106.454] lstrlenA (lpString="\x92\x07") returned 2 [0106.454] lstrlenA (lpString="\x92\x07") returned 2 [0106.454] lstrlenA (lpString="\x92\x07") returned 2 [0106.454] lstrlenA (lpString="\x92\x07") returned 2 [0106.454] capGetDriverDescriptionA () returned 0x0 [0106.455] GetLastError () returned 0x0 [0106.455] SetLastError (dwErrCode=0x0) [0106.455] OpenThemeData () returned 0x280000 [0106.455] GetSystemMetrics (nIndex=32) returned 4 [0106.455] GetSystemMetrics (nIndex=33) returned 4 [0106.455] CloseThemeData () returned 0x0 [0106.456] lstrlenA (lpString="\x92\x07") returned 2 [0106.456] lstrlenA (lpString="\x92\x07") returned 2 [0106.456] lstrlenA (lpString="\x92\x07") returned 2 [0106.456] lstrlenA (lpString="\x92\x07") returned 2 [0106.456] lstrlenA (lpString="\x92\x07") returned 2 [0106.456] lstrlenA (lpString="\x92\x07") returned 2 [0106.456] capGetDriverDescriptionA () returned 0x0 [0106.456] GetLastError () returned 0x0 [0106.456] SetLastError (dwErrCode=0x0) [0106.456] OpenThemeData () returned 0x290000 [0106.457] GetSystemMetrics (nIndex=32) returned 4 [0106.457] GetSystemMetrics (nIndex=33) returned 4 [0106.457] CloseThemeData () returned 0x0 [0106.457] lstrlenA (lpString="\x92\x07") returned 2 [0106.457] lstrlenA (lpString="\x92\x07") returned 2 [0106.457] lstrlenA (lpString="\x92\x07") returned 2 [0106.457] lstrlenA (lpString="\x92\x07") returned 2 [0106.457] lstrlenA (lpString="\x92\x07") returned 2 [0106.458] lstrlenA (lpString="\x92\x07") returned 2 [0106.458] capGetDriverDescriptionA () returned 0x0 [0106.459] GetLastError () returned 0x0 [0106.459] SetLastError (dwErrCode=0x0) [0106.459] OpenThemeData () returned 0x2a0000 [0106.459] GetSystemMetrics (nIndex=32) returned 4 [0106.459] GetSystemMetrics (nIndex=33) returned 4 [0106.459] CloseThemeData () returned 0x0 [0106.460] lstrlenA (lpString="\x92\x07") returned 2 [0106.460] lstrlenA (lpString="\x92\x07") returned 2 [0106.460] lstrlenA (lpString="\x92\x07") returned 2 [0106.460] lstrlenA (lpString="\x92\x07") returned 2 [0106.460] lstrlenA (lpString="\x92\x07") returned 2 [0106.460] lstrlenA (lpString="\x92\x07") returned 2 [0106.460] capGetDriverDescriptionA () returned 0x0 [0106.461] GetLastError () returned 0x0 [0106.461] SetLastError (dwErrCode=0x0) [0106.461] OpenThemeData () returned 0x2b0000 [0106.461] GetSystemMetrics (nIndex=32) returned 4 [0106.461] GetSystemMetrics (nIndex=33) returned 4 [0106.461] CloseThemeData () returned 0x0 [0106.461] lstrlenA (lpString="\x92\x07") returned 2 [0106.461] lstrlenA (lpString="\x92\x07") returned 2 [0106.462] lstrlenA (lpString="\x92\x07") returned 2 [0106.462] lstrlenA (lpString="\x92\x07") returned 2 [0106.462] lstrlenA (lpString="\x92\x07") returned 2 [0106.462] lstrlenA (lpString="\x92\x07") returned 2 [0106.462] capGetDriverDescriptionA () returned 0x0 [0106.462] GetLastError () returned 0x0 [0106.462] SetLastError (dwErrCode=0x0) [0106.462] OpenThemeData () returned 0x2c0000 [0106.463] GetSystemMetrics (nIndex=32) returned 4 [0106.463] GetSystemMetrics (nIndex=33) returned 4 [0106.463] CloseThemeData () returned 0x0 [0106.463] lstrlenA (lpString="\x92\x07") returned 2 [0106.463] lstrlenA (lpString="\x92\x07") returned 2 [0106.463] lstrlenA (lpString="\x92\x07") returned 2 [0106.463] lstrlenA (lpString="\x92\x07") returned 2 [0106.463] lstrlenA (lpString="\x92\x07") returned 2 [0106.463] lstrlenA (lpString="\x92\x07") returned 2 [0106.463] capGetDriverDescriptionA () returned 0x0 [0106.464] GetLastError () returned 0x0 [0106.464] SetLastError (dwErrCode=0x0) [0106.464] OpenThemeData () returned 0x2d0000 [0106.464] GetSystemMetrics (nIndex=32) returned 4 [0106.464] GetSystemMetrics (nIndex=33) returned 4 [0106.464] CloseThemeData () returned 0x0 [0106.465] lstrlenA (lpString="\x92\x07") returned 2 [0106.465] lstrlenA (lpString="\x92\x07") returned 2 [0106.465] lstrlenA (lpString="\x92\x07") returned 2 [0106.465] lstrlenA (lpString="\x92\x07") returned 2 [0106.465] lstrlenA (lpString="\x92\x07") returned 2 [0106.465] lstrlenA (lpString="\x92\x07") returned 2 [0106.465] capGetDriverDescriptionA () returned 0x0 [0106.466] GetLastError () returned 0x0 [0106.466] SetLastError (dwErrCode=0x0) [0106.466] OpenThemeData () returned 0x2e0000 [0106.466] GetSystemMetrics (nIndex=32) returned 4 [0106.466] GetSystemMetrics (nIndex=33) returned 4 [0106.466] CloseThemeData () returned 0x0 [0106.466] lstrlenA (lpString="\x92\x07") returned 2 [0106.466] lstrlenA (lpString="\x92\x07") returned 2 [0106.466] lstrlenA (lpString="\x92\x07") returned 2 [0106.466] lstrlenA (lpString="\x92\x07") returned 2 [0106.466] lstrlenA (lpString="\x92\x07") returned 2 [0106.466] lstrlenA (lpString="\x92\x07") returned 2 [0106.466] capGetDriverDescriptionA () returned 0x0 [0106.467] GetLastError () returned 0x0 [0106.467] SetLastError (dwErrCode=0x0) [0106.467] OpenThemeData () returned 0x2f0000 [0106.468] GetSystemMetrics (nIndex=32) returned 4 [0106.468] GetSystemMetrics (nIndex=33) returned 4 [0106.468] CloseThemeData () returned 0x0 [0106.468] lstrlenA (lpString="\x92\x07") returned 2 [0106.468] lstrlenA (lpString="\x92\x07") returned 2 [0106.468] lstrlenA (lpString="\x92\x07") returned 2 [0106.468] lstrlenA (lpString="\x92\x07") returned 2 [0106.468] lstrlenA (lpString="\x92\x07") returned 2 [0106.468] lstrlenA (lpString="\x92\x07") returned 2 [0106.468] capGetDriverDescriptionA () returned 0x0 [0106.469] GetLastError () returned 0x0 [0106.469] SetLastError (dwErrCode=0x0) [0106.469] OpenThemeData () returned 0x300000 [0106.469] GetSystemMetrics (nIndex=32) returned 4 [0106.469] GetSystemMetrics (nIndex=33) returned 4 [0106.469] CloseThemeData () returned 0x0 [0106.470] lstrlenA (lpString="\x92\x07") returned 2 [0106.470] lstrlenA (lpString="\x92\x07") returned 2 [0106.470] lstrlenA (lpString="\x92\x07") returned 2 [0106.470] lstrlenA (lpString="\x92\x07") returned 2 [0106.470] lstrlenA (lpString="\x92\x07") returned 2 [0106.470] lstrlenA (lpString="\x92\x07") returned 2 [0106.470] capGetDriverDescriptionA () returned 0x0 [0106.470] GetLastError () returned 0x0 [0106.470] SetLastError (dwErrCode=0x0) [0106.470] OpenThemeData () returned 0x310000 [0106.471] GetSystemMetrics (nIndex=32) returned 4 [0106.471] GetSystemMetrics (nIndex=33) returned 4 [0106.471] CloseThemeData () returned 0x0 [0106.471] lstrlenA (lpString="\x92\x07") returned 2 [0106.471] lstrlenA (lpString="\x92\x07") returned 2 [0106.471] lstrlenA (lpString="\x92\x07") returned 2 [0106.471] lstrlenA (lpString="\x92\x07") returned 2 [0106.471] lstrlenA (lpString="\x92\x07") returned 2 [0106.471] lstrlenA (lpString="\x92\x07") returned 2 [0106.471] capGetDriverDescriptionA () returned 0x0 [0106.472] GetLastError () returned 0x0 [0106.472] SetLastError (dwErrCode=0x0) [0106.472] OpenThemeData () returned 0x320000 [0106.472] GetSystemMetrics (nIndex=32) returned 4 [0106.473] GetSystemMetrics (nIndex=33) returned 4 [0106.473] CloseThemeData () returned 0x0 [0106.473] lstrlenA (lpString="\x92\x07") returned 2 [0106.473] lstrlenA (lpString="\x92\x07") returned 2 [0106.473] lstrlenA (lpString="\x92\x07") returned 2 [0106.473] lstrlenA (lpString="\x92\x07") returned 2 [0106.473] lstrlenA (lpString="\x92\x07") returned 2 [0106.473] lstrlenA (lpString="\x92\x07") returned 2 [0106.473] capGetDriverDescriptionA () returned 0x0 [0106.474] GetLastError () returned 0x0 [0106.474] SetLastError (dwErrCode=0x0) [0106.474] OpenThemeData () returned 0x330000 [0106.474] GetSystemMetrics (nIndex=32) returned 4 [0106.474] GetSystemMetrics (nIndex=33) returned 4 [0106.474] CloseThemeData () returned 0x0 [0106.475] lstrlenA (lpString="\x92\x07") returned 2 [0106.475] lstrlenA (lpString="\x92\x07") returned 2 [0106.475] lstrlenA (lpString="\x92\x07") returned 2 [0106.475] lstrlenA (lpString="\x92\x07") returned 2 [0106.475] lstrlenA (lpString="\x92\x07") returned 2 [0106.475] lstrlenA (lpString="\x92\x07") returned 2 [0106.475] capGetDriverDescriptionA () returned 0x0 [0106.475] GetLastError () returned 0x0 [0106.475] SetLastError (dwErrCode=0x0) [0106.475] OpenThemeData () returned 0x340000 [0106.476] GetSystemMetrics (nIndex=32) returned 4 [0106.476] GetSystemMetrics (nIndex=33) returned 4 [0106.476] CloseThemeData () returned 0x0 [0106.476] lstrlenA (lpString="\x92\x07") returned 2 [0106.476] lstrlenA (lpString="\x92\x07") returned 2 [0106.476] lstrlenA (lpString="\x92\x07") returned 2 [0106.476] lstrlenA (lpString="\x92\x07") returned 2 [0106.476] lstrlenA (lpString="\x92\x07") returned 2 [0106.476] lstrlenA (lpString="\x92\x07") returned 2 [0106.476] capGetDriverDescriptionA () returned 0x0 [0106.477] GetLastError () returned 0x0 [0106.477] SetLastError (dwErrCode=0x0) [0106.477] OpenThemeData () returned 0x350000 [0106.477] GetSystemMetrics (nIndex=32) returned 4 [0106.477] GetSystemMetrics (nIndex=33) returned 4 [0106.477] CloseThemeData () returned 0x0 [0106.478] lstrlenA (lpString="\x92\x07") returned 2 [0106.478] lstrlenA (lpString="\x92\x07") returned 2 [0106.478] lstrlenA (lpString="\x92\x07") returned 2 [0106.478] lstrlenA (lpString="\x92\x07") returned 2 [0106.478] lstrlenA (lpString="\x92\x07") returned 2 [0106.478] lstrlenA (lpString="\x92\x07") returned 2 [0106.478] capGetDriverDescriptionA () returned 0x0 [0106.479] GetLastError () returned 0x0 [0106.479] SetLastError (dwErrCode=0x0) [0106.479] OpenThemeData () returned 0x360000 [0106.479] GetSystemMetrics (nIndex=32) returned 4 [0106.479] GetSystemMetrics (nIndex=33) returned 4 [0106.479] CloseThemeData () returned 0x0 [0106.479] lstrlenA (lpString="\x92\x07") returned 2 [0106.479] lstrlenA (lpString="\x92\x07") returned 2 [0106.479] lstrlenA (lpString="\x92\x07") returned 2 [0106.479] lstrlenA (lpString="\x92\x07") returned 2 [0106.480] lstrlenA (lpString="\x92\x07") returned 2 [0106.480] lstrlenA (lpString="\x92\x07") returned 2 [0106.480] capGetDriverDescriptionA () returned 0x0 [0106.480] GetLastError () returned 0x0 [0106.480] SetLastError (dwErrCode=0x0) [0106.480] OpenThemeData () returned 0x370000 [0106.481] GetSystemMetrics (nIndex=32) returned 4 [0106.481] GetSystemMetrics (nIndex=33) returned 4 [0106.481] CloseThemeData () returned 0x0 [0106.481] lstrlenA (lpString="\x92\x07") returned 2 [0106.481] lstrlenA (lpString="\x92\x07") returned 2 [0106.481] lstrlenA (lpString="\x92\x07") returned 2 [0106.481] lstrlenA (lpString="\x92\x07") returned 2 [0106.481] lstrlenA (lpString="\x92\x07") returned 2 [0106.481] lstrlenA (lpString="\x92\x07") returned 2 [0106.481] capGetDriverDescriptionA () returned 0x0 [0106.482] GetLastError () returned 0x0 [0106.482] SetLastError (dwErrCode=0x0) [0106.482] OpenThemeData () returned 0x380000 [0106.482] GetSystemMetrics (nIndex=32) returned 4 [0106.482] GetSystemMetrics (nIndex=33) returned 4 [0106.482] CloseThemeData () returned 0x0 [0106.483] lstrlenA (lpString="\x92\x07") returned 2 [0106.483] lstrlenA (lpString="\x92\x07") returned 2 [0106.483] lstrlenA (lpString="\x92\x07") returned 2 [0106.483] lstrlenA (lpString="\x92\x07") returned 2 [0106.483] lstrlenA (lpString="\x92\x07") returned 2 [0106.483] lstrlenA (lpString="\x92\x07") returned 2 [0106.483] capGetDriverDescriptionA () returned 0x0 [0106.483] GetLastError () returned 0x0 [0106.484] SetLastError (dwErrCode=0x0) [0106.484] OpenThemeData () returned 0x390000 [0106.484] GetSystemMetrics (nIndex=32) returned 4 [0106.484] GetSystemMetrics (nIndex=33) returned 4 [0106.484] CloseThemeData () returned 0x0 [0106.484] lstrlenA (lpString="\x92\x07") returned 2 [0106.484] lstrlenA (lpString="\x92\x07") returned 2 [0106.484] lstrlenA (lpString="\x92\x07") returned 2 [0106.484] lstrlenA (lpString="\x92\x07") returned 2 [0106.484] lstrlenA (lpString="\x92\x07") returned 2 [0106.484] lstrlenA (lpString="\x92\x07") returned 2 [0106.485] capGetDriverDescriptionA () returned 0x0 [0106.486] GetLastError () returned 0x0 [0106.486] SetLastError (dwErrCode=0x0) [0106.486] OpenThemeData () returned 0x3a0000 [0106.486] GetSystemMetrics (nIndex=32) returned 4 [0106.486] GetSystemMetrics (nIndex=33) returned 4 [0106.486] CloseThemeData () returned 0x0 [0106.487] lstrlenA (lpString="\x92\x07") returned 2 [0106.487] lstrlenA (lpString="\x92\x07") returned 2 [0106.487] lstrlenA (lpString="\x92\x07") returned 2 [0106.487] lstrlenA (lpString="\x92\x07") returned 2 [0106.487] lstrlenA (lpString="\x92\x07") returned 2 [0106.487] lstrlenA (lpString="\x92\x07") returned 2 [0106.487] capGetDriverDescriptionA () returned 0x0 [0106.487] GetLastError () returned 0x0 [0106.487] SetLastError (dwErrCode=0x0) [0106.487] OpenThemeData () returned 0x3b0000 [0106.488] GetSystemMetrics (nIndex=32) returned 4 [0106.488] GetSystemMetrics (nIndex=33) returned 4 [0106.488] CloseThemeData () returned 0x0 [0107.859] lstrlenA (lpString="\x92\x07") returned 2 [0107.859] lstrlenA (lpString="\x92\x07") returned 2 [0107.859] lstrlenA (lpString="\x92\x07") returned 2 [0107.859] lstrlenA (lpString="\x92\x07") returned 2 [0107.859] lstrlenA (lpString="\x92\x07") returned 2 [0107.859] lstrlenA (lpString="\x92\x07") returned 2 [0107.859] capGetDriverDescriptionA () returned 0x0 [0107.860] GetLastError () returned 0x0 [0107.860] SetLastError (dwErrCode=0x0) [0107.860] OpenThemeData () returned 0x3c0000 [0107.860] GetSystemMetrics (nIndex=32) returned 4 [0107.860] GetSystemMetrics (nIndex=33) returned 4 [0107.860] CloseThemeData () returned 0x0 [0107.861] lstrlenA (lpString="\x92\x07") returned 2 [0107.861] lstrlenA (lpString="\x92\x07") returned 2 [0107.861] lstrlenA (lpString="\x92\x07") returned 2 [0107.861] lstrlenA (lpString="\x92\x07") returned 2 [0107.861] lstrlenA (lpString="\x92\x07") returned 2 [0107.861] lstrlenA (lpString="\x92\x07") returned 2 [0107.861] capGetDriverDescriptionA () returned 0x0 [0107.862] GetLastError () returned 0x0 [0107.862] SetLastError (dwErrCode=0x0) [0107.862] OpenThemeData () returned 0x3d0000 [0107.862] GetSystemMetrics (nIndex=32) returned 4 [0107.862] GetSystemMetrics (nIndex=33) returned 4 [0107.862] CloseThemeData () returned 0x0 [0107.863] lstrlenA (lpString="\x92\x07") returned 2 [0107.863] lstrlenA (lpString="\x92\x07") returned 2 [0107.863] lstrlenA (lpString="\x92\x07") returned 2 [0107.863] lstrlenA (lpString="\x92\x07") returned 2 [0107.863] lstrlenA (lpString="\x92\x07") returned 2 [0107.863] lstrlenA (lpString="\x92\x07") returned 2 [0107.863] capGetDriverDescriptionA () returned 0x0 [0107.863] GetLastError () returned 0x0 [0107.863] SetLastError (dwErrCode=0x0) [0107.863] OpenThemeData () returned 0x3e0000 [0107.864] GetSystemMetrics (nIndex=32) returned 4 [0107.864] GetSystemMetrics (nIndex=33) returned 4 [0107.864] CloseThemeData () returned 0x0 [0107.864] lstrlenA (lpString="\x92\x07") returned 2 [0107.864] lstrlenA (lpString="\x92\x07") returned 2 [0107.864] lstrlenA (lpString="\x92\x07") returned 2 [0107.864] lstrlenA (lpString="\x92\x07") returned 2 [0107.864] lstrlenA (lpString="\x92\x07") returned 2 [0107.864] lstrlenA (lpString="\x92\x07") returned 2 [0107.864] capGetDriverDescriptionA () returned 0x0 [0107.865] GetLastError () returned 0x0 [0107.865] SetLastError (dwErrCode=0x0) [0107.865] OpenThemeData () returned 0x3f0000 [0107.866] GetSystemMetrics (nIndex=32) returned 4 [0107.866] GetSystemMetrics (nIndex=33) returned 4 [0107.866] CloseThemeData () returned 0x0 [0107.866] lstrlenA (lpString="\x92\x07") returned 2 [0107.866] lstrlenA (lpString="\x92\x07") returned 2 [0107.866] lstrlenA (lpString="\x92\x07") returned 2 [0107.866] lstrlenA (lpString="\x92\x07") returned 2 [0107.866] lstrlenA (lpString="\x92\x07") returned 2 [0107.866] lstrlenA (lpString="\x92\x07") returned 2 [0107.866] capGetDriverDescriptionA () returned 0x0 [0107.867] GetLastError () returned 0x0 [0107.867] SetLastError (dwErrCode=0x0) [0107.867] OpenThemeData () returned 0x400000 [0107.867] GetSystemMetrics (nIndex=32) returned 4 [0107.867] GetSystemMetrics (nIndex=33) returned 4 [0107.867] CloseThemeData () returned 0x0 [0107.868] lstrlenA (lpString="\x92\x07") returned 2 [0107.868] lstrlenA (lpString="\x92\x07") returned 2 [0107.868] lstrlenA (lpString="\x92\x07") returned 2 [0107.868] lstrlenA (lpString="\x92\x07") returned 2 [0107.868] lstrlenA (lpString="\x92\x07") returned 2 [0107.868] lstrlenA (lpString="\x92\x07") returned 2 [0107.868] capGetDriverDescriptionA () returned 0x0 [0107.868] GetLastError () returned 0x0 [0107.868] SetLastError (dwErrCode=0x0) [0107.868] OpenThemeData () returned 0x410000 [0107.869] GetSystemMetrics (nIndex=32) returned 4 [0107.869] GetSystemMetrics (nIndex=33) returned 4 [0107.869] CloseThemeData () returned 0x0 [0107.869] lstrlenA (lpString="\x92\x07") returned 2 [0107.869] lstrlenA (lpString="\x92\x07") returned 2 [0107.869] lstrlenA (lpString="\x92\x07") returned 2 [0107.869] lstrlenA (lpString="\x92\x07") returned 2 [0107.869] lstrlenA (lpString="\x92\x07") returned 2 [0107.869] lstrlenA (lpString="\x92\x07") returned 2 [0107.869] capGetDriverDescriptionA () returned 0x0 [0107.870] GetLastError () returned 0x0 [0107.870] SetLastError (dwErrCode=0x0) [0107.870] OpenThemeData () returned 0x420000 [0107.870] GetSystemMetrics (nIndex=32) returned 4 [0107.870] GetSystemMetrics (nIndex=33) returned 4 [0107.870] CloseThemeData () returned 0x0 [0107.871] lstrlenA (lpString="\x92\x07") returned 2 [0107.871] lstrlenA (lpString="\x92\x07") returned 2 [0107.871] lstrlenA (lpString="\x92\x07") returned 2 [0107.871] lstrlenA (lpString="\x92\x07") returned 2 [0107.871] lstrlenA (lpString="\x92\x07") returned 2 [0107.871] lstrlenA (lpString="\x92\x07") returned 2 [0107.871] capGetDriverDescriptionA () returned 0x0 [0107.871] GetLastError () returned 0x0 [0107.871] SetLastError (dwErrCode=0x0) [0107.871] OpenThemeData () returned 0x430000 [0107.872] GetSystemMetrics (nIndex=32) returned 4 [0107.872] GetSystemMetrics (nIndex=33) returned 4 [0107.872] CloseThemeData () returned 0x0 [0107.872] lstrlenA (lpString="\x92\x07") returned 2 [0107.872] lstrlenA (lpString="\x92\x07") returned 2 [0107.873] lstrlenA (lpString="\x92\x07") returned 2 [0107.873] lstrlenA (lpString="\x92\x07") returned 2 [0107.873] lstrlenA (lpString="\x92\x07") returned 2 [0107.873] lstrlenA (lpString="\x92\x07") returned 2 [0107.873] capGetDriverDescriptionA () returned 0x0 [0107.873] GetLastError () returned 0x0 [0107.873] SetLastError (dwErrCode=0x0) [0107.873] OpenThemeData () returned 0x440000 [0107.874] GetSystemMetrics (nIndex=32) returned 4 [0107.874] GetSystemMetrics (nIndex=33) returned 4 [0107.874] CloseThemeData () returned 0x0 [0107.874] lstrlenA (lpString="\x92\x07") returned 2 [0107.874] lstrlenA (lpString="\x92\x07") returned 2 [0107.874] lstrlenA (lpString="\x92\x07") returned 2 [0107.874] lstrlenA (lpString="\x92\x07") returned 2 [0107.874] lstrlenA (lpString="\x92\x07") returned 2 [0107.874] lstrlenA (lpString="\x92\x07") returned 2 [0107.874] capGetDriverDescriptionA () returned 0x0 [0107.875] GetLastError () returned 0x0 [0107.875] SetLastError (dwErrCode=0x0) [0107.875] OpenThemeData () returned 0x450000 [0107.875] GetSystemMetrics (nIndex=32) returned 4 [0107.875] GetSystemMetrics (nIndex=33) returned 4 [0107.875] CloseThemeData () returned 0x0 [0107.876] lstrlenA (lpString="\x92\x07") returned 2 [0107.876] lstrlenA (lpString="\x92\x07") returned 2 [0107.876] lstrlenA (lpString="\x92\x07") returned 2 [0107.876] lstrlenA (lpString="\x92\x07") returned 2 [0107.876] lstrlenA (lpString="\x92\x07") returned 2 [0107.876] lstrlenA (lpString="\x92\x07") returned 2 [0107.876] capGetDriverDescriptionA () returned 0x0 [0107.876] GetLastError () returned 0x0 [0107.876] SetLastError (dwErrCode=0x0) [0107.876] OpenThemeData () returned 0x460000 [0107.877] GetSystemMetrics (nIndex=32) returned 4 [0107.877] GetSystemMetrics (nIndex=33) returned 4 [0107.877] CloseThemeData () returned 0x0 [0107.878] lstrlenA (lpString="\x92\x07") returned 2 [0107.878] lstrlenA (lpString="\x92\x07") returned 2 [0107.878] lstrlenA (lpString="\x92\x07") returned 2 [0107.878] lstrlenA (lpString="\x92\x07") returned 2 [0107.878] lstrlenA (lpString="\x92\x07") returned 2 [0107.878] lstrlenA (lpString="\x92\x07") returned 2 [0107.878] capGetDriverDescriptionA () returned 0x0 [0107.878] GetLastError () returned 0x0 [0107.878] SetLastError (dwErrCode=0x0) [0107.878] OpenThemeData () returned 0x470000 [0107.879] GetSystemMetrics (nIndex=32) returned 4 [0107.879] GetSystemMetrics (nIndex=33) returned 4 [0107.879] CloseThemeData () returned 0x0 [0107.879] lstrlenA (lpString="\x92\x07") returned 2 [0107.879] lstrlenA (lpString="\x92\x07") returned 2 [0107.879] lstrlenA (lpString="\x92\x07") returned 2 [0107.879] lstrlenA (lpString="\x92\x07") returned 2 [0107.879] lstrlenA (lpString="\x92\x07") returned 2 [0107.879] lstrlenA (lpString="\x92\x07") returned 2 [0107.879] capGetDriverDescriptionA () returned 0x0 [0107.880] GetLastError () returned 0x0 [0107.880] SetLastError (dwErrCode=0x0) [0107.880] OpenThemeData () returned 0x480000 [0107.880] GetSystemMetrics (nIndex=32) returned 4 [0107.880] GetSystemMetrics (nIndex=33) returned 4 [0107.880] CloseThemeData () returned 0x0 [0107.881] lstrlenA (lpString="\x92\x07") returned 2 [0107.881] lstrlenA (lpString="\x92\x07") returned 2 [0107.881] lstrlenA (lpString="\x92\x07") returned 2 [0107.881] lstrlenA (lpString="\x92\x07") returned 2 [0107.881] lstrlenA (lpString="\x92\x07") returned 2 [0107.881] lstrlenA (lpString="\x92\x07") returned 2 [0107.881] capGetDriverDescriptionA () returned 0x0 [0107.881] GetLastError () returned 0x0 [0107.881] SetLastError (dwErrCode=0x0) [0107.882] OpenThemeData () returned 0x490000 [0107.882] GetSystemMetrics (nIndex=32) returned 4 [0107.882] GetSystemMetrics (nIndex=33) returned 4 [0107.882] CloseThemeData () returned 0x0 [0107.882] lstrlenA (lpString="\x92\x07") returned 2 [0107.882] lstrlenA (lpString="\x92\x07") returned 2 [0107.882] lstrlenA (lpString="\x92\x07") returned 2 [0107.883] lstrlenA (lpString="\x92\x07") returned 2 [0107.883] lstrlenA (lpString="\x92\x07") returned 2 [0107.883] lstrlenA (lpString="\x92\x07") returned 2 [0107.883] capGetDriverDescriptionA () returned 0x0 [0107.884] GetLastError () returned 0x0 [0107.884] SetLastError (dwErrCode=0x0) [0107.884] OpenThemeData () returned 0x4a0000 [0107.884] GetSystemMetrics (nIndex=32) returned 4 [0107.884] GetSystemMetrics (nIndex=33) returned 4 [0107.884] CloseThemeData () returned 0x0 [0107.892] lstrlenA (lpString="\x92\x07") returned 2 [0107.892] lstrlenA (lpString="\x92\x07") returned 2 [0107.892] lstrlenA (lpString="\x92\x07") returned 2 [0107.892] lstrlenA (lpString="\x92\x07") returned 2 [0107.892] lstrlenA (lpString="\x92\x07") returned 2 [0107.892] lstrlenA (lpString="\x92\x07") returned 2 [0107.892] capGetDriverDescriptionA () returned 0x0 [0107.893] GetLastError () returned 0x0 [0107.893] SetLastError (dwErrCode=0x0) [0107.893] OpenThemeData () returned 0x4b0000 [0107.893] GetSystemMetrics (nIndex=32) returned 4 [0107.893] GetSystemMetrics (nIndex=33) returned 4 [0107.893] CloseThemeData () returned 0x0 [0107.894] lstrlenA (lpString="\x92\x07") returned 2 [0107.894] lstrlenA (lpString="\x92\x07") returned 2 [0107.894] lstrlenA (lpString="\x92\x07") returned 2 [0107.894] lstrlenA (lpString="\x92\x07") returned 2 [0107.894] lstrlenA (lpString="\x92\x07") returned 2 [0107.894] lstrlenA (lpString="\x92\x07") returned 2 [0107.894] capGetDriverDescriptionA () returned 0x0 [0107.894] GetLastError () returned 0x0 [0107.894] SetLastError (dwErrCode=0x0) [0107.895] OpenThemeData () returned 0x4c0000 [0107.895] GetSystemMetrics (nIndex=32) returned 4 [0107.895] GetSystemMetrics (nIndex=33) returned 4 [0107.895] CloseThemeData () returned 0x0 [0107.895] lstrlenA (lpString="\x92\x07") returned 2 [0107.895] lstrlenA (lpString="\x92\x07") returned 2 [0107.895] lstrlenA (lpString="\x92\x07") returned 2 [0107.895] lstrlenA (lpString="\x92\x07") returned 2 [0107.895] lstrlenA (lpString="\x92\x07") returned 2 [0107.896] lstrlenA (lpString="\x92\x07") returned 2 [0107.896] capGetDriverDescriptionA () returned 0x0 [0107.896] GetLastError () returned 0x0 [0107.896] SetLastError (dwErrCode=0x0) [0107.896] OpenThemeData () returned 0x4d0000 [0107.897] GetSystemMetrics (nIndex=32) returned 4 [0107.897] GetSystemMetrics (nIndex=33) returned 4 [0107.897] CloseThemeData () returned 0x0 [0107.897] lstrlenA (lpString="\x92\x07") returned 2 [0107.898] lstrlenA (lpString="\x92\x07") returned 2 [0107.898] lstrlenA (lpString="\x92\x07") returned 2 [0107.898] lstrlenA (lpString="\x92\x07") returned 2 [0107.898] lstrlenA (lpString="\x92\x07") returned 2 [0107.898] lstrlenA (lpString="\x92\x07") returned 2 [0107.898] capGetDriverDescriptionA () returned 0x0 [0107.898] GetLastError () returned 0x0 [0107.898] SetLastError (dwErrCode=0x0) [0107.898] OpenThemeData () returned 0x4e0000 [0107.899] GetSystemMetrics (nIndex=32) returned 4 [0107.899] GetSystemMetrics (nIndex=33) returned 4 [0107.899] CloseThemeData () returned 0x0 [0107.899] lstrlenA (lpString="\x92\x07") returned 2 [0107.899] lstrlenA (lpString="\x92\x07") returned 2 [0107.899] lstrlenA (lpString="\x92\x07") returned 2 [0107.899] lstrlenA (lpString="\x92\x07") returned 2 [0107.899] lstrlenA (lpString="\x92\x07") returned 2 [0107.899] lstrlenA (lpString="\x92\x07") returned 2 [0107.899] capGetDriverDescriptionA () returned 0x0 [0107.900] GetLastError () returned 0x0 [0107.900] SetLastError (dwErrCode=0x0) [0107.900] OpenThemeData () returned 0x4f0000 [0108.162] GetSystemMetrics (nIndex=32) returned 4 [0108.162] GetSystemMetrics (nIndex=33) returned 4 [0108.162] CloseThemeData () returned 0x0 [0108.162] lstrlenA (lpString="\x92\x07") returned 2 [0108.162] lstrlenA (lpString="\x92\x07") returned 2 [0108.162] lstrlenA (lpString="\x92\x07") returned 2 [0108.162] lstrlenA (lpString="\x92\x07") returned 2 [0108.162] lstrlenA (lpString="\x92\x07") returned 2 [0108.162] lstrlenA (lpString="\x92\x07") returned 2 [0108.162] capGetDriverDescriptionA () returned 0x0 [0108.163] GetLastError () returned 0x0 [0108.163] SetLastError (dwErrCode=0x0) [0108.163] OpenThemeData () returned 0x500000 [0108.164] GetSystemMetrics (nIndex=32) returned 4 [0108.164] GetSystemMetrics (nIndex=33) returned 4 [0108.164] CloseThemeData () returned 0x0 [0108.164] lstrlenA (lpString="\x92\x07") returned 2 [0108.164] lstrlenA (lpString="\x92\x07") returned 2 [0108.164] lstrlenA (lpString="\x92\x07") returned 2 [0108.164] lstrlenA (lpString="\x92\x07") returned 2 [0108.164] lstrlenA (lpString="\x92\x07") returned 2 [0108.164] lstrlenA (lpString="\x92\x07") returned 2 [0108.164] capGetDriverDescriptionA () returned 0x0 [0108.165] GetLastError () returned 0x0 [0108.165] SetLastError (dwErrCode=0x0) [0108.165] OpenThemeData () returned 0x510000 [0108.165] GetSystemMetrics (nIndex=32) returned 4 [0108.165] GetSystemMetrics (nIndex=33) returned 4 [0108.165] CloseThemeData () returned 0x0 [0108.166] lstrlenA (lpString="\x92\x07") returned 2 [0108.166] lstrlenA (lpString="\x92\x07") returned 2 [0108.166] lstrlenA (lpString="\x92\x07") returned 2 [0108.166] lstrlenA (lpString="\x92\x07") returned 2 [0108.166] lstrlenA (lpString="\x92\x07") returned 2 [0108.166] lstrlenA (lpString="\x92\x07") returned 2 [0108.166] capGetDriverDescriptionA () returned 0x0 [0108.166] GetLastError () returned 0x0 [0108.167] SetLastError (dwErrCode=0x0) [0108.167] OpenThemeData () returned 0x520000 [0108.167] GetSystemMetrics (nIndex=32) returned 4 [0108.167] GetSystemMetrics (nIndex=33) returned 4 [0108.167] CloseThemeData () returned 0x0 [0108.167] lstrlenA (lpString="\x92\x07") returned 2 [0108.167] lstrlenA (lpString="\x92\x07") returned 2 [0108.167] lstrlenA (lpString="\x92\x07") returned 2 [0108.167] lstrlenA (lpString="\x92\x07") returned 2 [0108.167] lstrlenA (lpString="\x92\x07") returned 2 [0108.167] lstrlenA (lpString="\x92\x07") returned 2 [0108.168] capGetDriverDescriptionA () returned 0x0 [0108.168] GetLastError () returned 0x0 [0108.168] SetLastError (dwErrCode=0x0) [0108.168] OpenThemeData () returned 0x530000 [0108.169] GetSystemMetrics (nIndex=32) returned 4 [0108.169] GetSystemMetrics (nIndex=33) returned 4 [0108.169] CloseThemeData () returned 0x0 [0108.169] lstrlenA (lpString="\x92\x07") returned 2 [0108.169] lstrlenA (lpString="\x92\x07") returned 2 [0108.169] lstrlenA (lpString="\x92\x07") returned 2 [0108.169] lstrlenA (lpString="\x92\x07") returned 2 [0108.169] lstrlenA (lpString="\x92\x07") returned 2 [0108.169] lstrlenA (lpString="\x92\x07") returned 2 [0108.169] capGetDriverDescriptionA () returned 0x0 [0108.170] GetLastError () returned 0x0 [0108.170] SetLastError (dwErrCode=0x0) [0108.170] OpenThemeData () returned 0x540000 [0108.170] GetSystemMetrics (nIndex=32) returned 4 [0108.170] GetSystemMetrics (nIndex=33) returned 4 [0108.170] CloseThemeData () returned 0x0 [0108.171] lstrlenA (lpString="\x92\x07") returned 2 [0108.171] lstrlenA (lpString="\x92\x07") returned 2 [0108.171] lstrlenA (lpString="\x92\x07") returned 2 [0108.171] lstrlenA (lpString="\x92\x07") returned 2 [0108.171] lstrlenA (lpString="\x92\x07") returned 2 [0108.171] lstrlenA (lpString="\x92\x07") returned 2 [0108.171] capGetDriverDescriptionA () returned 0x0 [0108.171] GetLastError () returned 0x0 [0108.171] SetLastError (dwErrCode=0x0) [0108.171] OpenThemeData () returned 0x550000 [0108.172] GetSystemMetrics (nIndex=32) returned 4 [0108.172] GetSystemMetrics (nIndex=33) returned 4 [0108.172] CloseThemeData () returned 0x0 [0108.172] lstrlenA (lpString="\x92\x07") returned 2 [0108.172] lstrlenA (lpString="\x92\x07") returned 2 [0108.172] lstrlenA (lpString="\x92\x07") returned 2 [0108.172] lstrlenA (lpString="\x92\x07") returned 2 [0108.172] lstrlenA (lpString="\x92\x07") returned 2 [0108.172] lstrlenA (lpString="\x92\x07") returned 2 [0108.172] capGetDriverDescriptionA () returned 0x0 [0108.173] GetLastError () returned 0x0 [0108.173] SetLastError (dwErrCode=0x0) [0108.173] OpenThemeData () returned 0x560000 [0108.174] GetSystemMetrics (nIndex=32) returned 4 [0108.174] GetSystemMetrics (nIndex=33) returned 4 [0108.174] CloseThemeData () returned 0x0 [0108.174] lstrlenA (lpString="\x92\x07") returned 2 [0108.174] lstrlenA (lpString="\x92\x07") returned 2 [0108.174] lstrlenA (lpString="\x92\x07") returned 2 [0108.174] lstrlenA (lpString="\x92\x07") returned 2 [0108.174] lstrlenA (lpString="\x92\x07") returned 2 [0108.174] lstrlenA (lpString="\x92\x07") returned 2 [0108.174] capGetDriverDescriptionA () returned 0x0 [0108.175] GetLastError () returned 0x0 [0108.175] SetLastError (dwErrCode=0x0) [0108.175] OpenThemeData () returned 0x570000 [0108.175] GetSystemMetrics (nIndex=32) returned 4 [0108.175] GetSystemMetrics (nIndex=33) returned 4 [0108.175] CloseThemeData () returned 0x0 [0108.176] lstrlenA (lpString="\x92\x07") returned 2 [0108.176] lstrlenA (lpString="\x92\x07") returned 2 [0108.176] lstrlenA (lpString="\x92\x07") returned 2 [0108.176] lstrlenA (lpString="\x92\x07") returned 2 [0108.176] lstrlenA (lpString="\x92\x07") returned 2 [0108.176] lstrlenA (lpString="\x92\x07") returned 2 [0108.176] capGetDriverDescriptionA () returned 0x0 [0108.177] GetLastError () returned 0x0 [0108.177] SetLastError (dwErrCode=0x0) [0108.177] OpenThemeData () returned 0x580000 [0108.177] GetSystemMetrics (nIndex=32) returned 4 [0108.177] GetSystemMetrics (nIndex=33) returned 4 [0108.177] CloseThemeData () returned 0x0 [0108.177] lstrlenA (lpString="\x92\x07") returned 2 [0108.178] lstrlenA (lpString="\x92\x07") returned 2 [0108.178] lstrlenA (lpString="\x92\x07") returned 2 [0108.178] lstrlenA (lpString="\x92\x07") returned 2 [0108.178] lstrlenA (lpString="\x92\x07") returned 2 [0108.178] lstrlenA (lpString="\x92\x07") returned 2 [0108.178] capGetDriverDescriptionA () returned 0x0 [0108.178] GetLastError () returned 0x0 [0108.178] SetLastError (dwErrCode=0x0) [0108.178] OpenThemeData () returned 0x590000 [0108.179] GetSystemMetrics (nIndex=32) returned 4 [0108.179] GetSystemMetrics (nIndex=33) returned 4 [0108.179] CloseThemeData () returned 0x0 [0108.179] lstrlenA (lpString="\x92\x07") returned 2 [0108.179] lstrlenA (lpString="\x92\x07") returned 2 [0108.179] lstrlenA (lpString="\x92\x07") returned 2 [0108.179] lstrlenA (lpString="\x92\x07") returned 2 [0108.179] lstrlenA (lpString="\x92\x07") returned 2 [0108.179] lstrlenA (lpString="\x92\x07") returned 2 [0108.179] capGetDriverDescriptionA () returned 0x0 [0108.181] GetLastError () returned 0x0 [0108.181] SetLastError (dwErrCode=0x0) [0108.181] OpenThemeData () returned 0x5a0000 [0108.181] GetSystemMetrics (nIndex=32) returned 4 [0108.181] GetSystemMetrics (nIndex=33) returned 4 [0108.181] CloseThemeData () returned 0x0 [0108.182] lstrlenA (lpString="\x92\x07") returned 2 [0108.182] lstrlenA (lpString="\x92\x07") returned 2 [0108.182] lstrlenA (lpString="\x92\x07") returned 2 [0108.182] lstrlenA (lpString="\x92\x07") returned 2 [0108.182] lstrlenA (lpString="\x92\x07") returned 2 [0108.182] lstrlenA (lpString="\x92\x07") returned 2 [0108.182] capGetDriverDescriptionA () returned 0x0 [0108.182] GetLastError () returned 0x0 [0108.182] SetLastError (dwErrCode=0x0) [0108.183] OpenThemeData () returned 0x5b0000 [0108.183] GetSystemMetrics (nIndex=32) returned 4 [0108.183] GetSystemMetrics (nIndex=33) returned 4 [0108.183] CloseThemeData () returned 0x0 [0108.183] lstrlenA (lpString="\x92\x07") returned 2 [0108.183] lstrlenA (lpString="\x92\x07") returned 2 [0108.183] lstrlenA (lpString="\x92\x07") returned 2 [0108.183] lstrlenA (lpString="\x92\x07") returned 2 [0108.183] lstrlenA (lpString="\x92\x07") returned 2 [0108.183] lstrlenA (lpString="\x92\x07") returned 2 [0108.183] capGetDriverDescriptionA () returned 0x0 [0108.184] GetLastError () returned 0x0 [0108.184] SetLastError (dwErrCode=0x0) [0108.184] OpenThemeData () returned 0x5c0000 [0108.185] GetSystemMetrics (nIndex=32) returned 4 [0108.185] GetSystemMetrics (nIndex=33) returned 4 [0108.185] CloseThemeData () returned 0x0 [0108.185] lstrlenA (lpString="\x92\x07") returned 2 [0108.185] lstrlenA (lpString="\x92\x07") returned 2 [0108.185] lstrlenA (lpString="\x92\x07") returned 2 [0108.185] lstrlenA (lpString="\x92\x07") returned 2 [0108.185] lstrlenA (lpString="\x92\x07") returned 2 [0108.185] lstrlenA (lpString="\x92\x07") returned 2 [0108.185] capGetDriverDescriptionA () returned 0x0 [0108.186] GetLastError () returned 0x0 [0108.186] SetLastError (dwErrCode=0x0) [0108.186] OpenThemeData () returned 0x5d0000 [0108.186] GetSystemMetrics (nIndex=32) returned 4 [0108.186] GetSystemMetrics (nIndex=33) returned 4 [0108.186] CloseThemeData () returned 0x0 [0108.187] lstrlenA (lpString="\x92\x07") returned 2 [0108.187] lstrlenA (lpString="\x92\x07") returned 2 [0108.187] lstrlenA (lpString="\x92\x07") returned 2 [0108.187] lstrlenA (lpString="\x92\x07") returned 2 [0108.187] lstrlenA (lpString="\x92\x07") returned 2 [0108.187] lstrlenA (lpString="\x92\x07") returned 2 [0108.187] capGetDriverDescriptionA () returned 0x0 [0108.187] GetLastError () returned 0x0 [0108.187] SetLastError (dwErrCode=0x0) [0108.187] OpenThemeData () returned 0x5e0000 [0108.188] GetSystemMetrics (nIndex=32) returned 4 [0108.188] GetSystemMetrics (nIndex=33) returned 4 [0108.188] CloseThemeData () returned 0x0 [0108.188] lstrlenA (lpString="\x92\x07") returned 2 [0108.188] lstrlenA (lpString="\x92\x07") returned 2 [0108.188] lstrlenA (lpString="\x92\x07") returned 2 [0108.188] lstrlenA (lpString="\x92\x07") returned 2 [0108.188] lstrlenA (lpString="\x92\x07") returned 2 [0108.188] lstrlenA (lpString="\x92\x07") returned 2 [0108.188] capGetDriverDescriptionA () returned 0x0 [0108.189] GetLastError () returned 0x0 [0108.189] SetLastError (dwErrCode=0x0) [0108.189] OpenThemeData () returned 0x5f0000 [0108.190] GetSystemMetrics (nIndex=32) returned 4 [0108.190] GetSystemMetrics (nIndex=33) returned 4 [0108.190] CloseThemeData () returned 0x0 [0108.190] lstrlenA (lpString="\x92\x07") returned 2 [0108.190] lstrlenA (lpString="\x92\x07") returned 2 [0108.190] lstrlenA (lpString="\x92\x07") returned 2 [0108.190] lstrlenA (lpString="\x92\x07") returned 2 [0108.190] lstrlenA (lpString="\x92\x07") returned 2 [0108.190] lstrlenA (lpString="\x92\x07") returned 2 [0108.190] capGetDriverDescriptionA () returned 0x0 [0108.191] GetLastError () returned 0x0 [0108.191] SetLastError (dwErrCode=0x0) [0108.191] OpenThemeData () returned 0x600000 [0108.191] GetSystemMetrics (nIndex=32) returned 4 [0108.191] GetSystemMetrics (nIndex=33) returned 4 [0108.191] CloseThemeData () returned 0x0 [0108.192] lstrlenA (lpString="\x92\x07") returned 2 [0108.192] lstrlenA (lpString="\x92\x07") returned 2 [0108.192] lstrlenA (lpString="\x92\x07") returned 2 [0108.192] lstrlenA (lpString="\x92\x07") returned 2 [0108.192] lstrlenA (lpString="\x92\x07") returned 2 [0108.192] lstrlenA (lpString="\x92\x07") returned 2 [0108.192] capGetDriverDescriptionA () returned 0x0 [0108.192] GetLastError () returned 0x0 [0108.192] SetLastError (dwErrCode=0x0) [0108.192] OpenThemeData () returned 0x610000 [0108.193] GetSystemMetrics (nIndex=32) returned 4 [0108.193] GetSystemMetrics (nIndex=33) returned 4 [0108.193] CloseThemeData () returned 0x0 [0108.193] lstrlenA (lpString="\x92\x07") returned 2 [0108.193] lstrlenA (lpString="\x92\x07") returned 2 [0108.193] lstrlenA (lpString="\x92\x07") returned 2 [0108.193] lstrlenA (lpString="\x92\x07") returned 2 [0108.193] lstrlenA (lpString="\x92\x07") returned 2 [0108.193] lstrlenA (lpString="\x92\x07") returned 2 [0108.193] capGetDriverDescriptionA () returned 0x0 [0108.194] GetLastError () returned 0x0 [0108.194] SetLastError (dwErrCode=0x0) [0108.194] OpenThemeData () returned 0x620000 [0108.194] GetSystemMetrics (nIndex=32) returned 4 [0108.195] GetSystemMetrics (nIndex=33) returned 4 [0108.195] CloseThemeData () returned 0x0 [0108.195] lstrlenA (lpString="\x92\x07") returned 2 [0108.195] lstrlenA (lpString="\x92\x07") returned 2 [0108.195] lstrlenA (lpString="\x92\x07") returned 2 [0108.195] lstrlenA (lpString="\x92\x07") returned 2 [0108.195] lstrlenA (lpString="\x92\x07") returned 2 [0108.195] lstrlenA (lpString="\x92\x07") returned 2 [0108.195] capGetDriverDescriptionA () returned 0x0 [0108.196] GetLastError () returned 0x0 [0108.196] SetLastError (dwErrCode=0x0) [0108.196] OpenThemeData () returned 0x630000 [0108.196] GetSystemMetrics (nIndex=32) returned 4 [0108.196] GetSystemMetrics (nIndex=33) returned 4 [0108.196] CloseThemeData () returned 0x0 [0108.323] lstrlenA (lpString="\x92\x07") returned 2 [0108.323] lstrlenA (lpString="\x92\x07") returned 2 [0108.323] lstrlenA (lpString="\x92\x07") returned 2 [0108.323] lstrlenA (lpString="\x92\x07") returned 2 [0108.323] lstrlenA (lpString="\x92\x07") returned 2 [0108.323] lstrlenA (lpString="\x92\x07") returned 2 [0108.323] capGetDriverDescriptionA () returned 0x0 [0108.323] GetLastError () returned 0x0 [0108.323] SetLastError (dwErrCode=0x0) [0108.323] OpenThemeData () returned 0x640000 [0108.324] GetSystemMetrics (nIndex=32) returned 4 [0108.324] GetSystemMetrics (nIndex=33) returned 4 [0108.324] CloseThemeData () returned 0x0 [0108.324] lstrlenA (lpString="\x92\x07") returned 2 [0108.324] lstrlenA (lpString="\x92\x07") returned 2 [0108.324] lstrlenA (lpString="\x92\x07") returned 2 [0108.324] capGetDriverDescriptionA () returned 0x0 [0108.325] GetLastError () returned 0x0 [0108.325] SetLastError (dwErrCode=0x0) [0108.325] OpenThemeData () returned 0x650000 [0108.326] GetSystemMetrics (nIndex=32) returned 4 [0108.326] GetSystemMetrics (nIndex=33) returned 4 [0108.326] CloseThemeData () returned 0x0 [0108.326] capGetDriverDescriptionA () returned 0x0 [0108.327] GetLastError () returned 0x0 [0108.327] SetLastError (dwErrCode=0x0) [0108.327] OpenThemeData () returned 0x660000 [0108.327] GetSystemMetrics (nIndex=32) returned 4 [0108.327] GetSystemMetrics (nIndex=33) returned 4 [0108.327] CloseThemeData () returned 0x0 [0108.328] capGetDriverDescriptionA () returned 0x0 [0108.328] GetLastError () returned 0x0 [0108.328] SetLastError (dwErrCode=0x0) [0108.328] OpenThemeData () returned 0x670000 [0108.329] GetSystemMetrics (nIndex=32) returned 4 [0108.329] GetSystemMetrics (nIndex=33) returned 4 [0108.329] CloseThemeData () returned 0x0 [0108.329] capGetDriverDescriptionA () returned 0x0 [0108.331] GetLastError () returned 0x0 [0108.331] SetLastError (dwErrCode=0x0) [0108.331] OpenThemeData () returned 0x680000 [0108.333] GetSystemMetrics (nIndex=32) returned 4 [0108.333] GetSystemMetrics (nIndex=33) returned 4 [0108.333] CloseThemeData () returned 0x0 [0108.333] capGetDriverDescriptionA () returned 0x0 [0108.334] GetLastError () returned 0x0 [0108.334] SetLastError (dwErrCode=0x0) [0108.334] OpenThemeData () returned 0x690000 [0108.334] GetSystemMetrics (nIndex=32) returned 4 [0108.334] GetSystemMetrics (nIndex=33) returned 4 [0108.334] CloseThemeData () returned 0x0 [0108.336] capGetDriverDescriptionA () returned 0x0 [0108.337] GetLastError () returned 0x0 [0108.337] SetLastError (dwErrCode=0x0) [0108.337] OpenThemeData () returned 0x6a0000 [0108.337] GetSystemMetrics (nIndex=32) returned 4 [0108.337] GetSystemMetrics (nIndex=33) returned 4 [0108.337] CloseThemeData () returned 0x0 [0108.338] capGetDriverDescriptionA () returned 0x0 [0108.338] GetLastError () returned 0x0 [0108.338] SetLastError (dwErrCode=0x0) [0108.339] OpenThemeData () returned 0x6b0000 [0108.339] GetSystemMetrics (nIndex=32) returned 4 [0108.339] GetSystemMetrics (nIndex=33) returned 4 [0108.339] CloseThemeData () returned 0x0 [0108.339] capGetDriverDescriptionA () returned 0x0 [0108.340] GetLastError () returned 0x0 [0108.340] SetLastError (dwErrCode=0x0) [0108.340] OpenThemeData () returned 0x6c0000 [0108.341] GetSystemMetrics (nIndex=32) returned 4 [0108.341] GetSystemMetrics (nIndex=33) returned 4 [0108.341] CloseThemeData () returned 0x0 [0108.342] capGetDriverDescriptionA () returned 0x0 [0108.343] GetLastError () returned 0x0 [0108.343] SetLastError (dwErrCode=0x0) [0108.343] OpenThemeData () returned 0x6d0000 [0108.343] GetSystemMetrics (nIndex=32) returned 4 [0108.343] GetSystemMetrics (nIndex=33) returned 4 [0108.343] CloseThemeData () returned 0x0 [0108.344] capGetDriverDescriptionA () returned 0x0 [0108.344] GetLastError () returned 0x0 [0108.344] SetLastError (dwErrCode=0x0) [0108.344] OpenThemeData () returned 0x6e0000 [0108.346] GetSystemMetrics (nIndex=32) returned 4 [0108.347] GetSystemMetrics (nIndex=33) returned 4 [0108.347] CloseThemeData () returned 0x0 [0108.347] capGetDriverDescriptionA () returned 0x0 [0108.349] GetLastError () returned 0x0 [0108.349] SetLastError (dwErrCode=0x0) [0108.349] OpenThemeData () returned 0x6f0000 [0108.349] GetSystemMetrics (nIndex=32) returned 4 [0108.349] GetSystemMetrics (nIndex=33) returned 4 [0108.349] CloseThemeData () returned 0x0 [0108.350] capGetDriverDescriptionA () returned 0x0 [0108.351] GetLastError () returned 0x0 [0108.351] SetLastError (dwErrCode=0x0) [0108.351] OpenThemeData () returned 0x700000 [0108.352] GetSystemMetrics (nIndex=32) returned 4 [0108.352] GetSystemMetrics (nIndex=33) returned 4 [0108.352] CloseThemeData () returned 0x0 [0108.352] capGetDriverDescriptionA () returned 0x0 [0108.353] GetLastError () returned 0x0 [0108.353] SetLastError (dwErrCode=0x0) [0108.353] OpenThemeData () returned 0x710000 [0108.353] GetSystemMetrics (nIndex=32) returned 4 [0108.353] GetSystemMetrics (nIndex=33) returned 4 [0108.354] CloseThemeData () returned 0x0 [0108.354] lstrlenA (lpString="\x92\x07") returned 2 [0108.354] lstrlenA (lpString="\x92\x07") returned 2 [0108.354] lstrlenA (lpString="\x92\x07") returned 2 [0108.354] lstrlenA (lpString="\x92\x07") returned 2 [0108.354] lstrlenA (lpString="\x92\x07") returned 2 [0108.354] lstrlenA (lpString="\x92\x07") returned 2 [0108.354] capGetDriverDescriptionA () returned 0x0 [0108.355] GetLastError () returned 0x0 [0108.355] SetLastError (dwErrCode=0x0) [0108.355] OpenThemeData () returned 0x720000 [0108.355] GetSystemMetrics (nIndex=32) returned 4 [0108.355] GetSystemMetrics (nIndex=33) returned 4 [0108.355] CloseThemeData () returned 0x0 [0108.356] lstrlenA (lpString="\x92\x07") returned 2 [0108.356] lstrlenA (lpString="\x92\x07") returned 2 [0108.356] lstrlenA (lpString="\x92\x07") returned 2 [0108.356] lstrlenA (lpString="\x92\x07") returned 2 [0108.356] lstrlenA (lpString="\x92\x07") returned 2 [0108.356] lstrlenA (lpString="\x92\x07") returned 2 [0108.356] capGetDriverDescriptionA () returned 0x0 [0108.357] GetLastError () returned 0x0 [0108.358] SetLastError (dwErrCode=0x0) [0108.358] OpenThemeData () returned 0x730000 [0108.359] GetSystemMetrics (nIndex=32) returned 4 [0108.359] GetSystemMetrics (nIndex=33) returned 4 [0108.359] CloseThemeData () returned 0x0 [0108.359] lstrlenA (lpString="\x92\x07") returned 2 [0108.359] lstrlenA (lpString="\x92\x07") returned 2 [0108.359] lstrlenA (lpString="\x92\x07") returned 2 [0108.359] lstrlenA (lpString="\x92\x07") returned 2 [0108.359] lstrlenA (lpString="\x92\x07") returned 2 [0108.359] lstrlenA (lpString="\x92\x07") returned 2 [0108.359] capGetDriverDescriptionA () returned 0x0 [0108.360] GetLastError () returned 0x0 [0108.360] SetLastError (dwErrCode=0x0) [0108.360] OpenThemeData () returned 0x740000 [0108.361] GetSystemMetrics (nIndex=32) returned 4 [0108.361] GetSystemMetrics (nIndex=33) returned 4 [0108.361] CloseThemeData () returned 0x0 [0108.361] lstrlenA (lpString="\x92\x07") returned 2 [0108.361] lstrlenA (lpString="\x92\x07") returned 2 [0108.361] lstrlenA (lpString="\x92\x07") returned 2 [0108.361] lstrlenA (lpString="\x92\x07") returned 2 [0108.362] lstrlenA (lpString="\x92\x07") returned 2 [0108.362] lstrlenA (lpString="\x92\x07") returned 2 [0108.362] capGetDriverDescriptionA () returned 0x0 [0108.362] GetLastError () returned 0x0 [0108.362] SetLastError (dwErrCode=0x0) [0108.362] OpenThemeData () returned 0x750000 [0108.363] GetSystemMetrics (nIndex=32) returned 4 [0108.363] GetSystemMetrics (nIndex=33) returned 4 [0108.363] CloseThemeData () returned 0x0 [0108.855] lstrlenA (lpString="\x92\x07") returned 2 [0108.855] lstrlenA (lpString="\x92\x07") returned 2 [0108.855] lstrlenA (lpString="\x92\x07") returned 2 [0108.855] lstrlenA (lpString="\x92\x07") returned 2 [0108.855] lstrlenA (lpString="\x92\x07") returned 2 [0108.855] lstrlenA (lpString="\x92\x07") returned 2 [0108.855] capGetDriverDescriptionA () returned 0x0 [0108.856] GetLastError () returned 0x0 [0108.856] SetLastError (dwErrCode=0x0) [0108.856] OpenThemeData () returned 0x760000 [0108.857] GetSystemMetrics (nIndex=32) returned 4 [0108.857] GetSystemMetrics (nIndex=33) returned 4 [0108.857] CloseThemeData () returned 0x0 [0108.857] lstrlenA (lpString="\x92\x07") returned 2 [0108.857] lstrlenA (lpString="\x92\x07") returned 2 [0108.857] lstrlenA (lpString="\x92\x07") returned 2 [0108.857] lstrlenA (lpString="\x92\x07") returned 2 [0108.857] lstrlenA (lpString="\x92\x07") returned 2 [0108.857] lstrlenA (lpString="\x92\x07") returned 2 [0108.857] capGetDriverDescriptionA () returned 0x0 [0108.858] GetLastError () returned 0x0 [0108.858] SetLastError (dwErrCode=0x0) [0108.858] OpenThemeData () returned 0x770000 [0108.858] GetSystemMetrics (nIndex=32) returned 4 [0108.858] GetSystemMetrics (nIndex=33) returned 4 [0108.858] CloseThemeData () returned 0x0 [0108.859] lstrlenA (lpString="\x92\x07") returned 2 [0108.859] lstrlenA (lpString="\x92\x07") returned 2 [0108.859] lstrlenA (lpString="\x92\x07") returned 2 [0108.859] lstrlenA (lpString="\x92\x07") returned 2 [0108.859] lstrlenA (lpString="\x92\x07") returned 2 [0108.859] lstrlenA (lpString="\x92\x07") returned 2 [0108.859] capGetDriverDescriptionA () returned 0x0 [0108.859] GetLastError () returned 0x0 [0108.859] SetLastError (dwErrCode=0x0) [0108.859] OpenThemeData () returned 0x780000 [0108.860] GetSystemMetrics (nIndex=32) returned 4 [0108.860] GetSystemMetrics (nIndex=33) returned 4 [0108.860] CloseThemeData () returned 0x0 [0108.860] lstrlenA (lpString="\x92\x07") returned 2 [0108.860] lstrlenA (lpString="\x92\x07") returned 2 [0108.860] lstrlenA (lpString="\x92\x07") returned 2 [0108.860] lstrlenA (lpString="\x92\x07") returned 2 [0108.860] lstrlenA (lpString="\x92\x07") returned 2 [0108.860] lstrlenA (lpString="\x92\x07") returned 2 [0108.860] capGetDriverDescriptionA () returned 0x0 [0108.861] GetLastError () returned 0x0 [0108.861] SetLastError (dwErrCode=0x0) [0108.861] OpenThemeData () returned 0x790000 [0108.861] GetSystemMetrics (nIndex=32) returned 4 [0108.861] GetSystemMetrics (nIndex=33) returned 4 [0108.861] CloseThemeData () returned 0x0 [0108.862] lstrlenA (lpString="\x92\x07") returned 2 [0108.862] lstrlenA (lpString="\x92\x07") returned 2 [0108.862] lstrlenA (lpString="\x92\x07") returned 2 [0108.862] lstrlenA (lpString="\x92\x07") returned 2 [0108.862] lstrlenA (lpString="\x92\x07") returned 2 [0108.862] lstrlenA (lpString="\x92\x07") returned 2 [0108.862] capGetDriverDescriptionA () returned 0x0 [0108.863] GetLastError () returned 0x0 [0108.863] SetLastError (dwErrCode=0x0) [0108.863] OpenThemeData () returned 0x7a0000 [0108.864] GetSystemMetrics (nIndex=32) returned 4 [0108.864] GetSystemMetrics (nIndex=33) returned 4 [0108.864] CloseThemeData () returned 0x0 [0108.864] lstrlenA (lpString="\x92\x07") returned 2 [0108.864] lstrlenA (lpString="\x92\x07") returned 2 [0108.864] lstrlenA (lpString="\x92\x07") returned 2 [0108.864] lstrlenA (lpString="\x92\x07") returned 2 [0108.864] lstrlenA (lpString="\x92\x07") returned 2 [0108.864] lstrlenA (lpString="\x92\x07") returned 2 [0108.864] capGetDriverDescriptionA () returned 0x0 [0108.865] GetLastError () returned 0x0 [0108.865] SetLastError (dwErrCode=0x0) [0108.865] OpenThemeData () returned 0x7b0000 [0108.865] GetSystemMetrics (nIndex=32) returned 4 [0108.865] GetSystemMetrics (nIndex=33) returned 4 [0108.865] CloseThemeData () returned 0x0 [0108.866] lstrlenA (lpString="\x92\x07") returned 2 [0108.866] lstrlenA (lpString="\x92\x07") returned 2 [0108.866] lstrlenA (lpString="\x92\x07") returned 2 [0108.866] lstrlenA (lpString="\x92\x07") returned 2 [0108.866] lstrlenA (lpString="\x92\x07") returned 2 [0108.866] lstrlenA (lpString="\x92\x07") returned 2 [0108.866] capGetDriverDescriptionA () returned 0x0 [0108.866] GetLastError () returned 0x0 [0108.866] SetLastError (dwErrCode=0x0) [0108.866] OpenThemeData () returned 0x7c0000 [0108.867] GetSystemMetrics (nIndex=32) returned 4 [0108.867] GetSystemMetrics (nIndex=33) returned 4 [0108.867] CloseThemeData () returned 0x0 [0108.867] lstrlenA (lpString="\x92\x07") returned 2 [0108.867] lstrlenA (lpString="\x92\x07") returned 2 [0108.867] lstrlenA (lpString="\x92\x07") returned 2 [0108.867] lstrlenA (lpString="\x92\x07") returned 2 [0108.867] lstrlenA (lpString="\x92\x07") returned 2 [0108.867] lstrlenA (lpString="\x92\x07") returned 2 [0108.867] capGetDriverDescriptionA () returned 0x0 [0108.868] GetLastError () returned 0x0 [0108.868] SetLastError (dwErrCode=0x0) [0108.868] OpenThemeData () returned 0x7d0000 [0108.869] GetSystemMetrics (nIndex=32) returned 4 [0108.869] GetSystemMetrics (nIndex=33) returned 4 [0108.869] CloseThemeData () returned 0x0 [0108.869] lstrlenA (lpString="\x92\x07") returned 2 [0108.869] lstrlenA (lpString="\x92\x07") returned 2 [0108.869] lstrlenA (lpString="\x92\x07") returned 2 [0108.869] lstrlenA (lpString="\x92\x07") returned 2 [0108.869] lstrlenA (lpString="\x92\x07") returned 2 [0108.869] lstrlenA (lpString="\x92\x07") returned 2 [0108.869] capGetDriverDescriptionA () returned 0x0 [0108.870] GetLastError () returned 0x0 [0108.870] SetLastError (dwErrCode=0x0) [0108.870] OpenThemeData () returned 0x7e0000 [0108.870] GetSystemMetrics (nIndex=32) returned 4 [0108.870] GetSystemMetrics (nIndex=33) returned 4 [0108.870] CloseThemeData () returned 0x0 [0108.870] lstrlenA (lpString="\x92\x07") returned 2 [0108.870] lstrlenA (lpString="\x92\x07") returned 2 [0108.870] lstrlenA (lpString="\x92\x07") returned 2 [0108.870] lstrlenA (lpString="\x92\x07") returned 2 [0108.870] lstrlenA (lpString="\x92\x07") returned 2 [0108.870] lstrlenA (lpString="\x92\x07") returned 2 [0108.871] capGetDriverDescriptionA () returned 0x0 [0108.871] GetLastError () returned 0x0 [0108.871] SetLastError (dwErrCode=0x0) [0108.871] OpenThemeData () returned 0x7f0000 [0108.872] GetSystemMetrics (nIndex=32) returned 4 [0108.872] GetSystemMetrics (nIndex=33) returned 4 [0108.872] CloseThemeData () returned 0x0 [0108.872] lstrlenA (lpString="\x92\x07") returned 2 [0108.872] lstrlenA (lpString="\x92\x07") returned 2 [0108.872] lstrlenA (lpString="\x92\x07") returned 2 [0108.872] lstrlenA (lpString="\x92\x07") returned 2 [0108.872] lstrlenA (lpString="\x92\x07") returned 2 [0108.872] lstrlenA (lpString="\x92\x07") returned 2 [0108.872] capGetDriverDescriptionA () returned 0x0 [0108.873] GetLastError () returned 0x0 [0108.873] SetLastError (dwErrCode=0x0) [0108.873] OpenThemeData () returned 0x800000 [0108.873] GetSystemMetrics (nIndex=32) returned 4 [0108.873] GetSystemMetrics (nIndex=33) returned 4 [0108.873] CloseThemeData () returned 0x0 [0108.873] lstrlenA (lpString="\x92\x07") returned 2 [0108.873] lstrlenA (lpString="\x92\x07") returned 2 [0108.873] lstrlenA (lpString="\x92\x07") returned 2 [0108.873] lstrlenA (lpString="\x92\x07") returned 2 [0108.874] lstrlenA (lpString="\x92\x07") returned 2 [0108.874] lstrlenA (lpString="\x92\x07") returned 2 [0108.874] capGetDriverDescriptionA () returned 0x0 [0108.874] GetLastError () returned 0x0 [0108.874] SetLastError (dwErrCode=0x0) [0108.874] OpenThemeData () returned 0x810000 [0108.875] GetSystemMetrics (nIndex=32) returned 4 [0108.875] GetSystemMetrics (nIndex=33) returned 4 [0108.875] CloseThemeData () returned 0x0 [0108.875] lstrlenA (lpString="\x92\x07") returned 2 [0108.875] lstrlenA (lpString="\x92\x07") returned 2 [0108.875] lstrlenA (lpString="\x92\x07") returned 2 [0108.875] lstrlenA (lpString="\x92\x07") returned 2 [0108.875] lstrlenA (lpString="\x92\x07") returned 2 [0108.875] lstrlenA (lpString="\x92\x07") returned 2 [0108.875] capGetDriverDescriptionA () returned 0x0 [0108.876] GetLastError () returned 0x0 [0108.876] SetLastError (dwErrCode=0x0) [0108.876] OpenThemeData () returned 0x820000 [0108.876] GetSystemMetrics (nIndex=32) returned 4 [0108.876] GetSystemMetrics (nIndex=33) returned 4 [0108.876] CloseThemeData () returned 0x0 [0108.876] lstrlenA (lpString="\x92\x07") returned 2 [0108.877] lstrlenA (lpString="\x92\x07") returned 2 [0108.877] lstrlenA (lpString="\x92\x07") returned 2 [0108.877] lstrlenA (lpString="\x92\x07") returned 2 [0108.877] lstrlenA (lpString="\x92\x07") returned 2 [0108.877] lstrlenA (lpString="\x92\x07") returned 2 [0108.877] capGetDriverDescriptionA () returned 0x0 [0108.877] GetLastError () returned 0x0 [0108.877] SetLastError (dwErrCode=0x0) [0108.877] OpenThemeData () returned 0x830000 [0108.878] GetSystemMetrics (nIndex=32) returned 4 [0108.878] GetSystemMetrics (nIndex=33) returned 4 [0108.878] CloseThemeData () returned 0x0 [0108.878] lstrlenA (lpString="\x92\x07") returned 2 [0108.878] lstrlenA (lpString="\x92\x07") returned 2 [0108.878] lstrlenA (lpString="\x92\x07") returned 2 [0108.878] lstrlenA (lpString="\x92\x07") returned 2 [0108.878] lstrlenA (lpString="\x92\x07") returned 2 [0108.878] lstrlenA (lpString="\x92\x07") returned 2 [0108.878] capGetDriverDescriptionA () returned 0x0 [0108.879] GetLastError () returned 0x0 [0108.879] SetLastError (dwErrCode=0x0) [0108.879] OpenThemeData () returned 0x840000 [0108.879] GetSystemMetrics (nIndex=32) returned 4 [0108.879] GetSystemMetrics (nIndex=33) returned 4 [0108.879] CloseThemeData () returned 0x0 [0108.879] lstrlenA (lpString="\x92\x07") returned 2 [0108.879] lstrlenA (lpString="\x92\x07") returned 2 [0108.879] lstrlenA (lpString="\x92\x07") returned 2 [0108.879] lstrlenA (lpString="\x92\x07") returned 2 [0108.880] lstrlenA (lpString="\x92\x07") returned 2 [0108.880] lstrlenA (lpString="\x92\x07") returned 2 [0108.880] capGetDriverDescriptionA () returned 0x0 [0108.880] GetLastError () returned 0x0 [0108.880] SetLastError (dwErrCode=0x0) [0108.880] OpenThemeData () returned 0x850000 [0108.881] GetSystemMetrics (nIndex=32) returned 4 [0108.881] GetSystemMetrics (nIndex=33) returned 4 [0108.881] CloseThemeData () returned 0x0 [0108.881] lstrlenA (lpString="\x92\x07") returned 2 [0108.881] lstrlenA (lpString="\x92\x07") returned 2 [0108.881] lstrlenA (lpString="\x92\x07") returned 2 [0108.881] lstrlenA (lpString="\x92\x07") returned 2 [0108.881] lstrlenA (lpString="\x92\x07") returned 2 [0108.881] lstrlenA (lpString="\x92\x07") returned 2 [0108.881] capGetDriverDescriptionA () returned 0x0 [0108.882] GetLastError () returned 0x0 [0108.882] SetLastError (dwErrCode=0x0) [0108.882] OpenThemeData () returned 0x860000 [0108.882] GetSystemMetrics (nIndex=32) returned 4 [0108.882] GetSystemMetrics (nIndex=33) returned 4 [0108.882] CloseThemeData () returned 0x0 [0108.882] lstrlenA (lpString="\x92\x07") returned 2 [0108.883] lstrlenA (lpString="\x92\x07") returned 2 [0108.883] lstrlenA (lpString="\x92\x07") returned 2 [0108.883] lstrlenA (lpString="\x92\x07") returned 2 [0108.883] lstrlenA (lpString="\x92\x07") returned 2 [0108.883] lstrlenA (lpString="\x92\x07") returned 2 [0108.883] capGetDriverDescriptionA () returned 0x0 [0108.883] GetLastError () returned 0x0 [0108.883] SetLastError (dwErrCode=0x0) [0108.883] OpenThemeData () returned 0x870000 [0108.884] GetSystemMetrics (nIndex=32) returned 4 [0108.884] GetSystemMetrics (nIndex=33) returned 4 [0108.884] CloseThemeData () returned 0x0 [0108.884] lstrlenA (lpString="\x92\x07") returned 2 [0108.884] lstrlenA (lpString="\x92\x07") returned 2 [0108.884] lstrlenA (lpString="\x92\x07") returned 2 [0108.884] lstrlenA (lpString="\x92\x07") returned 2 [0108.884] lstrlenA (lpString="\x92\x07") returned 2 [0108.884] lstrlenA (lpString="\x92\x07") returned 2 [0108.884] capGetDriverDescriptionA () returned 0x0 [0108.885] GetLastError () returned 0x0 [0108.885] SetLastError (dwErrCode=0x0) [0108.885] OpenThemeData () returned 0x880000 [0108.885] GetSystemMetrics (nIndex=32) returned 4 [0108.885] GetSystemMetrics (nIndex=33) returned 4 [0108.885] CloseThemeData () returned 0x0 [0108.886] lstrlenA (lpString="\x92\x07") returned 2 [0108.886] lstrlenA (lpString="\x92\x07") returned 2 [0108.886] lstrlenA (lpString="\x92\x07") returned 2 [0108.886] lstrlenA (lpString="\x92\x07") returned 2 [0108.886] lstrlenA (lpString="\x92\x07") returned 2 [0108.886] lstrlenA (lpString="\x92\x07") returned 2 [0108.886] capGetDriverDescriptionA () returned 0x0 [0108.887] GetLastError () returned 0x0 [0108.887] SetLastError (dwErrCode=0x0) [0108.887] OpenThemeData () returned 0x890000 [0108.887] GetSystemMetrics (nIndex=32) returned 4 [0108.887] GetSystemMetrics (nIndex=33) returned 4 [0108.887] CloseThemeData () returned 0x0 [0108.888] lstrlenA (lpString="\x92\x07") returned 2 [0108.888] lstrlenA (lpString="\x92\x07") returned 2 [0108.888] lstrlenA (lpString="\x92\x07") returned 2 [0108.888] lstrlenA (lpString="\x92\x07") returned 2 [0108.888] lstrlenA (lpString="\x92\x07") returned 2 [0108.888] lstrlenA (lpString="\x92\x07") returned 2 [0108.888] capGetDriverDescriptionA () returned 0x0 [0108.889] GetLastError () returned 0x0 [0108.889] SetLastError (dwErrCode=0x0) [0108.889] OpenThemeData () returned 0x8a0000 [0108.889] GetSystemMetrics (nIndex=32) returned 4 [0108.889] GetSystemMetrics (nIndex=33) returned 4 [0108.889] CloseThemeData () returned 0x0 [0108.890] lstrlenA (lpString="\x92\x07") returned 2 [0108.890] lstrlenA (lpString="\x92\x07") returned 2 [0108.890] lstrlenA (lpString="\x92\x07") returned 2 [0108.890] lstrlenA (lpString="\x92\x07") returned 2 [0108.890] lstrlenA (lpString="\x92\x07") returned 2 [0108.890] lstrlenA (lpString="\x92\x07") returned 2 [0108.890] capGetDriverDescriptionA () returned 0x0 [0108.890] GetLastError () returned 0x0 [0108.890] SetLastError (dwErrCode=0x0) [0108.890] OpenThemeData () returned 0x8b0000 [0108.891] GetSystemMetrics (nIndex=32) returned 4 [0108.891] GetSystemMetrics (nIndex=33) returned 4 [0108.891] CloseThemeData () returned 0x0 [0109.308] lstrlenA (lpString="\x92\x07") returned 2 [0109.308] lstrlenA (lpString="\x92\x07") returned 2 [0109.308] lstrlenA (lpString="\x92\x07") returned 2 [0109.308] lstrlenA (lpString="\x92\x07") returned 2 [0109.308] lstrlenA (lpString="\x92\x07") returned 2 [0109.308] lstrlenA (lpString="\x92\x07") returned 2 [0109.308] capGetDriverDescriptionA () returned 0x0 [0109.309] GetLastError () returned 0x0 [0109.309] SetLastError (dwErrCode=0x0) [0109.309] OpenThemeData () returned 0x8c0000 [0109.309] GetSystemMetrics (nIndex=32) returned 4 [0109.309] GetSystemMetrics (nIndex=33) returned 4 [0109.309] CloseThemeData () returned 0x0 [0109.309] lstrlenA (lpString="\x92\x07") returned 2 [0109.310] lstrlenA (lpString="\x92\x07") returned 2 [0109.310] lstrlenA (lpString="\x92\x07") returned 2 [0109.310] lstrlenA (lpString="\x92\x07") returned 2 [0109.310] lstrlenA (lpString="\x92\x07") returned 2 [0109.310] lstrlenA (lpString="\x92\x07") returned 2 [0109.310] capGetDriverDescriptionA () returned 0x0 [0109.310] GetLastError () returned 0x0 [0109.310] SetLastError (dwErrCode=0x0) [0109.310] OpenThemeData () returned 0x8d0000 [0109.311] GetSystemMetrics (nIndex=32) returned 4 [0109.311] GetSystemMetrics (nIndex=33) returned 4 [0109.311] CloseThemeData () returned 0x0 [0109.311] lstrlenA (lpString="\x92\x07") returned 2 [0109.311] lstrlenA (lpString="\x92\x07") returned 2 [0109.311] lstrlenA (lpString="\x92\x07") returned 2 [0109.311] lstrlenA (lpString="\x92\x07") returned 2 [0109.311] lstrlenA (lpString="\x92\x07") returned 2 [0109.311] lstrlenA (lpString="\x92\x07") returned 2 [0109.311] capGetDriverDescriptionA () returned 0x0 [0109.312] GetLastError () returned 0x0 [0109.312] SetLastError (dwErrCode=0x0) [0109.312] OpenThemeData () returned 0x8e0000 [0109.312] GetSystemMetrics (nIndex=32) returned 4 [0109.312] GetSystemMetrics (nIndex=33) returned 4 [0109.312] CloseThemeData () returned 0x0 [0109.312] lstrlenA (lpString="\x92\x07") returned 2 [0109.312] lstrlenA (lpString="\x92\x07") returned 2 [0109.313] lstrlenA (lpString="\x92\x07") returned 2 [0109.313] lstrlenA (lpString="\x92\x07") returned 2 [0109.313] lstrlenA (lpString="\x92\x07") returned 2 [0109.313] lstrlenA (lpString="\x92\x07") returned 2 [0109.313] capGetDriverDescriptionA () returned 0x0 [0109.313] GetLastError () returned 0x0 [0109.313] SetLastError (dwErrCode=0x0) [0109.313] OpenThemeData () returned 0x8f0000 [0109.314] GetSystemMetrics (nIndex=32) returned 4 [0109.314] GetSystemMetrics (nIndex=33) returned 4 [0109.314] CloseThemeData () returned 0x0 [0109.314] lstrlenA (lpString="\x92\x07") returned 2 [0109.314] lstrlenA (lpString="\x92\x07") returned 2 [0109.314] lstrlenA (lpString="\x92\x07") returned 2 [0109.314] lstrlenA (lpString="\x92\x07") returned 2 [0109.314] lstrlenA (lpString="\x92\x07") returned 2 [0109.314] lstrlenA (lpString="\x92\x07") returned 2 [0109.314] capGetDriverDescriptionA () returned 0x0 [0109.315] GetLastError () returned 0x0 [0109.315] SetLastError (dwErrCode=0x0) [0109.315] OpenThemeData () returned 0x900000 [0109.315] GetSystemMetrics (nIndex=32) returned 4 [0109.315] GetSystemMetrics (nIndex=33) returned 4 [0109.315] CloseThemeData () returned 0x0 [0109.316] lstrlenA (lpString="\x92\x07") returned 2 [0109.316] lstrlenA (lpString="\x92\x07") returned 2 [0109.316] lstrlenA (lpString="\x92\x07") returned 2 [0109.316] lstrlenA (lpString="\x92\x07") returned 2 [0109.316] lstrlenA (lpString="\x92\x07") returned 2 [0109.316] lstrlenA (lpString="\x92\x07") returned 2 [0109.316] capGetDriverDescriptionA () returned 0x0 [0109.316] GetLastError () returned 0x0 [0109.316] SetLastError (dwErrCode=0x0) [0109.316] OpenThemeData () returned 0x910000 [0109.317] GetSystemMetrics (nIndex=32) returned 4 [0109.317] GetSystemMetrics (nIndex=33) returned 4 [0109.317] CloseThemeData () returned 0x0 [0109.317] lstrlenA (lpString="\x92\x07") returned 2 [0109.317] lstrlenA (lpString="\x92\x07") returned 2 [0109.317] lstrlenA (lpString="\x92\x07") returned 2 [0109.317] lstrlenA (lpString="\x92\x07") returned 2 [0109.317] lstrlenA (lpString="\x92\x07") returned 2 [0109.317] lstrlenA (lpString="\x92\x07") returned 2 [0109.317] capGetDriverDescriptionA () returned 0x0 [0109.318] GetLastError () returned 0x0 [0109.318] SetLastError (dwErrCode=0x0) [0109.318] OpenThemeData () returned 0x920000 [0109.318] GetSystemMetrics (nIndex=32) returned 4 [0109.318] GetSystemMetrics (nIndex=33) returned 4 [0109.318] CloseThemeData () returned 0x0 [0109.319] lstrlenA (lpString="\x92\x07") returned 2 [0109.319] lstrlenA (lpString="\x92\x07") returned 2 [0109.319] lstrlenA (lpString="\x92\x07") returned 2 [0109.319] lstrlenA (lpString="\x92\x07") returned 2 [0109.319] lstrlenA (lpString="\x92\x07") returned 2 [0109.319] lstrlenA (lpString="\x92\x07") returned 2 [0109.319] capGetDriverDescriptionA () returned 0x0 [0109.320] GetLastError () returned 0x0 [0109.320] SetLastError (dwErrCode=0x0) [0109.320] OpenThemeData () returned 0x930000 [0109.320] GetSystemMetrics (nIndex=32) returned 4 [0109.320] GetSystemMetrics (nIndex=33) returned 4 [0109.320] CloseThemeData () returned 0x0 [0109.321] lstrlenA (lpString="\x92\x07") returned 2 [0109.321] lstrlenA (lpString="\x92\x07") returned 2 [0109.321] lstrlenA (lpString="\x92\x07") returned 2 [0109.321] lstrlenA (lpString="\x92\x07") returned 2 [0109.321] lstrlenA (lpString="\x92\x07") returned 2 [0109.321] lstrlenA (lpString="\x92\x07") returned 2 [0109.321] capGetDriverDescriptionA () returned 0x0 [0109.322] GetLastError () returned 0x0 [0109.322] SetLastError (dwErrCode=0x0) [0109.322] OpenThemeData () returned 0x940000 [0109.322] GetSystemMetrics (nIndex=32) returned 4 [0109.322] GetSystemMetrics (nIndex=33) returned 4 [0109.322] CloseThemeData () returned 0x0 [0109.322] lstrlenA (lpString="\x92\x07") returned 2 [0109.322] lstrlenA (lpString="\x92\x07") returned 2 [0109.322] lstrlenA (lpString="\x92\x07") returned 2 [0109.322] lstrlenA (lpString="\x92\x07") returned 2 [0109.322] lstrlenA (lpString="\x92\x07") returned 2 [0109.323] lstrlenA (lpString="\x92\x07") returned 2 [0109.323] capGetDriverDescriptionA () returned 0x0 [0109.323] GetLastError () returned 0x0 [0109.323] SetLastError (dwErrCode=0x0) [0109.323] OpenThemeData () returned 0x950000 [0109.324] GetSystemMetrics (nIndex=32) returned 4 [0109.324] GetSystemMetrics (nIndex=33) returned 4 [0109.324] CloseThemeData () returned 0x0 [0109.324] lstrlenA (lpString="\x92\x07") returned 2 [0109.324] lstrlenA (lpString="\x92\x07") returned 2 [0109.324] lstrlenA (lpString="\x92\x07") returned 2 [0109.324] lstrlenA (lpString="\x92\x07") returned 2 [0109.324] lstrlenA (lpString="\x92\x07") returned 2 [0109.324] lstrlenA (lpString="\x92\x07") returned 2 [0109.324] capGetDriverDescriptionA () returned 0x0 [0109.325] GetLastError () returned 0x0 [0109.325] SetLastError (dwErrCode=0x0) [0109.325] OpenThemeData () returned 0x960000 [0109.325] GetSystemMetrics (nIndex=32) returned 4 [0109.325] GetSystemMetrics (nIndex=33) returned 4 [0109.325] CloseThemeData () returned 0x0 [0109.326] lstrlenA (lpString="\x92\x07") returned 2 [0109.326] lstrlenA (lpString="\x92\x07") returned 2 [0109.326] lstrlenA (lpString="\x92\x07") returned 2 [0109.326] lstrlenA (lpString="\x92\x07") returned 2 [0109.326] lstrlenA (lpString="\x92\x07") returned 2 [0109.326] lstrlenA (lpString="\x92\x07") returned 2 [0109.326] capGetDriverDescriptionA () returned 0x0 [0109.326] GetLastError () returned 0x0 [0109.326] SetLastError (dwErrCode=0x0) [0109.326] OpenThemeData () returned 0x970000 [0109.327] GetSystemMetrics (nIndex=32) returned 4 [0109.327] GetSystemMetrics (nIndex=33) returned 4 [0109.327] CloseThemeData () returned 0x0 [0109.327] lstrlenA (lpString="\x92\x07") returned 2 [0109.327] lstrlenA (lpString="\x92\x07") returned 2 [0109.327] lstrlenA (lpString="\x92\x07") returned 2 [0109.327] lstrlenA (lpString="\x92\x07") returned 2 [0109.327] lstrlenA (lpString="\x92\x07") returned 2 [0109.327] lstrlenA (lpString="\x92\x07") returned 2 [0109.327] capGetDriverDescriptionA () returned 0x0 [0109.328] GetLastError () returned 0x0 [0109.328] SetLastError (dwErrCode=0x0) [0109.328] OpenThemeData () returned 0x980000 [0109.328] GetSystemMetrics (nIndex=32) returned 4 [0109.328] GetSystemMetrics (nIndex=33) returned 4 [0109.328] CloseThemeData () returned 0x0 [0109.329] lstrlenA (lpString="\x92\x07") returned 2 [0109.329] lstrlenA (lpString="\x92\x07") returned 2 [0109.329] lstrlenA (lpString="\x92\x07") returned 2 [0109.329] lstrlenA (lpString="\x92\x07") returned 2 [0109.329] lstrlenA (lpString="\x92\x07") returned 2 [0109.329] lstrlenA (lpString="\x92\x07") returned 2 [0109.329] capGetDriverDescriptionA () returned 0x0 [0109.330] GetLastError () returned 0x0 [0109.330] SetLastError (dwErrCode=0x0) [0109.330] OpenThemeData () returned 0x990000 [0109.330] GetSystemMetrics (nIndex=32) returned 4 [0109.330] GetSystemMetrics (nIndex=33) returned 4 [0109.330] CloseThemeData () returned 0x0 [0109.330] lstrlenA (lpString="\x92\x07") returned 2 [0109.330] lstrlenA (lpString="\x92\x07") returned 2 [0109.330] lstrlenA (lpString="\x92\x07") returned 2 [0109.330] lstrlenA (lpString="\x92\x07") returned 2 [0109.330] lstrlenA (lpString="\x92\x07") returned 2 [0109.330] lstrlenA (lpString="\x92\x07") returned 2 [0109.331] capGetDriverDescriptionA () returned 0x0 [0109.332] GetLastError () returned 0x0 [0109.332] SetLastError (dwErrCode=0x0) [0109.332] OpenThemeData () returned 0x9a0000 [0109.332] GetSystemMetrics (nIndex=32) returned 4 [0109.332] GetSystemMetrics (nIndex=33) returned 4 [0109.332] CloseThemeData () returned 0x0 [0109.333] lstrlenA (lpString="\x92\x07") returned 2 [0109.333] lstrlenA (lpString="\x92\x07") returned 2 [0109.333] lstrlenA (lpString="\x92\x07") returned 2 [0109.333] lstrlenA (lpString="\x92\x07") returned 2 [0109.333] lstrlenA (lpString="\x92\x07") returned 2 [0109.333] lstrlenA (lpString="\x92\x07") returned 2 [0109.333] capGetDriverDescriptionA () returned 0x0 [0109.333] GetLastError () returned 0x0 [0109.334] SetLastError (dwErrCode=0x0) [0109.334] OpenThemeData () returned 0x9b0000 [0109.334] GetSystemMetrics (nIndex=32) returned 4 [0109.334] GetSystemMetrics (nIndex=33) returned 4 [0109.334] CloseThemeData () returned 0x0 [0109.337] lstrlenA (lpString="\x92\x07") returned 2 [0109.337] lstrlenA (lpString="\x92\x07") returned 2 [0109.337] lstrlenA (lpString="\x92\x07") returned 2 [0109.337] lstrlenA (lpString="\x92\x07") returned 2 [0109.337] lstrlenA (lpString="\x92\x07") returned 2 [0109.337] lstrlenA (lpString="\x92\x07") returned 2 [0109.337] capGetDriverDescriptionA () returned 0x0 [0109.338] GetLastError () returned 0x0 [0109.338] SetLastError (dwErrCode=0x0) [0109.338] OpenThemeData () returned 0x9c0000 [0109.338] GetSystemMetrics (nIndex=32) returned 4 [0109.338] GetSystemMetrics (nIndex=33) returned 4 [0109.338] CloseThemeData () returned 0x0 [0109.339] lstrlenA (lpString="\x92\x07") returned 2 [0109.339] lstrlenA (lpString="\x92\x07") returned 2 [0109.339] lstrlenA (lpString="\x92\x07") returned 2 [0109.339] capGetDriverDescriptionA () returned 0x0 [0109.339] GetLastError () returned 0x0 [0109.339] SetLastError (dwErrCode=0x0) [0109.339] OpenThemeData () returned 0x9d0000 [0109.340] GetSystemMetrics (nIndex=32) returned 4 [0109.340] GetSystemMetrics (nIndex=33) returned 4 [0109.340] CloseThemeData () returned 0x0 [0109.340] capGetDriverDescriptionA () returned 0x0 [0109.341] GetLastError () returned 0x0 [0109.341] SetLastError (dwErrCode=0x0) [0109.341] OpenThemeData () returned 0x9e0000 [0109.341] GetSystemMetrics (nIndex=32) returned 4 [0109.341] GetSystemMetrics (nIndex=33) returned 4 [0109.341] CloseThemeData () returned 0x0 [0109.342] capGetDriverDescriptionA () returned 0x0 [0109.342] GetLastError () returned 0x0 [0109.342] SetLastError (dwErrCode=0x0) [0109.342] OpenThemeData () returned 0x9f0000 [0109.343] GetSystemMetrics (nIndex=32) returned 4 [0109.343] GetSystemMetrics (nIndex=33) returned 4 [0109.343] CloseThemeData () returned 0x0 [0109.343] capGetDriverDescriptionA () returned 0x0 [0109.344] GetLastError () returned 0x0 [0109.344] SetLastError (dwErrCode=0x0) [0109.344] OpenThemeData () returned 0xa00000 [0109.344] GetSystemMetrics (nIndex=32) returned 4 [0109.344] GetSystemMetrics (nIndex=33) returned 4 [0109.344] CloseThemeData () returned 0x0 [0109.345] capGetDriverDescriptionA () returned 0x0 [0109.345] GetLastError () returned 0x0 [0109.345] SetLastError (dwErrCode=0x0) [0109.345] OpenThemeData () returned 0xa10000 [0109.346] GetSystemMetrics (nIndex=32) returned 4 [0109.346] GetSystemMetrics (nIndex=33) returned 4 [0109.346] CloseThemeData () returned 0x0 [0109.920] capGetDriverDescriptionA () returned 0x0 [0109.921] GetLastError () returned 0x0 [0109.921] SetLastError (dwErrCode=0x0) [0109.921] OpenThemeData () returned 0xa20000 [0109.921] GetSystemMetrics (nIndex=32) returned 4 [0109.921] GetSystemMetrics (nIndex=33) returned 4 [0109.921] CloseThemeData () returned 0x0 [0109.922] capGetDriverDescriptionA () returned 0x0 [0109.922] GetLastError () returned 0x0 [0109.922] SetLastError (dwErrCode=0x0) [0109.922] OpenThemeData () returned 0xa30000 [0109.923] GetSystemMetrics (nIndex=32) returned 4 [0109.923] GetSystemMetrics (nIndex=33) returned 4 [0109.923] CloseThemeData () returned 0x0 [0109.923] capGetDriverDescriptionA () returned 0x0 [0109.924] GetLastError () returned 0x0 [0109.924] SetLastError (dwErrCode=0x0) [0109.924] OpenThemeData () returned 0xa40000 [0109.924] GetSystemMetrics (nIndex=32) returned 4 [0109.924] GetSystemMetrics (nIndex=33) returned 4 [0109.924] CloseThemeData () returned 0x0 [0109.925] capGetDriverDescriptionA () returned 0x0 [0109.925] GetLastError () returned 0x0 [0109.925] SetLastError (dwErrCode=0x0) [0109.925] OpenThemeData () returned 0xa50000 [0109.926] GetSystemMetrics (nIndex=32) returned 4 [0109.926] GetSystemMetrics (nIndex=33) returned 4 [0109.926] CloseThemeData () returned 0x0 [0109.926] capGetDriverDescriptionA () returned 0x0 [0109.927] GetLastError () returned 0x0 [0109.927] SetLastError (dwErrCode=0x0) [0109.927] OpenThemeData () returned 0xa60000 [0109.927] GetSystemMetrics (nIndex=32) returned 4 [0109.927] GetSystemMetrics (nIndex=33) returned 4 [0109.927] CloseThemeData () returned 0x0 [0109.927] capGetDriverDescriptionA () returned 0x0 [0109.928] GetLastError () returned 0x0 [0109.928] SetLastError (dwErrCode=0x0) [0109.928] OpenThemeData () returned 0xa70000 [0109.929] GetSystemMetrics (nIndex=32) returned 4 [0109.929] GetSystemMetrics (nIndex=33) returned 4 [0109.929] CloseThemeData () returned 0x0 [0109.929] capGetDriverDescriptionA () returned 0x0 [0109.929] GetLastError () returned 0x0 [0109.929] SetLastError (dwErrCode=0x0) [0109.929] OpenThemeData () returned 0xa80000 [0109.930] GetSystemMetrics (nIndex=32) returned 4 [0109.930] GetSystemMetrics (nIndex=33) returned 4 [0109.930] CloseThemeData () returned 0x0 [0109.931] capGetDriverDescriptionA () returned 0x0 [0109.931] GetLastError () returned 0x0 [0109.931] SetLastError (dwErrCode=0x0) [0109.931] OpenThemeData () returned 0xa90000 [0109.932] GetSystemMetrics (nIndex=32) returned 4 [0109.932] GetSystemMetrics (nIndex=33) returned 4 [0109.932] CloseThemeData () returned 0x0 [0109.932] capGetDriverDescriptionA () returned 0x0 [0109.933] GetLastError () returned 0x0 [0109.933] SetLastError (dwErrCode=0x0) [0109.933] OpenThemeData () returned 0xaa0000 [0109.933] GetSystemMetrics (nIndex=32) returned 4 [0109.933] GetSystemMetrics (nIndex=33) returned 4 [0109.933] CloseThemeData () returned 0x0 [0109.933] capGetDriverDescriptionA () returned 0x0 [0109.934] GetLastError () returned 0x0 [0109.934] SetLastError (dwErrCode=0x0) [0109.934] OpenThemeData () returned 0xab0000 [0109.935] GetSystemMetrics (nIndex=32) returned 4 [0109.935] GetSystemMetrics (nIndex=33) returned 4 [0109.935] CloseThemeData () returned 0x0 [0109.935] capGetDriverDescriptionA () returned 0x0 [0109.935] GetLastError () returned 0x0 [0109.936] SetLastError (dwErrCode=0x0) [0109.936] OpenThemeData () returned 0xac0000 [0109.936] GetSystemMetrics (nIndex=32) returned 4 [0109.936] GetSystemMetrics (nIndex=33) returned 4 [0109.936] CloseThemeData () returned 0x0 [0109.936] capGetDriverDescriptionA () returned 0x0 [0109.937] GetLastError () returned 0x0 [0109.937] SetLastError (dwErrCode=0x0) [0109.937] OpenThemeData () returned 0xad0000 [0109.937] GetSystemMetrics (nIndex=32) returned 4 [0109.937] GetSystemMetrics (nIndex=33) returned 4 [0109.937] CloseThemeData () returned 0x0 [0109.938] capGetDriverDescriptionA () returned 0x0 [0109.938] GetLastError () returned 0x0 [0109.938] SetLastError (dwErrCode=0x0) [0109.938] OpenThemeData () returned 0xae0000 [0109.939] GetSystemMetrics (nIndex=32) returned 4 [0109.939] GetSystemMetrics (nIndex=33) returned 4 [0109.939] CloseThemeData () returned 0x0 [0109.939] capGetDriverDescriptionA () returned 0x0 [0109.940] GetLastError () returned 0x0 [0109.940] SetLastError (dwErrCode=0x0) [0109.940] OpenThemeData () returned 0xaf0000 [0109.940] GetSystemMetrics (nIndex=32) returned 4 [0109.940] GetSystemMetrics (nIndex=33) returned 4 [0109.940] CloseThemeData () returned 0x0 [0109.941] capGetDriverDescriptionA () returned 0x0 [0109.941] GetLastError () returned 0x0 [0109.941] SetLastError (dwErrCode=0x0) [0109.941] OpenThemeData () returned 0xb00000 [0109.942] GetSystemMetrics (nIndex=32) returned 4 [0109.942] GetSystemMetrics (nIndex=33) returned 4 [0109.942] CloseThemeData () returned 0x0 [0109.942] capGetDriverDescriptionA () returned 0x0 [0109.943] GetLastError () returned 0x0 [0109.943] SetLastError (dwErrCode=0x0) [0109.943] OpenThemeData () returned 0xb10000 [0109.943] GetSystemMetrics (nIndex=32) returned 4 [0109.943] GetSystemMetrics (nIndex=33) returned 4 [0109.943] CloseThemeData () returned 0x0 [0109.943] capGetDriverDescriptionA () returned 0x0 [0109.944] GetLastError () returned 0x0 [0109.944] SetLastError (dwErrCode=0x0) [0109.944] OpenThemeData () returned 0xb20000 [0109.945] GetSystemMetrics (nIndex=32) returned 4 [0109.945] GetSystemMetrics (nIndex=33) returned 4 [0109.945] CloseThemeData () returned 0x0 [0109.945] capGetDriverDescriptionA () returned 0x0 [0109.946] GetLastError () returned 0x0 [0109.946] SetLastError (dwErrCode=0x0) [0109.946] OpenThemeData () returned 0xb30000 [0109.946] GetSystemMetrics (nIndex=32) returned 4 [0109.946] GetSystemMetrics (nIndex=33) returned 4 [0109.946] CloseThemeData () returned 0x0 [0109.946] capGetDriverDescriptionA () returned 0x0 [0109.947] GetLastError () returned 0x0 [0109.947] SetLastError (dwErrCode=0x0) [0109.947] OpenThemeData () returned 0xb40000 [0109.947] GetSystemMetrics (nIndex=32) returned 4 [0109.947] GetSystemMetrics (nIndex=33) returned 4 [0109.947] CloseThemeData () returned 0x0 [0109.948] capGetDriverDescriptionA () returned 0x0 [0109.948] GetLastError () returned 0x0 [0109.948] SetLastError (dwErrCode=0x0) [0109.948] OpenThemeData () returned 0xb50000 [0109.949] GetSystemMetrics (nIndex=32) returned 4 [0109.949] GetSystemMetrics (nIndex=33) returned 4 [0109.949] CloseThemeData () returned 0x0 [0109.949] capGetDriverDescriptionA () returned 0x0 [0109.950] GetLastError () returned 0x0 [0109.950] SetLastError (dwErrCode=0x0) [0109.950] OpenThemeData () returned 0xb60000 [0109.950] GetSystemMetrics (nIndex=32) returned 4 [0109.950] GetSystemMetrics (nIndex=33) returned 4 [0109.950] CloseThemeData () returned 0x0 [0109.951] capGetDriverDescriptionA () returned 0x0 [0109.951] GetLastError () returned 0x0 [0109.951] SetLastError (dwErrCode=0x0) [0109.951] OpenThemeData () returned 0xb70000 [0109.952] GetSystemMetrics (nIndex=32) returned 4 [0109.952] GetSystemMetrics (nIndex=33) returned 4 [0109.952] CloseThemeData () returned 0x0 [0109.952] capGetDriverDescriptionA () returned 0x0 [0109.953] GetLastError () returned 0x0 [0109.953] SetLastError (dwErrCode=0x0) [0109.953] OpenThemeData () returned 0xb80000 [0109.953] GetSystemMetrics (nIndex=32) returned 4 [0109.953] GetSystemMetrics (nIndex=33) returned 4 [0109.953] CloseThemeData () returned 0x0 [0109.953] capGetDriverDescriptionA () returned 0x0 [0109.954] GetLastError () returned 0x0 [0109.954] SetLastError (dwErrCode=0x0) [0109.954] OpenThemeData () returned 0xb90000 [0109.955] GetSystemMetrics (nIndex=32) returned 4 [0109.955] GetSystemMetrics (nIndex=33) returned 4 [0109.955] CloseThemeData () returned 0x0 [0109.956] capGetDriverDescriptionA () returned 0x0 [0109.956] GetLastError () returned 0x0 [0109.956] SetLastError (dwErrCode=0x0) [0109.956] OpenThemeData () returned 0xba0000 [0109.957] GetSystemMetrics (nIndex=32) returned 4 [0109.957] GetSystemMetrics (nIndex=33) returned 4 [0109.957] CloseThemeData () returned 0x0 [0109.957] capGetDriverDescriptionA () returned 0x0 [0109.958] GetLastError () returned 0x0 [0109.958] SetLastError (dwErrCode=0x0) [0109.958] OpenThemeData () returned 0xbb0000 [0109.958] GetSystemMetrics (nIndex=32) returned 4 [0109.958] GetSystemMetrics (nIndex=33) returned 4 [0109.958] CloseThemeData () returned 0x0 [0109.959] capGetDriverDescriptionA () returned 0x0 [0109.959] GetLastError () returned 0x0 [0109.959] SetLastError (dwErrCode=0x0) [0109.959] OpenThemeData () returned 0xbc0000 [0109.960] GetSystemMetrics (nIndex=32) returned 4 [0109.960] GetSystemMetrics (nIndex=33) returned 4 [0109.960] CloseThemeData () returned 0x0 [0109.960] capGetDriverDescriptionA () returned 0x0 [0109.961] GetLastError () returned 0x0 [0109.961] SetLastError (dwErrCode=0x0) [0109.961] OpenThemeData () returned 0xbd0000 [0110.314] GetSystemMetrics (nIndex=32) returned 4 [0110.314] GetSystemMetrics (nIndex=33) returned 4 [0110.314] CloseThemeData () returned 0x0 [0110.315] capGetDriverDescriptionA () returned 0x0 [0110.315] GetLastError () returned 0x0 [0110.315] SetLastError (dwErrCode=0x0) [0110.316] OpenThemeData () returned 0xbe0000 [0110.316] GetSystemMetrics (nIndex=32) returned 4 [0110.316] GetSystemMetrics (nIndex=33) returned 4 [0110.316] CloseThemeData () returned 0x0 [0110.316] capGetDriverDescriptionA () returned 0x0 [0110.317] GetLastError () returned 0x0 [0110.317] SetLastError (dwErrCode=0x0) [0110.317] OpenThemeData () returned 0xbf0000 [0110.317] GetSystemMetrics (nIndex=32) returned 4 [0110.317] GetSystemMetrics (nIndex=33) returned 4 [0110.317] CloseThemeData () returned 0x0 [0110.318] capGetDriverDescriptionA () returned 0x0 [0110.318] GetLastError () returned 0x0 [0110.318] SetLastError (dwErrCode=0x0) [0110.318] OpenThemeData () returned 0xc00000 [0110.319] GetSystemMetrics (nIndex=32) returned 4 [0110.319] GetSystemMetrics (nIndex=33) returned 4 [0110.319] CloseThemeData () returned 0x0 [0110.319] capGetDriverDescriptionA () returned 0x0 [0110.320] GetLastError () returned 0x0 [0110.320] SetLastError (dwErrCode=0x0) [0110.320] OpenThemeData () returned 0xc10000 [0110.320] GetSystemMetrics (nIndex=32) returned 4 [0110.320] GetSystemMetrics (nIndex=33) returned 4 [0110.320] CloseThemeData () returned 0x0 [0110.321] capGetDriverDescriptionA () returned 0x0 [0110.321] GetLastError () returned 0x0 [0110.321] SetLastError (dwErrCode=0x0) [0110.321] OpenThemeData () returned 0xc20000 [0110.322] GetSystemMetrics (nIndex=32) returned 4 [0110.322] GetSystemMetrics (nIndex=33) returned 4 [0110.322] CloseThemeData () returned 0x0 [0110.322] capGetDriverDescriptionA () returned 0x0 [0110.323] GetLastError () returned 0x0 [0110.323] SetLastError (dwErrCode=0x0) [0110.323] OpenThemeData () returned 0xc30000 [0110.323] GetSystemMetrics (nIndex=32) returned 4 [0110.323] GetSystemMetrics (nIndex=33) returned 4 [0110.323] CloseThemeData () returned 0x0 [0110.324] capGetDriverDescriptionA () returned 0x0 [0110.324] GetLastError () returned 0x0 [0110.324] SetLastError (dwErrCode=0x0) [0110.324] OpenThemeData () returned 0xc40000 [0110.325] GetSystemMetrics (nIndex=32) returned 4 [0110.325] GetSystemMetrics (nIndex=33) returned 4 [0110.325] CloseThemeData () returned 0x0 [0110.325] capGetDriverDescriptionA () returned 0x0 [0110.326] GetLastError () returned 0x0 [0110.326] SetLastError (dwErrCode=0x0) [0110.326] OpenThemeData () returned 0xc50000 [0110.326] GetSystemMetrics (nIndex=32) returned 4 [0110.326] GetSystemMetrics (nIndex=33) returned 4 [0110.326] CloseThemeData () returned 0x0 [0110.327] capGetDriverDescriptionA () returned 0x0 [0110.327] GetLastError () returned 0x0 [0110.327] SetLastError (dwErrCode=0x0) [0110.327] OpenThemeData () returned 0xc60000 [0110.328] GetSystemMetrics (nIndex=32) returned 4 [0110.328] GetSystemMetrics (nIndex=33) returned 4 [0110.328] CloseThemeData () returned 0x0 [0110.328] capGetDriverDescriptionA () returned 0x0 [0110.328] GetLastError () returned 0x0 [0110.329] SetLastError (dwErrCode=0x0) [0110.329] OpenThemeData () returned 0xc70000 [0110.329] GetSystemMetrics (nIndex=32) returned 4 [0110.329] GetSystemMetrics (nIndex=33) returned 4 [0110.329] CloseThemeData () returned 0x0 [0110.329] capGetDriverDescriptionA () returned 0x0 [0110.330] GetLastError () returned 0x0 [0110.330] SetLastError (dwErrCode=0x0) [0110.330] OpenThemeData () returned 0xc80000 [0110.330] GetSystemMetrics (nIndex=32) returned 4 [0110.330] GetSystemMetrics (nIndex=33) returned 4 [0110.330] CloseThemeData () returned 0x0 [0110.331] capGetDriverDescriptionA () returned 0x0 [0110.331] GetLastError () returned 0x0 [0110.331] SetLastError (dwErrCode=0x0) [0110.331] OpenThemeData () returned 0xc90000 [0110.332] GetSystemMetrics (nIndex=32) returned 4 [0110.332] GetSystemMetrics (nIndex=33) returned 4 [0110.332] CloseThemeData () returned 0x0 [0110.332] capGetDriverDescriptionA () returned 0x0 [0110.333] GetLastError () returned 0x0 [0110.333] SetLastError (dwErrCode=0x0) [0110.333] OpenThemeData () returned 0xca0000 [0110.333] GetSystemMetrics (nIndex=32) returned 4 [0110.333] GetSystemMetrics (nIndex=33) returned 4 [0110.333] CloseThemeData () returned 0x0 [0110.334] capGetDriverDescriptionA () returned 0x0 [0110.334] GetLastError () returned 0x0 [0110.334] SetLastError (dwErrCode=0x0) [0110.334] OpenThemeData () returned 0xcb0000 [0110.335] GetSystemMetrics (nIndex=32) returned 4 [0110.335] GetSystemMetrics (nIndex=33) returned 4 [0110.335] CloseThemeData () returned 0x0 [0110.335] capGetDriverDescriptionA () returned 0x0 [0110.336] GetLastError () returned 0x0 [0110.337] SetLastError (dwErrCode=0x0) [0110.337] OpenThemeData () returned 0xcc0000 [0110.337] GetSystemMetrics (nIndex=32) returned 4 [0110.337] GetSystemMetrics (nIndex=33) returned 4 [0110.337] CloseThemeData () returned 0x0 [0110.337] capGetDriverDescriptionA () returned 0x0 [0110.338] GetLastError () returned 0x0 [0110.338] SetLastError (dwErrCode=0x0) [0110.338] OpenThemeData () returned 0xcd0000 [0110.338] GetSystemMetrics (nIndex=32) returned 4 [0110.338] GetSystemMetrics (nIndex=33) returned 4 [0110.338] CloseThemeData () returned 0x0 [0110.339] capGetDriverDescriptionA () returned 0x0 [0110.339] GetLastError () returned 0x0 [0110.339] SetLastError (dwErrCode=0x0) [0110.339] OpenThemeData () returned 0xce0000 [0110.340] GetSystemMetrics (nIndex=32) returned 4 [0110.340] GetSystemMetrics (nIndex=33) returned 4 [0110.340] CloseThemeData () returned 0x0 [0110.340] capGetDriverDescriptionA () returned 0x0 [0110.341] GetLastError () returned 0x0 [0110.341] SetLastError (dwErrCode=0x0) [0110.341] OpenThemeData () returned 0xcf0000 [0110.341] GetSystemMetrics (nIndex=32) returned 4 [0110.341] GetSystemMetrics (nIndex=33) returned 4 [0110.341] CloseThemeData () returned 0x0 [0110.342] capGetDriverDescriptionA () returned 0x0 [0110.342] GetLastError () returned 0x0 [0110.342] SetLastError (dwErrCode=0x0) [0110.342] OpenThemeData () returned 0xd00000 [0110.343] GetSystemMetrics (nIndex=32) returned 4 [0110.343] GetSystemMetrics (nIndex=33) returned 4 [0110.343] CloseThemeData () returned 0x0 [0110.343] capGetDriverDescriptionA () returned 0x0 [0110.344] GetLastError () returned 0x0 [0110.344] SetLastError (dwErrCode=0x0) [0110.344] OpenThemeData () returned 0xd10000 [0110.344] GetSystemMetrics (nIndex=32) returned 4 [0110.344] GetSystemMetrics (nIndex=33) returned 4 [0110.344] CloseThemeData () returned 0x0 [0110.345] capGetDriverDescriptionA () returned 0x0 [0110.345] GetLastError () returned 0x0 [0110.345] SetLastError (dwErrCode=0x0) [0110.345] OpenThemeData () returned 0xd20000 [0110.346] GetSystemMetrics (nIndex=32) returned 4 [0110.346] GetSystemMetrics (nIndex=33) returned 4 [0110.346] CloseThemeData () returned 0x0 [0110.346] capGetDriverDescriptionA () returned 0x0 [0110.346] GetLastError () returned 0x0 [0110.347] SetLastError (dwErrCode=0x0) [0110.347] OpenThemeData () returned 0xd30000 [0110.347] GetSystemMetrics (nIndex=32) returned 4 [0110.347] GetSystemMetrics (nIndex=33) returned 4 [0110.347] CloseThemeData () returned 0x0 [0110.347] capGetDriverDescriptionA () returned 0x0 [0110.348] GetLastError () returned 0x0 [0110.348] SetLastError (dwErrCode=0x0) [0110.348] OpenThemeData () returned 0xd40000 [0110.348] GetSystemMetrics (nIndex=32) returned 4 [0110.348] GetSystemMetrics (nIndex=33) returned 4 [0110.348] CloseThemeData () returned 0x0 [0110.349] capGetDriverDescriptionA () returned 0x0 [0110.349] GetLastError () returned 0x0 [0110.349] SetLastError (dwErrCode=0x0) [0110.349] OpenThemeData () returned 0xd50000 [0110.350] GetSystemMetrics (nIndex=32) returned 4 [0110.350] GetSystemMetrics (nIndex=33) returned 4 [0110.350] CloseThemeData () returned 0x0 [0110.350] capGetDriverDescriptionA () returned 0x0 [0110.351] GetLastError () returned 0x0 [0110.351] SetLastError (dwErrCode=0x0) [0110.351] OpenThemeData () returned 0xd60000 [0110.351] GetSystemMetrics (nIndex=32) returned 4 [0110.351] GetSystemMetrics (nIndex=33) returned 4 [0110.351] CloseThemeData () returned 0x0 [0110.351] capGetDriverDescriptionA () returned 0x0 [0110.850] GetLastError () returned 0x0 [0110.850] SetLastError (dwErrCode=0x0) [0110.850] OpenThemeData () returned 0xd70000 [0110.851] GetSystemMetrics (nIndex=32) returned 4 [0110.851] GetSystemMetrics (nIndex=33) returned 4 [0110.851] CloseThemeData () returned 0x0 [0110.851] capGetDriverDescriptionA () returned 0x0 [0110.852] GetLastError () returned 0x0 [0110.852] SetLastError (dwErrCode=0x0) [0110.852] OpenThemeData () returned 0xd80000 [0110.853] GetSystemMetrics (nIndex=32) returned 4 [0110.853] GetSystemMetrics (nIndex=33) returned 4 [0110.853] CloseThemeData () returned 0x0 [0110.853] capGetDriverDescriptionA () returned 0x0 [0110.854] GetLastError () returned 0x0 [0110.854] SetLastError (dwErrCode=0x0) [0110.854] OpenThemeData () returned 0xd90000 [0110.854] GetSystemMetrics (nIndex=32) returned 4 [0110.854] GetSystemMetrics (nIndex=33) returned 4 [0110.854] CloseThemeData () returned 0x0 [0110.855] capGetDriverDescriptionA () returned 0x0 [0110.856] GetLastError () returned 0x0 [0110.856] SetLastError (dwErrCode=0x0) [0110.856] OpenThemeData () returned 0xda0000 [0110.857] GetSystemMetrics (nIndex=32) returned 4 [0110.857] GetSystemMetrics (nIndex=33) returned 4 [0110.857] CloseThemeData () returned 0x0 [0110.857] capGetDriverDescriptionA () returned 0x0 [0110.858] GetLastError () returned 0x0 [0110.858] SetLastError (dwErrCode=0x0) [0110.858] OpenThemeData () returned 0xdb0000 [0110.858] GetSystemMetrics (nIndex=32) returned 4 [0110.858] GetSystemMetrics (nIndex=33) returned 4 [0110.858] CloseThemeData () returned 0x0 [0110.859] capGetDriverDescriptionA () returned 0x0 [0110.859] GetLastError () returned 0x0 [0110.859] SetLastError (dwErrCode=0x0) [0110.859] OpenThemeData () returned 0xdc0000 [0110.860] GetSystemMetrics (nIndex=32) returned 4 [0110.860] GetSystemMetrics (nIndex=33) returned 4 [0110.860] CloseThemeData () returned 0x0 [0110.860] capGetDriverDescriptionA () returned 0x0 [0110.861] GetLastError () returned 0x0 [0110.861] SetLastError (dwErrCode=0x0) [0110.861] OpenThemeData () returned 0xdd0000 [0110.861] GetSystemMetrics (nIndex=32) returned 4 [0110.861] GetSystemMetrics (nIndex=33) returned 4 [0110.861] CloseThemeData () returned 0x0 [0110.862] capGetDriverDescriptionA () returned 0x0 [0110.862] GetLastError () returned 0x0 [0110.862] SetLastError (dwErrCode=0x0) [0110.862] OpenThemeData () returned 0xde0000 [0110.863] GetSystemMetrics (nIndex=32) returned 4 [0110.863] GetSystemMetrics (nIndex=33) returned 4 [0110.863] CloseThemeData () returned 0x0 [0110.863] capGetDriverDescriptionA () returned 0x0 [0110.864] GetLastError () returned 0x0 [0110.864] SetLastError (dwErrCode=0x0) [0110.864] OpenThemeData () returned 0xdf0000 [0110.864] GetSystemMetrics (nIndex=32) returned 4 [0110.864] GetSystemMetrics (nIndex=33) returned 4 [0110.864] CloseThemeData () returned 0x0 [0110.865] capGetDriverDescriptionA () returned 0x0 [0110.865] GetLastError () returned 0x0 [0110.865] SetLastError (dwErrCode=0x0) [0110.865] OpenThemeData () returned 0xe00000 [0110.866] GetSystemMetrics (nIndex=32) returned 4 [0110.866] GetSystemMetrics (nIndex=33) returned 4 [0110.866] CloseThemeData () returned 0x0 [0110.866] capGetDriverDescriptionA () returned 0x0 [0110.867] GetLastError () returned 0x0 [0110.867] SetLastError (dwErrCode=0x0) [0110.867] OpenThemeData () returned 0xe10000 [0110.867] GetSystemMetrics (nIndex=32) returned 4 [0110.867] GetSystemMetrics (nIndex=33) returned 4 [0110.867] CloseThemeData () returned 0x0 [0110.868] capGetDriverDescriptionA () returned 0x0 [0110.868] GetLastError () returned 0x0 [0110.868] SetLastError (dwErrCode=0x0) [0110.868] OpenThemeData () returned 0xe20000 [0110.869] GetSystemMetrics (nIndex=32) returned 4 [0110.869] GetSystemMetrics (nIndex=33) returned 4 [0110.869] CloseThemeData () returned 0x0 [0110.869] capGetDriverDescriptionA () returned 0x0 [0110.870] GetLastError () returned 0x0 [0110.870] SetLastError (dwErrCode=0x0) [0110.870] OpenThemeData () returned 0xe30000 [0110.870] GetSystemMetrics (nIndex=32) returned 4 [0110.870] GetSystemMetrics (nIndex=33) returned 4 [0110.870] CloseThemeData () returned 0x0 [0110.871] capGetDriverDescriptionA () returned 0x0 [0110.871] GetLastError () returned 0x0 [0110.871] SetLastError (dwErrCode=0x0) [0110.871] OpenThemeData () returned 0xe40000 [0110.872] GetSystemMetrics (nIndex=32) returned 4 [0110.872] GetSystemMetrics (nIndex=33) returned 4 [0110.872] CloseThemeData () returned 0x0 [0110.872] capGetDriverDescriptionA () returned 0x0 [0110.873] GetLastError () returned 0x0 [0110.873] SetLastError (dwErrCode=0x0) [0110.873] OpenThemeData () returned 0xe50000 [0110.873] GetSystemMetrics (nIndex=32) returned 4 [0110.873] GetSystemMetrics (nIndex=33) returned 4 [0110.873] CloseThemeData () returned 0x0 [0110.874] capGetDriverDescriptionA () returned 0x0 [0110.874] GetLastError () returned 0x0 [0110.874] SetLastError (dwErrCode=0x0) [0110.874] OpenThemeData () returned 0xe60000 [0110.875] GetSystemMetrics (nIndex=32) returned 4 [0110.875] GetSystemMetrics (nIndex=33) returned 4 [0110.875] CloseThemeData () returned 0x0 [0110.875] capGetDriverDescriptionA () returned 0x0 [0110.876] GetLastError () returned 0x0 [0110.876] SetLastError (dwErrCode=0x0) [0110.876] OpenThemeData () returned 0xe70000 [0110.876] GetSystemMetrics (nIndex=32) returned 4 [0110.876] GetSystemMetrics (nIndex=33) returned 4 [0110.876] CloseThemeData () returned 0x0 [0110.877] capGetDriverDescriptionA () returned 0x0 [0110.877] GetLastError () returned 0x0 [0110.877] SetLastError (dwErrCode=0x0) [0110.877] OpenThemeData () returned 0xe80000 [0110.878] GetSystemMetrics (nIndex=32) returned 4 [0110.878] GetSystemMetrics (nIndex=33) returned 4 [0110.878] CloseThemeData () returned 0x0 [0110.878] capGetDriverDescriptionA () returned 0x0 [0110.879] GetLastError () returned 0x0 [0110.879] SetLastError (dwErrCode=0x0) [0110.879] OpenThemeData () returned 0xe90000 [0110.879] GetSystemMetrics (nIndex=32) returned 4 [0110.879] GetSystemMetrics (nIndex=33) returned 4 [0110.879] CloseThemeData () returned 0x0 [0110.880] capGetDriverDescriptionA () returned 0x0 [0110.880] GetLastError () returned 0x0 [0110.880] SetLastError (dwErrCode=0x0) [0110.880] OpenThemeData () returned 0xea0000 [0110.881] GetSystemMetrics (nIndex=32) returned 4 [0110.881] GetSystemMetrics (nIndex=33) returned 4 [0110.881] CloseThemeData () returned 0x0 [0110.881] capGetDriverDescriptionA () returned 0x0 [0110.882] GetLastError () returned 0x0 [0110.882] SetLastError (dwErrCode=0x0) [0110.882] OpenThemeData () returned 0xeb0000 [0110.882] GetSystemMetrics (nIndex=32) returned 4 [0110.882] GetSystemMetrics (nIndex=33) returned 4 [0110.882] CloseThemeData () returned 0x0 [0110.883] capGetDriverDescriptionA () returned 0x0 [0111.223] GetLastError () returned 0x0 [0111.223] SetLastError (dwErrCode=0x0) [0111.223] OpenThemeData () returned 0xec0000 [0111.223] GetSystemMetrics (nIndex=32) returned 4 [0111.223] GetSystemMetrics (nIndex=33) returned 4 [0111.223] CloseThemeData () returned 0x0 [0111.224] capGetDriverDescriptionA () returned 0x0 [0111.224] GetLastError () returned 0x0 [0111.224] SetLastError (dwErrCode=0x0) [0111.224] OpenThemeData () returned 0xed0000 [0111.225] GetSystemMetrics (nIndex=32) returned 4 [0111.225] GetSystemMetrics (nIndex=33) returned 4 [0111.225] CloseThemeData () returned 0x0 [0111.225] capGetDriverDescriptionA () returned 0x0 [0111.226] GetLastError () returned 0x0 [0111.226] SetLastError (dwErrCode=0x0) [0111.226] OpenThemeData () returned 0xee0000 [0111.226] GetSystemMetrics (nIndex=32) returned 4 [0111.226] GetSystemMetrics (nIndex=33) returned 4 [0111.226] CloseThemeData () returned 0x0 [0111.227] capGetDriverDescriptionA () returned 0x0 [0111.227] GetLastError () returned 0x0 [0111.227] SetLastError (dwErrCode=0x0) [0111.227] OpenThemeData () returned 0xef0000 [0111.228] GetSystemMetrics (nIndex=32) returned 4 [0111.228] GetSystemMetrics (nIndex=33) returned 4 [0111.228] CloseThemeData () returned 0x0 [0111.228] capGetDriverDescriptionA () returned 0x0 [0111.229] GetLastError () returned 0x0 [0111.229] SetLastError (dwErrCode=0x0) [0111.229] OpenThemeData () returned 0xf00000 [0111.229] GetSystemMetrics (nIndex=32) returned 4 [0111.229] GetSystemMetrics (nIndex=33) returned 4 [0111.229] CloseThemeData () returned 0x0 [0111.230] capGetDriverDescriptionA () returned 0x0 [0111.230] GetLastError () returned 0x0 [0111.230] SetLastError (dwErrCode=0x0) [0111.230] OpenThemeData () returned 0xf10000 [0111.231] GetSystemMetrics (nIndex=32) returned 4 [0111.231] GetSystemMetrics (nIndex=33) returned 4 [0111.231] CloseThemeData () returned 0x0 [0111.231] capGetDriverDescriptionA () returned 0x0 [0111.232] GetLastError () returned 0x0 [0111.232] SetLastError (dwErrCode=0x0) [0111.232] OpenThemeData () returned 0xf20000 [0111.232] GetSystemMetrics (nIndex=32) returned 4 [0111.232] GetSystemMetrics (nIndex=33) returned 4 [0111.232] CloseThemeData () returned 0x0 [0111.233] capGetDriverDescriptionA () returned 0x0 [0111.233] GetLastError () returned 0x0 [0111.233] SetLastError (dwErrCode=0x0) [0111.233] OpenThemeData () returned 0xf30000 [0111.234] GetSystemMetrics (nIndex=32) returned 4 [0111.234] GetSystemMetrics (nIndex=33) returned 4 [0111.234] CloseThemeData () returned 0x0 [0111.234] capGetDriverDescriptionA () returned 0x0 [0111.235] GetLastError () returned 0x0 [0111.235] SetLastError (dwErrCode=0x0) [0111.235] OpenThemeData () returned 0xf40000 [0111.235] GetSystemMetrics (nIndex=32) returned 4 [0111.235] GetSystemMetrics (nIndex=33) returned 4 [0111.235] CloseThemeData () returned 0x0 [0111.235] capGetDriverDescriptionA () returned 0x0 [0111.236] GetLastError () returned 0x0 [0111.236] SetLastError (dwErrCode=0x0) [0111.236] OpenThemeData () returned 0xf50000 [0111.236] GetSystemMetrics (nIndex=32) returned 4 [0111.236] GetSystemMetrics (nIndex=33) returned 4 [0111.237] CloseThemeData () returned 0x0 [0111.237] capGetDriverDescriptionA () returned 0x0 [0111.237] GetLastError () returned 0x0 [0111.237] SetLastError (dwErrCode=0x0) [0111.237] OpenThemeData () returned 0xf60000 [0111.238] GetSystemMetrics (nIndex=32) returned 4 [0111.238] GetSystemMetrics (nIndex=33) returned 4 [0111.238] CloseThemeData () returned 0x0 [0111.238] capGetDriverDescriptionA () returned 0x0 [0111.239] GetLastError () returned 0x0 [0111.239] SetLastError (dwErrCode=0x0) [0111.239] OpenThemeData () returned 0xf70000 [0111.239] GetSystemMetrics (nIndex=32) returned 4 [0111.239] GetSystemMetrics (nIndex=33) returned 4 [0111.239] CloseThemeData () returned 0x0 [0111.240] capGetDriverDescriptionA () returned 0x0 [0111.240] GetLastError () returned 0x0 [0111.240] SetLastError (dwErrCode=0x0) [0111.240] OpenThemeData () returned 0xf80000 [0111.241] GetSystemMetrics (nIndex=32) returned 4 [0111.241] GetSystemMetrics (nIndex=33) returned 4 [0111.241] CloseThemeData () returned 0x0 [0111.241] capGetDriverDescriptionA () returned 0x0 [0111.242] GetLastError () returned 0x0 [0111.242] SetLastError (dwErrCode=0x0) [0111.242] OpenThemeData () returned 0xf90000 [0111.242] GetSystemMetrics (nIndex=32) returned 4 [0111.242] GetSystemMetrics (nIndex=33) returned 4 [0111.242] CloseThemeData () returned 0x0 [0111.243] capGetDriverDescriptionA () returned 0x0 [0111.244] GetLastError () returned 0x0 [0111.244] SetLastError (dwErrCode=0x0) [0111.244] OpenThemeData () returned 0xfa0000 [0111.244] GetSystemMetrics (nIndex=32) returned 4 [0111.244] GetSystemMetrics (nIndex=33) returned 4 [0111.244] CloseThemeData () returned 0x0 [0111.245] capGetDriverDescriptionA () returned 0x0 [0111.245] GetLastError () returned 0x0 [0111.245] SetLastError (dwErrCode=0x0) [0111.245] OpenThemeData () returned 0xfb0000 [0111.246] GetSystemMetrics (nIndex=32) returned 4 [0111.246] GetSystemMetrics (nIndex=33) returned 4 [0111.246] CloseThemeData () returned 0x0 [0111.246] capGetDriverDescriptionA () returned 0x0 [0111.247] GetLastError () returned 0x0 [0111.247] SetLastError (dwErrCode=0x0) [0111.247] OpenThemeData () returned 0xfc0000 [0111.247] GetSystemMetrics (nIndex=32) returned 4 [0111.247] GetSystemMetrics (nIndex=33) returned 4 [0111.247] CloseThemeData () returned 0x0 [0111.248] capGetDriverDescriptionA () returned 0x0 [0111.248] GetLastError () returned 0x0 [0111.248] SetLastError (dwErrCode=0x0) [0111.248] OpenThemeData () returned 0xfd0000 [0111.249] GetSystemMetrics (nIndex=32) returned 4 [0111.249] GetSystemMetrics (nIndex=33) returned 4 [0111.249] CloseThemeData () returned 0x0 [0111.249] capGetDriverDescriptionA () returned 0x0 [0111.250] GetLastError () returned 0x0 [0111.250] SetLastError (dwErrCode=0x0) [0111.250] OpenThemeData () returned 0xfe0000 [0111.250] GetSystemMetrics (nIndex=32) returned 4 [0111.250] GetSystemMetrics (nIndex=33) returned 4 [0111.250] CloseThemeData () returned 0x0 [0111.250] capGetDriverDescriptionA () returned 0x0 [0111.251] GetLastError () returned 0x0 [0111.251] SetLastError (dwErrCode=0x0) [0111.251] OpenThemeData () returned 0xff0000 [0111.252] GetSystemMetrics (nIndex=32) returned 4 [0111.252] GetSystemMetrics (nIndex=33) returned 4 [0111.252] CloseThemeData () returned 0x0 [0111.252] capGetDriverDescriptionA () returned 0x0 [0111.253] GetLastError () returned 0x0 [0111.253] SetLastError (dwErrCode=0x0) [0111.253] OpenThemeData () returned 0x1000000 [0111.253] GetSystemMetrics (nIndex=32) returned 4 [0111.253] GetSystemMetrics (nIndex=33) returned 4 [0111.253] CloseThemeData () returned 0x0 [0111.253] capGetDriverDescriptionA () returned 0x0 [0111.254] GetLastError () returned 0x0 [0111.254] SetLastError (dwErrCode=0x0) [0111.254] OpenThemeData () returned 0x1010000 [0111.254] GetSystemMetrics (nIndex=32) returned 4 [0111.255] GetSystemMetrics (nIndex=33) returned 4 [0111.255] CloseThemeData () returned 0x0 [0111.255] capGetDriverDescriptionA () returned 0x0 [0111.255] GetLastError () returned 0x0 [0111.255] SetLastError (dwErrCode=0x0) [0111.256] OpenThemeData () returned 0x1020000 [0111.256] GetSystemMetrics (nIndex=32) returned 4 [0111.256] GetSystemMetrics (nIndex=33) returned 4 [0111.256] CloseThemeData () returned 0x0 [0111.256] capGetDriverDescriptionA () returned 0x0 [0111.257] GetLastError () returned 0x0 [0111.257] SetLastError (dwErrCode=0x0) [0111.257] OpenThemeData () returned 0x1030000 [0111.257] GetSystemMetrics (nIndex=32) returned 4 [0111.257] GetSystemMetrics (nIndex=33) returned 4 [0111.257] CloseThemeData () returned 0x0 [0111.258] capGetDriverDescriptionA () returned 0x0 [0111.924] GetLastError () returned 0x0 [0111.924] SetLastError (dwErrCode=0x0) [0111.924] OpenThemeData () returned 0x1040000 [0111.925] GetSystemMetrics (nIndex=32) returned 4 [0111.925] GetSystemMetrics (nIndex=33) returned 4 [0111.925] CloseThemeData () returned 0x0 [0111.925] capGetDriverDescriptionA () returned 0x0 [0111.926] GetLastError () returned 0x0 [0111.926] SetLastError (dwErrCode=0x0) [0111.926] OpenThemeData () returned 0x1050000 [0111.926] GetSystemMetrics (nIndex=32) returned 4 [0111.926] GetSystemMetrics (nIndex=33) returned 4 [0111.926] CloseThemeData () returned 0x0 [0111.926] capGetDriverDescriptionA () returned 0x0 [0111.927] GetLastError () returned 0x0 [0111.927] SetLastError (dwErrCode=0x0) [0111.927] OpenThemeData () returned 0x1060000 [0111.927] GetSystemMetrics (nIndex=32) returned 4 [0111.927] GetSystemMetrics (nIndex=33) returned 4 [0111.927] CloseThemeData () returned 0x0 [0111.928] capGetDriverDescriptionA () returned 0x0 [0111.928] GetLastError () returned 0x0 [0111.928] SetLastError (dwErrCode=0x0) [0111.928] OpenThemeData () returned 0x1070000 [0111.929] GetSystemMetrics (nIndex=32) returned 4 [0111.929] GetSystemMetrics (nIndex=33) returned 4 [0111.929] CloseThemeData () returned 0x0 [0111.929] capGetDriverDescriptionA () returned 0x0 [0111.930] GetLastError () returned 0x0 [0111.930] SetLastError (dwErrCode=0x0) [0111.930] OpenThemeData () returned 0x1080000 [0111.931] GetSystemMetrics (nIndex=32) returned 4 [0111.931] GetSystemMetrics (nIndex=33) returned 4 [0111.931] CloseThemeData () returned 0x0 [0111.931] capGetDriverDescriptionA () returned 0x0 [0111.932] GetLastError () returned 0x0 [0111.932] SetLastError (dwErrCode=0x0) [0111.932] OpenThemeData () returned 0x1090000 [0111.932] GetSystemMetrics (nIndex=32) returned 4 [0111.932] GetSystemMetrics (nIndex=33) returned 4 [0111.932] CloseThemeData () returned 0x0 [0111.933] capGetDriverDescriptionA () returned 0x0 [0111.933] GetLastError () returned 0x0 [0111.933] SetLastError (dwErrCode=0x0) [0111.933] OpenThemeData () returned 0x10a0000 [0111.934] GetSystemMetrics (nIndex=32) returned 4 [0111.934] GetSystemMetrics (nIndex=33) returned 4 [0111.934] CloseThemeData () returned 0x0 [0111.934] capGetDriverDescriptionA () returned 0x0 [0111.935] GetLastError () returned 0x0 [0111.935] SetLastError (dwErrCode=0x0) [0111.935] OpenThemeData () returned 0x10b0000 [0111.935] GetSystemMetrics (nIndex=32) returned 4 [0111.935] GetSystemMetrics (nIndex=33) returned 4 [0111.935] CloseThemeData () returned 0x0 [0111.936] capGetDriverDescriptionA () returned 0x0 [0111.936] GetLastError () returned 0x0 [0111.936] SetLastError (dwErrCode=0x0) [0111.936] OpenThemeData () returned 0x10c0000 [0111.937] GetSystemMetrics (nIndex=32) returned 4 [0111.937] GetSystemMetrics (nIndex=33) returned 4 [0111.937] CloseThemeData () returned 0x0 [0111.937] capGetDriverDescriptionA () returned 0x0 [0111.937] GetLastError () returned 0x0 [0111.938] SetLastError (dwErrCode=0x0) [0111.938] OpenThemeData () returned 0x10d0000 [0111.938] GetSystemMetrics (nIndex=32) returned 4 [0111.938] GetSystemMetrics (nIndex=33) returned 4 [0111.938] CloseThemeData () returned 0x0 [0111.938] capGetDriverDescriptionA () returned 0x0 [0111.939] GetLastError () returned 0x0 [0111.939] SetLastError (dwErrCode=0x0) [0111.939] OpenThemeData () returned 0x10e0000 [0111.939] GetSystemMetrics (nIndex=32) returned 4 [0111.940] GetSystemMetrics (nIndex=33) returned 4 [0111.940] CloseThemeData () returned 0x0 [0111.940] capGetDriverDescriptionA () returned 0x0 [0111.940] GetLastError () returned 0x0 [0111.940] SetLastError (dwErrCode=0x0) [0111.941] OpenThemeData () returned 0x10f0000 [0111.941] GetSystemMetrics (nIndex=32) returned 4 [0111.941] GetSystemMetrics (nIndex=33) returned 4 [0111.941] CloseThemeData () returned 0x0 [0111.941] capGetDriverDescriptionA () returned 0x0 [0111.942] GetLastError () returned 0x0 [0111.942] SetLastError (dwErrCode=0x0) [0111.942] OpenThemeData () returned 0x1100000 [0111.943] GetSystemMetrics (nIndex=32) returned 4 [0111.943] GetSystemMetrics (nIndex=33) returned 4 [0111.943] CloseThemeData () returned 0x0 [0111.943] capGetDriverDescriptionA () returned 0x0 [0111.944] GetLastError () returned 0x0 [0111.944] SetLastError (dwErrCode=0x0) [0111.944] OpenThemeData () returned 0x1110000 [0111.944] GetSystemMetrics (nIndex=32) returned 4 [0111.944] GetSystemMetrics (nIndex=33) returned 4 [0111.944] CloseThemeData () returned 0x0 [0111.945] capGetDriverDescriptionA () returned 0x0 [0111.945] GetLastError () returned 0x0 [0111.945] SetLastError (dwErrCode=0x0) [0111.945] OpenThemeData () returned 0x1120000 [0111.946] GetSystemMetrics (nIndex=32) returned 4 [0111.946] GetSystemMetrics (nIndex=33) returned 4 [0111.946] CloseThemeData () returned 0x0 [0111.946] capGetDriverDescriptionA () returned 0x0 [0111.947] GetLastError () returned 0x0 [0111.947] SetLastError (dwErrCode=0x0) [0111.947] OpenThemeData () returned 0x1130000 [0111.947] GetSystemMetrics (nIndex=32) returned 4 [0111.947] GetSystemMetrics (nIndex=33) returned 4 [0111.947] CloseThemeData () returned 0x0 [0111.948] capGetDriverDescriptionA () returned 0x0 [0111.948] GetLastError () returned 0x0 [0111.948] SetLastError (dwErrCode=0x0) [0111.948] OpenThemeData () returned 0x1140000 [0111.949] GetSystemMetrics (nIndex=32) returned 4 [0111.949] GetSystemMetrics (nIndex=33) returned 4 [0111.949] CloseThemeData () returned 0x0 [0111.949] capGetDriverDescriptionA () returned 0x0 [0111.950] GetLastError () returned 0x0 [0111.950] SetLastError (dwErrCode=0x0) [0111.950] OpenThemeData () returned 0x1150000 [0111.950] GetSystemMetrics (nIndex=32) returned 4 [0111.950] GetSystemMetrics (nIndex=33) returned 4 [0111.950] CloseThemeData () returned 0x0 [0111.950] capGetDriverDescriptionA () returned 0x0 [0111.951] GetLastError () returned 0x0 [0111.951] SetLastError (dwErrCode=0x0) [0111.951] OpenThemeData () returned 0x1160000 [0111.951] GetSystemMetrics (nIndex=32) returned 4 [0111.952] GetSystemMetrics (nIndex=33) returned 4 [0111.952] CloseThemeData () returned 0x0 [0111.952] capGetDriverDescriptionA () returned 0x0 [0111.952] GetLastError () returned 0x0 [0111.952] SetLastError (dwErrCode=0x0) [0111.953] OpenThemeData () returned 0x1170000 [0111.953] GetSystemMetrics (nIndex=32) returned 4 [0111.953] GetSystemMetrics (nIndex=33) returned 4 [0111.953] CloseThemeData () returned 0x0 [0111.953] capGetDriverDescriptionA () returned 0x0 [0111.954] GetLastError () returned 0x0 [0111.954] SetLastError (dwErrCode=0x0) [0111.954] OpenThemeData () returned 0x1180000 [0111.954] GetSystemMetrics (nIndex=32) returned 4 [0111.954] GetSystemMetrics (nIndex=33) returned 4 [0111.954] CloseThemeData () returned 0x0 [0111.955] capGetDriverDescriptionA () returned 0x0 [0111.955] GetLastError () returned 0x0 [0111.955] SetLastError (dwErrCode=0x0) [0111.955] OpenThemeData () returned 0x1190000 [0112.396] GetSystemMetrics (nIndex=32) returned 4 [0112.396] GetSystemMetrics (nIndex=33) returned 4 [0112.396] CloseThemeData () returned 0x0 [0112.397] capGetDriverDescriptionA () returned 0x0 [0112.398] GetLastError () returned 0x0 [0112.398] SetLastError (dwErrCode=0x0) [0112.398] OpenThemeData () returned 0x11a0000 [0112.399] GetSystemMetrics (nIndex=32) returned 4 [0112.399] GetSystemMetrics (nIndex=33) returned 4 [0112.399] CloseThemeData () returned 0x0 [0112.399] capGetDriverDescriptionA () returned 0x0 [0112.400] GetLastError () returned 0x0 [0112.400] SetLastError (dwErrCode=0x0) [0112.400] OpenThemeData () returned 0x11b0000 [0112.400] GetSystemMetrics (nIndex=32) returned 4 [0112.400] GetSystemMetrics (nIndex=33) returned 4 [0112.400] CloseThemeData () returned 0x0 [0112.401] capGetDriverDescriptionA () returned 0x0 [0112.401] GetLastError () returned 0x0 [0112.401] SetLastError (dwErrCode=0x0) [0112.401] OpenThemeData () returned 0x11c0000 [0112.402] GetSystemMetrics (nIndex=32) returned 4 [0112.402] GetSystemMetrics (nIndex=33) returned 4 [0112.402] CloseThemeData () returned 0x0 [0112.402] capGetDriverDescriptionA () returned 0x0 [0112.403] GetLastError () returned 0x0 [0112.403] SetLastError (dwErrCode=0x0) [0112.403] OpenThemeData () returned 0x11d0000 [0112.403] GetSystemMetrics (nIndex=32) returned 4 [0112.403] GetSystemMetrics (nIndex=33) returned 4 [0112.403] CloseThemeData () returned 0x0 [0112.404] capGetDriverDescriptionA () returned 0x0 [0112.404] GetLastError () returned 0x0 [0112.404] SetLastError (dwErrCode=0x0) [0112.404] OpenThemeData () returned 0x11e0000 [0112.405] GetSystemMetrics (nIndex=32) returned 4 [0112.405] GetSystemMetrics (nIndex=33) returned 4 [0112.405] CloseThemeData () returned 0x0 [0112.405] capGetDriverDescriptionA () returned 0x0 [0112.406] GetLastError () returned 0x0 [0112.406] SetLastError (dwErrCode=0x0) [0112.406] OpenThemeData () returned 0x11f0000 [0112.406] GetSystemMetrics (nIndex=32) returned 4 [0112.406] GetSystemMetrics (nIndex=33) returned 4 [0112.406] CloseThemeData () returned 0x0 [0112.407] capGetDriverDescriptionA () returned 0x0 [0112.407] GetLastError () returned 0x0 [0112.407] SetLastError (dwErrCode=0x0) [0112.407] OpenThemeData () returned 0x1200000 [0112.408] GetSystemMetrics (nIndex=32) returned 4 [0112.408] GetSystemMetrics (nIndex=33) returned 4 [0112.408] CloseThemeData () returned 0x0 [0112.408] capGetDriverDescriptionA () returned 0x0 [0112.409] GetLastError () returned 0x0 [0112.409] SetLastError (dwErrCode=0x0) [0112.409] OpenThemeData () returned 0x1210000 [0112.410] GetSystemMetrics (nIndex=32) returned 4 [0112.410] GetSystemMetrics (nIndex=33) returned 4 [0112.410] CloseThemeData () returned 0x0 [0112.410] capGetDriverDescriptionA () returned 0x0 [0112.410] GetLastError () returned 0x0 [0112.411] SetLastError (dwErrCode=0x0) [0112.411] OpenThemeData () returned 0x1220000 [0112.411] GetSystemMetrics (nIndex=32) returned 4 [0112.411] GetSystemMetrics (nIndex=33) returned 4 [0112.411] CloseThemeData () returned 0x0 [0112.412] capGetDriverDescriptionA () returned 0x0 [0112.412] GetLastError () returned 0x0 [0112.412] SetLastError (dwErrCode=0x0) [0112.412] OpenThemeData () returned 0x1230000 [0112.413] GetSystemMetrics (nIndex=32) returned 4 [0112.413] GetSystemMetrics (nIndex=33) returned 4 [0112.413] CloseThemeData () returned 0x0 [0112.413] capGetDriverDescriptionA () returned 0x0 [0112.414] GetLastError () returned 0x0 [0112.414] SetLastError (dwErrCode=0x0) [0112.414] OpenThemeData () returned 0x1240000 [0112.414] GetSystemMetrics (nIndex=32) returned 4 [0112.414] GetSystemMetrics (nIndex=33) returned 4 [0112.414] CloseThemeData () returned 0x0 [0112.414] capGetDriverDescriptionA () returned 0x0 [0112.415] GetLastError () returned 0x0 [0112.415] SetLastError (dwErrCode=0x0) [0112.415] OpenThemeData () returned 0x1250000 [0112.416] GetSystemMetrics (nIndex=32) returned 4 [0112.416] GetSystemMetrics (nIndex=33) returned 4 [0112.416] CloseThemeData () returned 0x0 [0112.416] capGetDriverDescriptionA () returned 0x0 [0112.417] GetLastError () returned 0x0 [0112.417] SetLastError (dwErrCode=0x0) [0112.417] OpenThemeData () returned 0x1260000 [0112.417] GetSystemMetrics (nIndex=32) returned 4 [0112.417] GetSystemMetrics (nIndex=33) returned 4 [0112.417] CloseThemeData () returned 0x0 [0112.417] capGetDriverDescriptionA () returned 0x0 [0112.418] GetLastError () returned 0x0 [0112.418] SetLastError (dwErrCode=0x0) [0112.418] OpenThemeData () returned 0x1270000 [0112.418] GetSystemMetrics (nIndex=32) returned 4 [0112.418] GetSystemMetrics (nIndex=33) returned 4 [0112.419] CloseThemeData () returned 0x0 [0112.419] capGetDriverDescriptionA () returned 0x0 [0112.419] GetLastError () returned 0x0 [0112.419] SetLastError (dwErrCode=0x0) [0112.419] OpenThemeData () returned 0x1280000 [0112.420] GetSystemMetrics (nIndex=32) returned 4 [0112.420] GetSystemMetrics (nIndex=33) returned 4 [0112.420] CloseThemeData () returned 0x0 [0112.420] capGetDriverDescriptionA () returned 0x0 [0112.421] GetLastError () returned 0x0 [0112.421] SetLastError (dwErrCode=0x0) [0112.421] OpenThemeData () returned 0x1290000 [0112.422] GetSystemMetrics (nIndex=32) returned 4 [0112.422] GetSystemMetrics (nIndex=33) returned 4 [0112.422] CloseThemeData () returned 0x0 [0112.422] capGetDriverDescriptionA () returned 0x0 [0112.423] GetLastError () returned 0x0 [0112.423] SetLastError (dwErrCode=0x0) [0112.423] OpenThemeData () returned 0x12a0000 [0112.423] GetSystemMetrics (nIndex=32) returned 4 [0112.423] GetSystemMetrics (nIndex=33) returned 4 [0112.423] CloseThemeData () returned 0x0 [0112.423] capGetDriverDescriptionA () returned 0x0 [0112.424] GetLastError () returned 0x0 [0112.424] SetLastError (dwErrCode=0x0) [0112.424] OpenThemeData () returned 0x12b0000 [0112.425] GetSystemMetrics (nIndex=32) returned 4 [0112.425] GetSystemMetrics (nIndex=33) returned 4 [0112.425] CloseThemeData () returned 0x0 [0112.425] capGetDriverDescriptionA () returned 0x0 [0112.426] GetLastError () returned 0x0 [0112.426] SetLastError (dwErrCode=0x0) [0112.426] OpenThemeData () returned 0x12c0000 [0112.426] GetSystemMetrics (nIndex=32) returned 4 [0112.426] GetSystemMetrics (nIndex=33) returned 4 [0112.426] CloseThemeData () returned 0x0 [0112.427] capGetDriverDescriptionA () returned 0x0 [0112.427] GetLastError () returned 0x0 [0112.427] SetLastError (dwErrCode=0x0) [0112.427] OpenThemeData () returned 0x12d0000 [0112.428] GetSystemMetrics (nIndex=32) returned 4 [0112.428] GetSystemMetrics (nIndex=33) returned 4 [0112.428] CloseThemeData () returned 0x0 [0112.428] capGetDriverDescriptionA () returned 0x0 [0112.429] GetLastError () returned 0x0 [0112.429] SetLastError (dwErrCode=0x0) [0112.429] OpenThemeData () returned 0x12e0000 [0112.928] GetSystemMetrics (nIndex=32) returned 4 [0112.928] GetSystemMetrics (nIndex=33) returned 4 [0112.928] CloseThemeData () returned 0x0 [0112.929] capGetDriverDescriptionA () returned 0x0 [0112.929] GetLastError () returned 0x0 [0112.929] SetLastError (dwErrCode=0x0) [0112.930] OpenThemeData () returned 0x12f0000 [0112.930] GetSystemMetrics (nIndex=32) returned 4 [0112.930] GetSystemMetrics (nIndex=33) returned 4 [0112.930] CloseThemeData () returned 0x0 [0112.930] capGetDriverDescriptionA () returned 0x0 [0112.931] GetLastError () returned 0x0 [0112.931] SetLastError (dwErrCode=0x0) [0112.931] OpenThemeData () returned 0x1300000 [0112.931] GetSystemMetrics (nIndex=32) returned 4 [0112.931] GetSystemMetrics (nIndex=33) returned 4 [0112.932] CloseThemeData () returned 0x0 [0112.932] capGetDriverDescriptionA () returned 0x0 [0112.933] GetLastError () returned 0x0 [0112.933] SetLastError (dwErrCode=0x0) [0112.933] OpenThemeData () returned 0x1310000 [0112.933] GetSystemMetrics (nIndex=32) returned 4 [0112.933] GetSystemMetrics (nIndex=33) returned 4 [0112.933] CloseThemeData () returned 0x0 [0112.933] capGetDriverDescriptionA () returned 0x0 [0112.934] GetLastError () returned 0x0 [0112.934] SetLastError (dwErrCode=0x0) [0112.934] OpenThemeData () returned 0x1320000 [0112.934] GetSystemMetrics (nIndex=32) returned 4 [0112.934] GetSystemMetrics (nIndex=33) returned 4 [0112.934] CloseThemeData () returned 0x0 [0112.935] capGetDriverDescriptionA () returned 0x0 [0112.935] GetLastError () returned 0x0 [0112.935] SetLastError (dwErrCode=0x0) [0112.935] OpenThemeData () returned 0x1330000 [0112.936] GetSystemMetrics (nIndex=32) returned 4 [0112.936] GetSystemMetrics (nIndex=33) returned 4 [0112.936] CloseThemeData () returned 0x0 [0112.936] capGetDriverDescriptionA () returned 0x0 [0112.937] GetLastError () returned 0x0 [0112.937] SetLastError (dwErrCode=0x0) [0112.937] OpenThemeData () returned 0x1340000 [0112.937] GetSystemMetrics (nIndex=32) returned 4 [0112.937] GetSystemMetrics (nIndex=33) returned 4 [0112.937] CloseThemeData () returned 0x0 [0112.938] capGetDriverDescriptionA () returned 0x0 [0112.938] GetLastError () returned 0x0 [0112.938] SetLastError (dwErrCode=0x0) [0112.938] OpenThemeData () returned 0x1350000 [0112.939] GetSystemMetrics (nIndex=32) returned 4 [0112.939] GetSystemMetrics (nIndex=33) returned 4 [0112.939] CloseThemeData () returned 0x0 [0112.939] capGetDriverDescriptionA () returned 0x0 [0112.940] GetLastError () returned 0x0 [0112.940] SetLastError (dwErrCode=0x0) [0112.940] OpenThemeData () returned 0x1360000 [0112.941] GetSystemMetrics (nIndex=32) returned 4 [0112.941] GetSystemMetrics (nIndex=33) returned 4 [0112.941] CloseThemeData () returned 0x0 [0112.941] capGetDriverDescriptionA () returned 0x0 [0112.942] GetLastError () returned 0x0 [0112.942] SetLastError (dwErrCode=0x0) [0112.942] OpenThemeData () returned 0x1370000 [0112.943] GetSystemMetrics (nIndex=32) returned 4 [0112.943] GetSystemMetrics (nIndex=33) returned 4 [0112.943] CloseThemeData () returned 0x0 [0112.944] capGetDriverDescriptionA () returned 0x0 [0112.944] GetLastError () returned 0x0 [0112.944] SetLastError (dwErrCode=0x0) [0112.944] OpenThemeData () returned 0x1380000 [0112.945] GetSystemMetrics (nIndex=32) returned 4 [0112.945] GetSystemMetrics (nIndex=33) returned 4 [0112.945] CloseThemeData () returned 0x0 [0112.945] capGetDriverDescriptionA () returned 0x0 [0112.946] GetLastError () returned 0x0 [0112.946] SetLastError (dwErrCode=0x0) [0112.946] OpenThemeData () returned 0x1390000 [0112.946] GetSystemMetrics (nIndex=32) returned 4 [0112.946] GetSystemMetrics (nIndex=33) returned 4 [0112.946] CloseThemeData () returned 0x0 [0112.947] capGetDriverDescriptionA () returned 0x0 [0112.947] GetLastError () returned 0x0 [0112.947] SetLastError (dwErrCode=0x0) [0112.947] OpenThemeData () returned 0x13a0000 [0112.948] GetSystemMetrics (nIndex=32) returned 4 [0112.948] GetSystemMetrics (nIndex=33) returned 4 [0112.948] CloseThemeData () returned 0x0 [0112.948] capGetDriverDescriptionA () returned 0x0 [0112.949] GetLastError () returned 0x0 [0112.949] SetLastError (dwErrCode=0x0) [0112.949] OpenThemeData () returned 0x13b0000 [0112.949] GetSystemMetrics (nIndex=32) returned 4 [0112.949] GetSystemMetrics (nIndex=33) returned 4 [0112.949] CloseThemeData () returned 0x0 [0112.949] capGetDriverDescriptionA () returned 0x0 [0112.950] GetLastError () returned 0x0 [0112.950] SetLastError (dwErrCode=0x0) [0112.950] OpenThemeData () returned 0x13c0000 [0112.950] GetSystemMetrics (nIndex=32) returned 4 [0112.950] GetSystemMetrics (nIndex=33) returned 4 [0112.951] CloseThemeData () returned 0x0 [0112.951] capGetDriverDescriptionA () returned 0x0 [0112.952] GetLastError () returned 0x0 [0112.952] SetLastError (dwErrCode=0x0) [0112.952] OpenThemeData () returned 0x13d0000 [0112.952] GetSystemMetrics (nIndex=32) returned 4 [0112.952] GetSystemMetrics (nIndex=33) returned 4 [0112.952] CloseThemeData () returned 0x0 [0112.952] capGetDriverDescriptionA () returned 0x0 [0112.953] GetLastError () returned 0x0 [0112.953] SetLastError (dwErrCode=0x0) [0112.953] OpenThemeData () returned 0x13e0000 [0112.954] GetSystemMetrics (nIndex=32) returned 4 [0112.954] GetSystemMetrics (nIndex=33) returned 4 [0112.954] CloseThemeData () returned 0x0 [0112.954] capGetDriverDescriptionA () returned 0x0 [0112.954] GetLastError () returned 0x0 [0112.954] SetLastError (dwErrCode=0x0) [0112.954] OpenThemeData () returned 0x13f0000 [0112.955] GetSystemMetrics (nIndex=32) returned 4 [0112.955] GetSystemMetrics (nIndex=33) returned 4 [0112.955] CloseThemeData () returned 0x0 [0112.955] lstrlenA (lpString="\x92\x07") returned 2 [0112.955] lstrlenA (lpString="\x92\x07") returned 2 [0112.955] lstrlenA (lpString="\x92\x07") returned 2 [0112.956] lstrlenA (lpString="\x92\x07") returned 2 [0112.956] lstrlenA (lpString="\x92\x07") returned 2 [0112.956] lstrlenA (lpString="\x92\x07") returned 2 [0112.956] capGetDriverDescriptionA () returned 0x0 [0112.956] GetLastError () returned 0x0 [0112.956] SetLastError (dwErrCode=0x0) [0112.956] OpenThemeData () returned 0x1400000 [0112.957] GetSystemMetrics (nIndex=32) returned 4 [0112.957] GetSystemMetrics (nIndex=33) returned 4 [0112.957] CloseThemeData () returned 0x0 [0112.957] lstrlenA (lpString="\x92\x07") returned 2 [0112.957] lstrlenA (lpString="\x92\x07") returned 2 [0112.957] lstrlenA (lpString="\x92\x07") returned 2 [0112.957] lstrlenA (lpString="\x92\x07") returned 2 [0112.957] lstrlenA (lpString="\x92\x07") returned 2 [0112.957] lstrlenA (lpString="\x92\x07") returned 2 [0112.957] capGetDriverDescriptionA () returned 0x0 [0112.958] GetLastError () returned 0x0 [0112.958] SetLastError (dwErrCode=0x0) [0112.958] OpenThemeData () returned 0x1410000 [0112.958] GetSystemMetrics (nIndex=32) returned 4 [0112.958] GetSystemMetrics (nIndex=33) returned 4 [0112.958] CloseThemeData () returned 0x0 [0112.959] lstrlenA (lpString="\x92\x07") returned 2 [0112.959] lstrlenA (lpString="\x92\x07") returned 2 [0112.959] lstrlenA (lpString="\x92\x07") returned 2 [0112.959] lstrlenA (lpString="\x92\x07") returned 2 [0112.959] lstrlenA (lpString="\x92\x07") returned 2 [0112.959] lstrlenA (lpString="\x92\x07") returned 2 [0112.959] capGetDriverDescriptionA () returned 0x0 [0112.959] GetLastError () returned 0x0 [0112.959] SetLastError (dwErrCode=0x0) [0112.959] OpenThemeData () returned 0x1420000 [0112.960] GetSystemMetrics (nIndex=32) returned 4 [0112.960] GetSystemMetrics (nIndex=33) returned 4 [0112.960] CloseThemeData () returned 0x0 [0113.208] lstrlenA (lpString="\x92\x07") returned 2 [0113.208] lstrlenA (lpString="\x92\x07") returned 2 [0113.208] lstrlenA (lpString="\x92\x07") returned 2 [0113.208] lstrlenA (lpString="\x92\x07") returned 2 [0113.208] lstrlenA (lpString="\x92\x07") returned 2 [0113.208] lstrlenA (lpString="\x92\x07") returned 2 [0113.208] capGetDriverDescriptionA () returned 0x0 [0113.209] GetLastError () returned 0x0 [0113.209] SetLastError (dwErrCode=0x0) [0113.209] OpenThemeData () returned 0x1430000 [0113.210] GetSystemMetrics (nIndex=32) returned 4 [0113.210] GetSystemMetrics (nIndex=33) returned 4 [0113.210] CloseThemeData () returned 0x0 [0113.210] lstrlenA (lpString="\x92\x07") returned 2 [0113.210] lstrlenA (lpString="\x92\x07") returned 2 [0113.210] lstrlenA (lpString="\x92\x07") returned 2 [0113.210] lstrlenA (lpString="\x92\x07") returned 2 [0113.210] lstrlenA (lpString="\x92\x07") returned 2 [0113.210] lstrlenA (lpString="\x92\x07") returned 2 [0113.210] capGetDriverDescriptionA () returned 0x0 [0113.211] GetLastError () returned 0x0 [0113.211] SetLastError (dwErrCode=0x0) [0113.211] OpenThemeData () returned 0x1440000 [0113.211] GetSystemMetrics (nIndex=32) returned 4 [0113.211] GetSystemMetrics (nIndex=33) returned 4 [0113.211] CloseThemeData () returned 0x0 [0113.212] lstrlenA (lpString="\x92\x07") returned 2 [0113.212] lstrlenA (lpString="\x92\x07") returned 2 [0113.212] lstrlenA (lpString="\x92\x07") returned 2 [0113.212] lstrlenA (lpString="\x92\x07") returned 2 [0113.212] lstrlenA (lpString="\x92\x07") returned 2 [0113.212] lstrlenA (lpString="\x92\x07") returned 2 [0113.212] capGetDriverDescriptionA () returned 0x0 [0113.213] GetLastError () returned 0x0 [0113.213] SetLastError (dwErrCode=0x0) [0113.213] OpenThemeData () returned 0x1450000 [0113.213] GetSystemMetrics (nIndex=32) returned 4 [0113.213] GetSystemMetrics (nIndex=33) returned 4 [0113.213] CloseThemeData () returned 0x0 [0113.214] lstrlenA (lpString="\x92\x07") returned 2 [0113.214] lstrlenA (lpString="\x92\x07") returned 2 [0113.214] lstrlenA (lpString="\x92\x07") returned 2 [0113.214] lstrlenA (lpString="\x92\x07") returned 2 [0113.214] lstrlenA (lpString="\x92\x07") returned 2 [0113.214] lstrlenA (lpString="\x92\x07") returned 2 [0113.214] capGetDriverDescriptionA () returned 0x0 [0113.214] GetLastError () returned 0x0 [0113.214] SetLastError (dwErrCode=0x0) [0113.214] OpenThemeData () returned 0x1460000 [0113.215] GetSystemMetrics (nIndex=32) returned 4 [0113.215] GetSystemMetrics (nIndex=33) returned 4 [0113.215] CloseThemeData () returned 0x0 [0113.215] lstrlenA (lpString="\x92\x07") returned 2 [0113.215] lstrlenA (lpString="\x92\x07") returned 2 [0113.215] lstrlenA (lpString="\x92\x07") returned 2 [0113.215] lstrlenA (lpString="\x92\x07") returned 2 [0113.215] lstrlenA (lpString="\x92\x07") returned 2 [0113.215] lstrlenA (lpString="\x92\x07") returned 2 [0113.215] capGetDriverDescriptionA () returned 0x0 [0113.216] GetLastError () returned 0x0 [0113.216] SetLastError (dwErrCode=0x0) [0113.216] OpenThemeData () returned 0x1470000 [0113.217] GetSystemMetrics (nIndex=32) returned 4 [0113.217] GetSystemMetrics (nIndex=33) returned 4 [0113.217] CloseThemeData () returned 0x0 [0113.217] lstrlenA (lpString="\x92\x07") returned 2 [0113.217] lstrlenA (lpString="\x92\x07") returned 2 [0113.217] lstrlenA (lpString="\x92\x07") returned 2 [0113.217] lstrlenA (lpString="\x92\x07") returned 2 [0113.217] lstrlenA (lpString="\x92\x07") returned 2 [0113.217] lstrlenA (lpString="\x92\x07") returned 2 [0113.217] capGetDriverDescriptionA () returned 0x0 [0113.218] GetLastError () returned 0x0 [0113.218] SetLastError (dwErrCode=0x0) [0113.218] OpenThemeData () returned 0x1480000 [0113.218] GetSystemMetrics (nIndex=32) returned 4 [0113.218] GetSystemMetrics (nIndex=33) returned 4 [0113.218] CloseThemeData () returned 0x0 [0113.219] lstrlenA (lpString="\x92\x07") returned 2 [0113.219] lstrlenA (lpString="\x92\x07") returned 2 [0113.219] lstrlenA (lpString="\x92\x07") returned 2 [0113.219] lstrlenA (lpString="\x92\x07") returned 2 [0113.219] lstrlenA (lpString="\x92\x07") returned 2 [0113.219] lstrlenA (lpString="\x92\x07") returned 2 [0113.219] capGetDriverDescriptionA () returned 0x0 [0113.220] GetLastError () returned 0x0 [0113.220] SetLastError (dwErrCode=0x0) [0113.220] OpenThemeData () returned 0x1490000 [0113.220] GetSystemMetrics (nIndex=32) returned 4 [0113.220] GetSystemMetrics (nIndex=33) returned 4 [0113.220] CloseThemeData () returned 0x0 [0113.220] lstrlenA (lpString="\x92\x07") returned 2 [0113.221] lstrlenA (lpString="\x92\x07") returned 2 [0113.221] lstrlenA (lpString="\x92\x07") returned 2 [0113.221] lstrlenA (lpString="\x92\x07") returned 2 [0113.221] lstrlenA (lpString="\x92\x07") returned 2 [0113.221] lstrlenA (lpString="\x92\x07") returned 2 [0113.221] capGetDriverDescriptionA () returned 0x0 [0113.222] GetLastError () returned 0x0 [0113.222] SetLastError (dwErrCode=0x0) [0113.222] OpenThemeData () returned 0x14a0000 [0113.222] GetSystemMetrics (nIndex=32) returned 4 [0113.222] GetSystemMetrics (nIndex=33) returned 4 [0113.222] CloseThemeData () returned 0x0 [0113.222] lstrlenA (lpString="\x92\x07") returned 2 [0113.223] lstrlenA (lpString="\x92\x07") returned 2 [0113.223] lstrlenA (lpString="\x92\x07") returned 2 [0113.223] lstrlenA (lpString="\x92\x07") returned 2 [0113.223] lstrlenA (lpString="\x92\x07") returned 2 [0113.223] lstrlenA (lpString="\x92\x07") returned 2 [0113.223] capGetDriverDescriptionA () returned 0x0 [0113.223] GetLastError () returned 0x0 [0113.223] SetLastError (dwErrCode=0x0) [0113.223] OpenThemeData () returned 0x14b0000 [0113.224] GetSystemMetrics (nIndex=32) returned 4 [0113.224] GetSystemMetrics (nIndex=33) returned 4 [0113.224] CloseThemeData () returned 0x0 [0113.224] lstrlenA (lpString="\x92\x07") returned 2 [0113.224] lstrlenA (lpString="\x92\x07") returned 2 [0113.224] lstrlenA (lpString="\x92\x07") returned 2 [0113.224] lstrlenA (lpString="\x92\x07") returned 2 [0113.224] lstrlenA (lpString="\x92\x07") returned 2 [0113.224] lstrlenA (lpString="\x92\x07") returned 2 [0113.224] capGetDriverDescriptionA () returned 0x0 [0113.225] GetLastError () returned 0x0 [0113.225] SetLastError (dwErrCode=0x0) [0113.225] OpenThemeData () returned 0x14c0000 [0113.226] GetSystemMetrics (nIndex=32) returned 4 [0113.226] GetSystemMetrics (nIndex=33) returned 4 [0113.226] CloseThemeData () returned 0x0 [0113.226] lstrlenA (lpString="\x92\x07") returned 2 [0113.226] lstrlenA (lpString="\x92\x07") returned 2 [0113.226] lstrlenA (lpString="\x92\x07") returned 2 [0113.226] lstrlenA (lpString="\x92\x07") returned 2 [0113.226] lstrlenA (lpString="\x92\x07") returned 2 [0113.226] lstrlenA (lpString="\x92\x07") returned 2 [0113.226] capGetDriverDescriptionA () returned 0x0 [0113.227] GetLastError () returned 0x0 [0113.227] SetLastError (dwErrCode=0x0) [0113.227] OpenThemeData () returned 0x14d0000 [0113.227] GetSystemMetrics (nIndex=32) returned 4 [0113.227] GetSystemMetrics (nIndex=33) returned 4 [0113.227] CloseThemeData () returned 0x0 [0113.228] lstrlenA (lpString="\x92\x07") returned 2 [0113.228] lstrlenA (lpString="\x92\x07") returned 2 [0113.228] lstrlenA (lpString="\x92\x07") returned 2 [0113.228] lstrlenA (lpString="\x92\x07") returned 2 [0113.228] lstrlenA (lpString="\x92\x07") returned 2 [0113.228] lstrlenA (lpString="\x92\x07") returned 2 [0113.228] capGetDriverDescriptionA () returned 0x0 [0113.229] GetLastError () returned 0x0 [0113.229] SetLastError (dwErrCode=0x0) [0113.229] OpenThemeData () returned 0x14e0000 [0113.229] GetSystemMetrics (nIndex=32) returned 4 [0113.229] GetSystemMetrics (nIndex=33) returned 4 [0113.229] CloseThemeData () returned 0x0 [0113.230] lstrlenA (lpString="\x92\x07") returned 2 [0113.230] lstrlenA (lpString="\x92\x07") returned 2 [0113.230] lstrlenA (lpString="\x92\x07") returned 2 [0113.230] lstrlenA (lpString="\x92\x07") returned 2 [0113.230] lstrlenA (lpString="\x92\x07") returned 2 [0113.230] lstrlenA (lpString="\x92\x07") returned 2 [0113.230] capGetDriverDescriptionA () returned 0x0 [0113.230] GetLastError () returned 0x0 [0113.230] SetLastError (dwErrCode=0x0) [0113.230] OpenThemeData () returned 0x14f0000 [0113.231] GetSystemMetrics (nIndex=32) returned 4 [0113.231] GetSystemMetrics (nIndex=33) returned 4 [0113.231] CloseThemeData () returned 0x0 [0113.231] lstrlenA (lpString="\x92\x07") returned 2 [0113.231] lstrlenA (lpString="\x92\x07") returned 2 [0113.231] lstrlenA (lpString="\x92\x07") returned 2 [0113.231] lstrlenA (lpString="\x92\x07") returned 2 [0113.231] lstrlenA (lpString="\x92\x07") returned 2 [0113.231] lstrlenA (lpString="\x92\x07") returned 2 [0113.232] capGetDriverDescriptionA () returned 0x0 [0113.232] GetLastError () returned 0x0 [0113.232] SetLastError (dwErrCode=0x0) [0113.232] OpenThemeData () returned 0x1500000 [0113.233] GetSystemMetrics (nIndex=32) returned 4 [0113.233] GetSystemMetrics (nIndex=33) returned 4 [0113.233] CloseThemeData () returned 0x0 [0113.233] lstrlenA (lpString="\x92\x07") returned 2 [0113.233] lstrlenA (lpString="\x92\x07") returned 2 [0113.233] lstrlenA (lpString="\x92\x07") returned 2 [0113.233] lstrlenA (lpString="\x92\x07") returned 2 [0113.233] lstrlenA (lpString="\x92\x07") returned 2 [0113.233] lstrlenA (lpString="\x92\x07") returned 2 [0113.233] capGetDriverDescriptionA () returned 0x0 [0113.234] GetLastError () returned 0x0 [0113.234] SetLastError (dwErrCode=0x0) [0113.234] OpenThemeData () returned 0x1510000 [0113.234] GetSystemMetrics (nIndex=32) returned 4 [0113.234] GetSystemMetrics (nIndex=33) returned 4 [0113.234] CloseThemeData () returned 0x0 [0113.235] lstrlenA (lpString="\x92\x07") returned 2 [0113.235] lstrlenA (lpString="\x92\x07") returned 2 [0113.235] lstrlenA (lpString="\x92\x07") returned 2 [0113.235] lstrlenA (lpString="\x92\x07") returned 2 [0113.235] lstrlenA (lpString="\x92\x07") returned 2 [0113.235] lstrlenA (lpString="\x92\x07") returned 2 [0113.235] capGetDriverDescriptionA () returned 0x0 [0113.236] GetLastError () returned 0x0 [0113.236] SetLastError (dwErrCode=0x0) [0113.236] OpenThemeData () returned 0x1520000 [0113.236] GetSystemMetrics (nIndex=32) returned 4 [0113.236] GetSystemMetrics (nIndex=33) returned 4 [0113.236] CloseThemeData () returned 0x0 [0113.237] lstrlenA (lpString="\x92\x07") returned 2 [0113.237] lstrlenA (lpString="\x92\x07") returned 2 [0113.237] lstrlenA (lpString="\x92\x07") returned 2 [0113.237] lstrlenA (lpString="\x92\x07") returned 2 [0113.237] lstrlenA (lpString="\x92\x07") returned 2 [0113.237] lstrlenA (lpString="\x92\x07") returned 2 [0113.237] capGetDriverDescriptionA () returned 0x0 [0113.237] GetLastError () returned 0x0 [0113.238] SetLastError (dwErrCode=0x0) [0113.238] OpenThemeData () returned 0x1530000 [0113.238] GetSystemMetrics (nIndex=32) returned 4 [0113.238] GetSystemMetrics (nIndex=33) returned 4 [0113.238] CloseThemeData () returned 0x0 [0113.239] lstrlenA (lpString="\x92\x07") returned 2 [0113.239] lstrlenA (lpString="\x92\x07") returned 2 [0113.239] lstrlenA (lpString="\x92\x07") returned 2 [0113.239] lstrlenA (lpString="\x92\x07") returned 2 [0113.239] lstrlenA (lpString="\x92\x07") returned 2 [0113.239] lstrlenA (lpString="\x92\x07") returned 2 [0113.239] capGetDriverDescriptionA () returned 0x0 [0113.239] GetLastError () returned 0x0 [0113.239] SetLastError (dwErrCode=0x0) [0113.239] OpenThemeData () returned 0x1540000 [0113.242] GetSystemMetrics (nIndex=32) returned 4 [0113.242] GetSystemMetrics (nIndex=33) returned 4 [0113.242] CloseThemeData () returned 0x0 [0113.242] lstrlenA (lpString="\x92\x07") returned 2 [0113.242] lstrlenA (lpString="\x92\x07") returned 2 [0113.242] lstrlenA (lpString="\x92\x07") returned 2 [0113.242] lstrlenA (lpString="\x92\x07") returned 2 [0113.242] lstrlenA (lpString="\x92\x07") returned 2 [0113.242] lstrlenA (lpString="\x92\x07") returned 2 [0113.242] capGetDriverDescriptionA () returned 0x0 [0113.243] GetLastError () returned 0x0 [0113.243] SetLastError (dwErrCode=0x0) [0113.243] OpenThemeData () returned 0x1550000 [0113.243] GetSystemMetrics (nIndex=32) returned 4 [0113.243] GetSystemMetrics (nIndex=33) returned 4 [0113.243] CloseThemeData () returned 0x0 [0113.244] lstrlenA (lpString="\x92\x07") returned 2 [0113.244] lstrlenA (lpString="\x92\x07") returned 2 [0113.244] lstrlenA (lpString="\x92\x07") returned 2 [0113.244] lstrlenA (lpString="\x92\x07") returned 2 [0113.244] lstrlenA (lpString="\x92\x07") returned 2 [0113.244] lstrlenA (lpString="\x92\x07") returned 2 [0113.244] capGetDriverDescriptionA () returned 0x0 [0113.245] GetLastError () returned 0x0 [0113.245] SetLastError (dwErrCode=0x0) [0113.245] OpenThemeData () returned 0x1560000 [0113.245] GetSystemMetrics (nIndex=32) returned 4 [0113.245] GetSystemMetrics (nIndex=33) returned 4 [0113.245] CloseThemeData () returned 0x0 [0113.246] lstrlenA (lpString="\x92\x07") returned 2 [0113.246] lstrlenA (lpString="\x92\x07") returned 2 [0113.246] lstrlenA (lpString="\x92\x07") returned 2 [0113.246] lstrlenA (lpString="\x92\x07") returned 2 [0113.246] lstrlenA (lpString="\x92\x07") returned 2 [0113.246] lstrlenA (lpString="\x92\x07") returned 2 [0113.246] capGetDriverDescriptionA () returned 0x0 [0113.246] GetLastError () returned 0x0 [0113.247] SetLastError (dwErrCode=0x0) [0113.247] OpenThemeData () returned 0x1570000 [0113.247] GetSystemMetrics (nIndex=32) returned 4 [0113.247] GetSystemMetrics (nIndex=33) returned 4 [0113.247] CloseThemeData () returned 0x0 [0113.247] lstrlenA (lpString="\x92\x07") returned 2 [0113.247] lstrlenA (lpString="\x92\x07") returned 2 [0113.247] lstrlenA (lpString="\x92\x07") returned 2 [0113.248] lstrlenA (lpString="\x92\x07") returned 2 [0113.248] lstrlenA (lpString="\x92\x07") returned 2 [0113.248] lstrlenA (lpString="\x92\x07") returned 2 [0113.248] capGetDriverDescriptionA () returned 0x0 [0113.248] GetLastError () returned 0x0 [0113.248] SetLastError (dwErrCode=0x0) [0113.248] OpenThemeData () returned 0x1580000 [0113.249] GetSystemMetrics (nIndex=32) returned 4 [0113.249] GetSystemMetrics (nIndex=33) returned 4 [0113.249] CloseThemeData () returned 0x0 [0113.249] lstrlenA (lpString="\x92\x07") returned 2 [0113.249] lstrlenA (lpString="\x92\x07") returned 2 [0113.249] lstrlenA (lpString="\x92\x07") returned 2 [0113.249] lstrlenA (lpString="\x92\x07") returned 2 [0113.249] lstrlenA (lpString="\x92\x07") returned 2 [0113.249] lstrlenA (lpString="\x92\x07") returned 2 [0113.249] capGetDriverDescriptionA () returned 0x0 [0113.250] GetLastError () returned 0x0 [0113.250] SetLastError (dwErrCode=0x0) [0113.250] OpenThemeData () returned 0x1590000 [0113.251] GetSystemMetrics (nIndex=32) returned 4 [0113.251] GetSystemMetrics (nIndex=33) returned 4 [0113.251] CloseThemeData () returned 0x0 [0113.251] lstrlenA (lpString="\x92\x07") returned 2 [0113.251] lstrlenA (lpString="\x92\x07") returned 2 [0113.251] lstrlenA (lpString="\x92\x07") returned 2 [0113.251] lstrlenA (lpString="\x92\x07") returned 2 [0113.251] lstrlenA (lpString="\x92\x07") returned 2 [0113.251] lstrlenA (lpString="\x92\x07") returned 2 [0113.251] capGetDriverDescriptionA () returned 0x0 [0113.252] GetLastError () returned 0x0 [0113.252] SetLastError (dwErrCode=0x0) [0113.252] OpenThemeData () returned 0x15a0000 [0113.405] GetSystemMetrics (nIndex=32) returned 4 [0113.405] GetSystemMetrics (nIndex=33) returned 4 [0113.405] CloseThemeData () returned 0x0 [0113.406] lstrlenA (lpString="\x92\x07") returned 2 [0113.406] lstrlenA (lpString="\x92\x07") returned 2 [0113.406] lstrlenA (lpString="\x92\x07") returned 2 [0113.406] lstrlenA (lpString="\x92\x07") returned 2 [0113.406] lstrlenA (lpString="\x92\x07") returned 2 [0113.406] lstrlenA (lpString="\x92\x07") returned 2 [0113.408] capGetDriverDescriptionA () returned 0x0 [0113.408] GetLastError () returned 0x0 [0113.408] SetLastError (dwErrCode=0x0) [0113.408] OpenThemeData () returned 0x15b0000 [0113.409] GetSystemMetrics (nIndex=32) returned 4 [0113.409] GetSystemMetrics (nIndex=33) returned 4 [0113.409] CloseThemeData () returned 0x0 [0113.410] lstrlenA (lpString="\x92\x07") returned 2 [0113.410] lstrlenA (lpString="\x92\x07") returned 2 [0113.410] lstrlenA (lpString="\x92\x07") returned 2 [0113.410] lstrlenA (lpString="\x92\x07") returned 2 [0113.410] lstrlenA (lpString="\x92\x07") returned 2 [0113.410] lstrlenA (lpString="\x92\x07") returned 2 [0113.410] capGetDriverDescriptionA () returned 0x0 [0113.410] GetLastError () returned 0x0 [0113.410] SetLastError (dwErrCode=0x0) [0113.410] OpenThemeData () returned 0x15c0000 [0113.411] GetSystemMetrics (nIndex=32) returned 4 [0113.411] GetSystemMetrics (nIndex=33) returned 4 [0113.411] CloseThemeData () returned 0x0 [0113.411] lstrlenA (lpString="\x92\x07") returned 2 [0113.411] lstrlenA (lpString="\x92\x07") returned 2 [0113.411] lstrlenA (lpString="\x92\x07") returned 2 [0113.411] lstrlenA (lpString="\x92\x07") returned 2 [0113.411] lstrlenA (lpString="\x92\x07") returned 2 [0113.411] lstrlenA (lpString="\x92\x07") returned 2 [0113.411] capGetDriverDescriptionA () returned 0x0 [0113.412] GetLastError () returned 0x0 [0113.412] SetLastError (dwErrCode=0x0) [0113.412] OpenThemeData () returned 0x15d0000 [0113.413] GetSystemMetrics (nIndex=32) returned 4 [0113.413] GetSystemMetrics (nIndex=33) returned 4 [0113.413] CloseThemeData () returned 0x0 [0113.413] lstrlenA (lpString="\x92\x07") returned 2 [0113.413] lstrlenA (lpString="\x92\x07") returned 2 [0113.413] lstrlenA (lpString="\x92\x07") returned 2 [0113.413] lstrlenA (lpString="\x92\x07") returned 2 [0113.413] lstrlenA (lpString="\x92\x07") returned 2 [0113.413] lstrlenA (lpString="\x92\x07") returned 2 [0113.413] capGetDriverDescriptionA () returned 0x0 [0113.414] GetLastError () returned 0x0 [0113.414] SetLastError (dwErrCode=0x0) [0113.414] OpenThemeData () returned 0x15e0000 [0113.414] GetSystemMetrics (nIndex=32) returned 4 [0113.414] GetSystemMetrics (nIndex=33) returned 4 [0113.414] CloseThemeData () returned 0x0 [0113.415] lstrlenA (lpString="\x92\x07") returned 2 [0113.415] lstrlenA (lpString="\x92\x07") returned 2 [0113.415] lstrlenA (lpString="\x92\x07") returned 2 [0113.415] lstrlenA (lpString="\x92\x07") returned 2 [0113.415] lstrlenA (lpString="\x92\x07") returned 2 [0113.415] lstrlenA (lpString="\x92\x07") returned 2 [0113.415] capGetDriverDescriptionA () returned 0x0 [0113.416] GetLastError () returned 0x0 [0113.416] SetLastError (dwErrCode=0x0) [0113.416] OpenThemeData () returned 0x15f0000 [0113.416] GetSystemMetrics (nIndex=32) returned 4 [0113.416] GetSystemMetrics (nIndex=33) returned 4 [0113.416] CloseThemeData () returned 0x0 [0113.417] lstrlenA (lpString="\x92\x07") returned 2 [0113.417] lstrlenA (lpString="\x92\x07") returned 2 [0113.417] lstrlenA (lpString="\x92\x07") returned 2 [0113.417] lstrlenA (lpString="\x92\x07") returned 2 [0113.417] lstrlenA (lpString="\x92\x07") returned 2 [0113.417] lstrlenA (lpString="\x92\x07") returned 2 [0113.417] capGetDriverDescriptionA () returned 0x0 [0113.417] GetLastError () returned 0x0 [0113.417] SetLastError (dwErrCode=0x0) [0113.417] OpenThemeData () returned 0x1600000 [0113.418] GetSystemMetrics (nIndex=32) returned 4 [0113.418] GetSystemMetrics (nIndex=33) returned 4 [0113.418] CloseThemeData () returned 0x0 [0113.418] lstrlenA (lpString="\x92\x07") returned 2 [0113.418] lstrlenA (lpString="\x92\x07") returned 2 [0113.418] lstrlenA (lpString="\x92\x07") returned 2 [0113.418] lstrlenA (lpString="\x92\x07") returned 2 [0113.418] lstrlenA (lpString="\x92\x07") returned 2 [0113.418] lstrlenA (lpString="\x92\x07") returned 2 [0113.418] capGetDriverDescriptionA () returned 0x0 [0113.419] GetLastError () returned 0x0 [0113.419] SetLastError (dwErrCode=0x0) [0113.419] OpenThemeData () returned 0x1610000 [0113.420] GetSystemMetrics (nIndex=32) returned 4 [0113.420] GetSystemMetrics (nIndex=33) returned 4 [0113.420] CloseThemeData () returned 0x0 [0113.420] lstrlenA (lpString="\x92\x07") returned 2 [0113.420] lstrlenA (lpString="\x92\x07") returned 2 [0113.420] lstrlenA (lpString="\x92\x07") returned 2 [0113.420] lstrlenA (lpString="\x92\x07") returned 2 [0113.420] lstrlenA (lpString="\x92\x07") returned 2 [0113.420] lstrlenA (lpString="\x92\x07") returned 2 [0113.420] capGetDriverDescriptionA () returned 0x0 [0113.421] GetLastError () returned 0x0 [0113.421] SetLastError (dwErrCode=0x0) [0113.421] OpenThemeData () returned 0x1620000 [0113.421] GetSystemMetrics (nIndex=32) returned 4 [0113.421] GetSystemMetrics (nIndex=33) returned 4 [0113.421] CloseThemeData () returned 0x0 [0113.422] lstrlenA (lpString="\x92\x07") returned 2 [0113.422] lstrlenA (lpString="\x92\x07") returned 2 [0113.422] lstrlenA (lpString="\x92\x07") returned 2 [0113.422] lstrlenA (lpString="\x92\x07") returned 2 [0113.422] lstrlenA (lpString="\x92\x07") returned 2 [0113.422] lstrlenA (lpString="\x92\x07") returned 2 [0113.422] capGetDriverDescriptionA () returned 0x0 [0113.422] GetLastError () returned 0x0 [0113.422] SetLastError (dwErrCode=0x0) [0113.422] OpenThemeData () returned 0x1630000 [0113.423] GetSystemMetrics (nIndex=32) returned 4 [0113.423] GetSystemMetrics (nIndex=33) returned 4 [0113.423] CloseThemeData () returned 0x0 [0113.423] lstrlenA (lpString="\x92\x07") returned 2 [0113.423] lstrlenA (lpString="\x92\x07") returned 2 [0113.423] lstrlenA (lpString="\x92\x07") returned 2 [0113.423] lstrlenA (lpString="\x92\x07") returned 2 [0113.423] lstrlenA (lpString="\x92\x07") returned 2 [0113.423] lstrlenA (lpString="\x92\x07") returned 2 [0113.423] capGetDriverDescriptionA () returned 0x0 [0113.424] GetLastError () returned 0x0 [0113.424] SetLastError (dwErrCode=0x0) [0113.424] OpenThemeData () returned 0x1640000 [0113.425] GetSystemMetrics (nIndex=32) returned 4 [0113.425] GetSystemMetrics (nIndex=33) returned 4 [0113.425] CloseThemeData () returned 0x0 [0113.425] lstrlenA (lpString="\x92\x07") returned 2 [0113.425] lstrlenA (lpString="\x92\x07") returned 2 [0113.425] lstrlenA (lpString="\x92\x07") returned 2 [0113.425] lstrlenA (lpString="\x92\x07") returned 2 [0113.425] lstrlenA (lpString="\x92\x07") returned 2 [0113.425] lstrlenA (lpString="\x92\x07") returned 2 [0113.425] capGetDriverDescriptionA () returned 0x0 [0113.426] GetLastError () returned 0x0 [0113.426] SetLastError (dwErrCode=0x0) [0113.426] OpenThemeData () returned 0x1650000 [0113.426] GetSystemMetrics (nIndex=32) returned 4 [0113.426] GetSystemMetrics (nIndex=33) returned 4 [0113.426] CloseThemeData () returned 0x0 [0113.427] lstrlenA (lpString="\x92\x07") returned 2 [0113.427] lstrlenA (lpString="\x92\x07") returned 2 [0113.427] lstrlenA (lpString="\x92\x07") returned 2 [0113.427] lstrlenA (lpString="\x92\x07") returned 2 [0113.427] lstrlenA (lpString="\x92\x07") returned 2 [0113.427] lstrlenA (lpString="\x92\x07") returned 2 [0113.427] capGetDriverDescriptionA () returned 0x0 [0113.427] GetLastError () returned 0x0 [0113.428] SetLastError (dwErrCode=0x0) [0113.428] OpenThemeData () returned 0x1660000 [0113.428] GetSystemMetrics (nIndex=32) returned 4 [0113.428] GetSystemMetrics (nIndex=33) returned 4 [0113.428] CloseThemeData () returned 0x0 [0113.428] lstrlenA (lpString="\x92\x07") returned 2 [0113.428] lstrlenA (lpString="\x92\x07") returned 2 [0113.428] lstrlenA (lpString="\x92\x07") returned 2 [0113.428] lstrlenA (lpString="\x92\x07") returned 2 [0113.429] lstrlenA (lpString="\x92\x07") returned 2 [0113.429] lstrlenA (lpString="\x92\x07") returned 2 [0113.429] capGetDriverDescriptionA () returned 0x0 [0113.429] GetLastError () returned 0x0 [0113.429] SetLastError (dwErrCode=0x0) [0113.429] OpenThemeData () returned 0x1670000 [0113.430] GetSystemMetrics (nIndex=32) returned 4 [0113.430] GetSystemMetrics (nIndex=33) returned 4 [0113.430] CloseThemeData () returned 0x0 [0113.430] lstrlenA (lpString="\x92\x07") returned 2 [0113.430] lstrlenA (lpString="\x92\x07") returned 2 [0113.430] lstrlenA (lpString="\x92\x07") returned 2 [0113.430] lstrlenA (lpString="\x92\x07") returned 2 [0113.430] lstrlenA (lpString="\x92\x07") returned 2 [0113.430] lstrlenA (lpString="\x92\x07") returned 2 [0113.430] capGetDriverDescriptionA () returned 0x0 [0113.431] GetLastError () returned 0x0 [0113.431] SetLastError (dwErrCode=0x0) [0113.431] OpenThemeData () returned 0x1680000 [0113.431] GetSystemMetrics (nIndex=32) returned 4 [0113.431] GetSystemMetrics (nIndex=33) returned 4 [0113.431] CloseThemeData () returned 0x0 [0113.432] lstrlenA (lpString="\x92\x07") returned 2 [0113.432] lstrlenA (lpString="\x92\x07") returned 2 [0113.432] lstrlenA (lpString="\x92\x07") returned 2 [0113.432] capGetDriverDescriptionA () returned 0x0 [0113.433] GetLastError () returned 0x0 [0113.433] SetLastError (dwErrCode=0x0) [0113.433] OpenThemeData () returned 0x1690000 [0113.433] GetSystemMetrics (nIndex=32) returned 4 [0113.433] GetSystemMetrics (nIndex=33) returned 4 [0113.433] CloseThemeData () returned 0x0 [0113.433] capGetDriverDescriptionA () returned 0x0 [0113.434] GetLastError () returned 0x0 [0113.434] SetLastError (dwErrCode=0x0) [0113.434] OpenThemeData () returned 0x16a0000 [0113.436] GetSystemMetrics (nIndex=32) returned 4 [0113.436] GetSystemMetrics (nIndex=33) returned 4 [0113.436] CloseThemeData () returned 0x0 [0113.437] capGetDriverDescriptionA () returned 0x0 [0113.437] GetLastError () returned 0x0 [0113.437] SetLastError (dwErrCode=0x0) [0113.437] OpenThemeData () returned 0x16b0000 [0113.438] GetSystemMetrics (nIndex=32) returned 4 [0113.438] GetSystemMetrics (nIndex=33) returned 4 [0113.438] CloseThemeData () returned 0x0 [0113.438] capGetDriverDescriptionA () returned 0x0 [0113.439] GetLastError () returned 0x0 [0113.439] SetLastError (dwErrCode=0x0) [0113.439] OpenThemeData () returned 0x16c0000 [0113.439] GetSystemMetrics (nIndex=32) returned 4 [0113.439] GetSystemMetrics (nIndex=33) returned 4 [0113.439] CloseThemeData () returned 0x0 [0114.128] capGetDriverDescriptionA () returned 0x0 [0114.129] GetLastError () returned 0x0 [0114.129] SetLastError (dwErrCode=0x0) [0114.129] OpenThemeData () returned 0x16d0000 [0114.129] GetSystemMetrics (nIndex=32) returned 4 [0114.129] GetSystemMetrics (nIndex=33) returned 4 [0114.129] CloseThemeData () returned 0x0 [0114.129] capGetDriverDescriptionA () returned 0x0 [0114.130] GetLastError () returned 0x0 [0114.130] SetLastError (dwErrCode=0x0) [0114.130] OpenThemeData () returned 0x16e0000 [0114.131] GetSystemMetrics (nIndex=32) returned 4 [0114.131] GetSystemMetrics (nIndex=33) returned 4 [0114.131] CloseThemeData () returned 0x0 [0114.131] capGetDriverDescriptionA () returned 0x0 [0114.132] GetLastError () returned 0x0 [0114.132] SetLastError (dwErrCode=0x0) [0114.132] OpenThemeData () returned 0x16f0000 [0114.132] GetSystemMetrics (nIndex=32) returned 4 [0114.132] GetSystemMetrics (nIndex=33) returned 4 [0114.132] CloseThemeData () returned 0x0 [0114.132] capGetDriverDescriptionA () returned 0x0 [0114.133] GetLastError () returned 0x0 [0114.133] SetLastError (dwErrCode=0x0) [0114.133] OpenThemeData () returned 0x1700000 [0114.134] GetSystemMetrics (nIndex=32) returned 4 [0114.134] GetSystemMetrics (nIndex=33) returned 4 [0114.134] CloseThemeData () returned 0x0 [0114.134] capGetDriverDescriptionA () returned 0x0 [0114.135] GetLastError () returned 0x0 [0114.135] SetLastError (dwErrCode=0x0) [0114.135] OpenThemeData () returned 0x1710000 [0114.135] GetSystemMetrics (nIndex=32) returned 4 [0114.135] GetSystemMetrics (nIndex=33) returned 4 [0114.135] CloseThemeData () returned 0x0 [0114.135] capGetDriverDescriptionA () returned 0x0 [0114.136] GetLastError () returned 0x0 [0114.136] SetLastError (dwErrCode=0x0) [0114.136] OpenThemeData () returned 0x1720000 [0114.137] GetSystemMetrics (nIndex=32) returned 4 [0114.137] GetSystemMetrics (nIndex=33) returned 4 [0114.137] CloseThemeData () returned 0x0 [0114.137] capGetDriverDescriptionA () returned 0x0 [0114.138] GetLastError () returned 0x0 [0114.138] SetLastError (dwErrCode=0x0) [0114.138] OpenThemeData () returned 0x1730000 [0114.138] GetSystemMetrics (nIndex=32) returned 4 [0114.138] GetSystemMetrics (nIndex=33) returned 4 [0114.138] CloseThemeData () returned 0x0 [0114.138] capGetDriverDescriptionA () returned 0x0 [0114.139] GetLastError () returned 0x0 [0114.139] SetLastError (dwErrCode=0x0) [0114.139] OpenThemeData () returned 0x1740000 [0114.140] GetSystemMetrics (nIndex=32) returned 4 [0114.140] GetSystemMetrics (nIndex=33) returned 4 [0114.140] CloseThemeData () returned 0x0 [0114.140] capGetDriverDescriptionA () returned 0x0 [0114.141] GetLastError () returned 0x0 [0114.141] SetLastError (dwErrCode=0x0) [0114.141] OpenThemeData () returned 0x1750000 [0114.141] GetSystemMetrics (nIndex=32) returned 4 [0114.141] GetSystemMetrics (nIndex=33) returned 4 [0114.141] CloseThemeData () returned 0x0 [0114.141] capGetDriverDescriptionA () returned 0x0 [0114.142] GetLastError () returned 0x0 [0114.142] SetLastError (dwErrCode=0x0) [0114.142] OpenThemeData () returned 0x1760000 [0114.142] GetSystemMetrics (nIndex=32) returned 4 [0114.143] GetSystemMetrics (nIndex=33) returned 4 [0114.143] CloseThemeData () returned 0x0 [0114.143] lstrlenA (lpString="\x92\x07") returned 2 [0114.143] lstrlenA (lpString="\x92\x07") returned 2 [0114.143] lstrlenA (lpString="\x92\x07") returned 2 [0114.143] lstrlenA (lpString="\x92\x07") returned 2 [0114.143] lstrlenA (lpString="\x92\x07") returned 2 [0114.143] lstrlenA (lpString="\x92\x07") returned 2 [0114.143] capGetDriverDescriptionA () returned 0x0 [0114.144] GetLastError () returned 0x0 [0114.144] SetLastError (dwErrCode=0x0) [0114.144] OpenThemeData () returned 0x1770000 [0114.144] GetSystemMetrics (nIndex=32) returned 4 [0114.144] GetSystemMetrics (nIndex=33) returned 4 [0114.144] CloseThemeData () returned 0x0 [0114.145] lstrlenA (lpString="\x92\x07") returned 2 [0114.145] lstrlenA (lpString="\x92\x07") returned 2 [0114.145] lstrlenA (lpString="\x92\x07") returned 2 [0114.145] lstrlenA (lpString="\x92\x07") returned 2 [0114.145] lstrlenA (lpString="\x92\x07") returned 2 [0114.145] lstrlenA (lpString="\x92\x07") returned 2 [0114.145] capGetDriverDescriptionA () returned 0x0 [0114.145] GetLastError () returned 0x0 [0114.145] SetLastError (dwErrCode=0x0) [0114.146] OpenThemeData () returned 0x1780000 [0114.146] GetSystemMetrics (nIndex=32) returned 4 [0114.146] GetSystemMetrics (nIndex=33) returned 4 [0114.146] CloseThemeData () returned 0x0 [0114.146] lstrlenA (lpString="\x92\x07") returned 2 [0114.146] lstrlenA (lpString="\x92\x07") returned 2 [0114.146] lstrlenA (lpString="\x92\x07") returned 2 [0114.146] lstrlenA (lpString="\x92\x07") returned 2 [0114.146] lstrlenA (lpString="\x92\x07") returned 2 [0114.146] lstrlenA (lpString="\x92\x07") returned 2 [0114.146] capGetDriverDescriptionA () returned 0x0 [0114.147] GetLastError () returned 0x0 [0114.147] SetLastError (dwErrCode=0x0) [0114.147] OpenThemeData () returned 0x1790000 [0114.148] GetSystemMetrics (nIndex=32) returned 4 [0114.148] GetSystemMetrics (nIndex=33) returned 4 [0114.148] CloseThemeData () returned 0x0 [0114.148] lstrlenA (lpString="\x92\x07") returned 2 [0114.148] lstrlenA (lpString="\x92\x07") returned 2 [0114.148] lstrlenA (lpString="\x92\x07") returned 2 [0114.148] lstrlenA (lpString="\x92\x07") returned 2 [0114.148] lstrlenA (lpString="\x92\x07") returned 2 [0114.148] lstrlenA (lpString="\x92\x07") returned 2 [0114.148] capGetDriverDescriptionA () returned 0x0 [0114.149] GetLastError () returned 0x0 [0114.149] SetLastError (dwErrCode=0x0) [0114.149] OpenThemeData () returned 0x17a0000 [0114.149] GetSystemMetrics (nIndex=32) returned 4 [0114.149] GetSystemMetrics (nIndex=33) returned 4 [0114.149] CloseThemeData () returned 0x0 [0114.149] lstrlenA (lpString="\x92\x07") returned 2 [0114.149] lstrlenA (lpString="\x92\x07") returned 2 [0114.149] lstrlenA (lpString="\x92\x07") returned 2 [0114.149] lstrlenA (lpString="\x92\x07") returned 2 [0114.150] lstrlenA (lpString="\x92\x07") returned 2 [0114.150] lstrlenA (lpString="\x92\x07") returned 2 [0114.150] capGetDriverDescriptionA () returned 0x0 [0114.150] GetLastError () returned 0x0 [0114.150] SetLastError (dwErrCode=0x0) [0114.150] OpenThemeData () returned 0x17b0000 [0114.151] GetSystemMetrics (nIndex=32) returned 4 [0114.151] GetSystemMetrics (nIndex=33) returned 4 [0114.151] CloseThemeData () returned 0x0 [0114.151] lstrlenA (lpString="\x92\x07") returned 2 [0114.151] lstrlenA (lpString="\x92\x07") returned 2 [0114.151] lstrlenA (lpString="\x92\x07") returned 2 [0114.151] lstrlenA (lpString="\x92\x07") returned 2 [0114.151] lstrlenA (lpString="\x92\x07") returned 2 [0114.151] lstrlenA (lpString="\x92\x07") returned 2 [0114.151] capGetDriverDescriptionA () returned 0x0 [0114.152] GetLastError () returned 0x0 [0114.152] SetLastError (dwErrCode=0x0) [0114.152] OpenThemeData () returned 0x17c0000 [0114.152] GetSystemMetrics (nIndex=32) returned 4 [0114.152] GetSystemMetrics (nIndex=33) returned 4 [0114.152] CloseThemeData () returned 0x0 [0114.153] lstrlenA (lpString="\x92\x07") returned 2 [0114.153] lstrlenA (lpString="\x92\x07") returned 2 [0114.153] lstrlenA (lpString="\x92\x07") returned 2 [0114.153] lstrlenA (lpString="\x92\x07") returned 2 [0114.153] lstrlenA (lpString="\x92\x07") returned 2 [0114.153] lstrlenA (lpString="\x92\x07") returned 2 [0114.153] capGetDriverDescriptionA () returned 0x0 [0114.153] GetLastError () returned 0x0 [0114.153] SetLastError (dwErrCode=0x0) [0114.153] OpenThemeData () returned 0x17d0000 [0114.154] GetSystemMetrics (nIndex=32) returned 4 [0114.154] GetSystemMetrics (nIndex=33) returned 4 [0114.154] CloseThemeData () returned 0x0 [0114.154] lstrlenA (lpString="\x92\x07") returned 2 [0114.154] lstrlenA (lpString="\x92\x07") returned 2 [0114.154] lstrlenA (lpString="\x92\x07") returned 2 [0114.154] lstrlenA (lpString="\x92\x07") returned 2 [0114.154] lstrlenA (lpString="\x92\x07") returned 2 [0114.154] lstrlenA (lpString="\x92\x07") returned 2 [0114.154] capGetDriverDescriptionA () returned 0x0 [0114.155] GetLastError () returned 0x0 [0114.155] SetLastError (dwErrCode=0x0) [0114.155] OpenThemeData () returned 0x17e0000 [0114.155] GetSystemMetrics (nIndex=32) returned 4 [0114.155] GetSystemMetrics (nIndex=33) returned 4 [0114.156] CloseThemeData () returned 0x0 [0114.156] lstrlenA (lpString="\x92\x07") returned 2 [0114.156] lstrlenA (lpString="\x92\x07") returned 2 [0114.156] lstrlenA (lpString="\x92\x07") returned 2 [0114.156] lstrlenA (lpString="\x92\x07") returned 2 [0114.156] lstrlenA (lpString="\x92\x07") returned 2 [0114.156] lstrlenA (lpString="\x92\x07") returned 2 [0114.156] capGetDriverDescriptionA () returned 0x0 [0114.157] GetLastError () returned 0x0 [0114.157] SetLastError (dwErrCode=0x0) [0114.157] OpenThemeData () returned 0x17f0000 [0114.157] GetSystemMetrics (nIndex=32) returned 4 [0114.157] GetSystemMetrics (nIndex=33) returned 4 [0114.157] CloseThemeData () returned 0x0 [0114.157] lstrlenA (lpString="\x92\x07") returned 2 [0114.157] lstrlenA (lpString="\x92\x07") returned 2 [0114.157] lstrlenA (lpString="\x92\x07") returned 2 [0114.157] lstrlenA (lpString="\x92\x07") returned 2 [0114.158] lstrlenA (lpString="\x92\x07") returned 2 [0114.158] lstrlenA (lpString="\x92\x07") returned 2 [0114.158] capGetDriverDescriptionA () returned 0x0 [0114.158] GetLastError () returned 0x0 [0114.158] SetLastError (dwErrCode=0x0) [0114.158] OpenThemeData () returned 0x1800000 [0114.159] GetSystemMetrics (nIndex=32) returned 4 [0114.159] GetSystemMetrics (nIndex=33) returned 4 [0114.159] CloseThemeData () returned 0x0 [0114.159] lstrlenA (lpString="\x92\x07") returned 2 [0114.159] lstrlenA (lpString="\x92\x07") returned 2 [0114.159] lstrlenA (lpString="\x92\x07") returned 2 [0114.159] lstrlenA (lpString="\x92\x07") returned 2 [0114.159] lstrlenA (lpString="\x92\x07") returned 2 [0114.159] lstrlenA (lpString="\x92\x07") returned 2 [0114.159] capGetDriverDescriptionA () returned 0x0 [0114.160] GetLastError () returned 0x0 [0114.160] SetLastError (dwErrCode=0x0) [0114.160] OpenThemeData () returned 0x1810000 [0114.160] GetSystemMetrics (nIndex=32) returned 4 [0114.160] GetSystemMetrics (nIndex=33) returned 4 [0114.160] CloseThemeData () returned 0x0 [0114.161] lstrlenA (lpString="\x92\x07") returned 2 [0114.161] lstrlenA (lpString="\x92\x07") returned 2 [0114.161] lstrlenA (lpString="\x92\x07") returned 2 [0114.161] lstrlenA (lpString="\x92\x07") returned 2 [0114.161] lstrlenA (lpString="\x92\x07") returned 2 [0114.161] lstrlenA (lpString="\x92\x07") returned 2 [0114.161] capGetDriverDescriptionA () returned 0x0 [0114.161] GetLastError () returned 0x0 [0114.161] SetLastError (dwErrCode=0x0) [0114.161] OpenThemeData () returned 0x1820000 [0114.162] GetSystemMetrics (nIndex=32) returned 4 [0114.162] GetSystemMetrics (nIndex=33) returned 4 [0114.162] CloseThemeData () returned 0x0 [0114.162] lstrlenA (lpString="\x92\x07") returned 2 [0114.162] lstrlenA (lpString="\x92\x07") returned 2 [0114.162] lstrlenA (lpString="\x92\x07") returned 2 [0114.162] lstrlenA (lpString="\x92\x07") returned 2 [0114.162] lstrlenA (lpString="\x92\x07") returned 2 [0114.162] lstrlenA (lpString="\x92\x07") returned 2 [0114.162] capGetDriverDescriptionA () returned 0x0 [0114.163] GetLastError () returned 0x0 [0114.163] SetLastError (dwErrCode=0x0) [0114.163] OpenThemeData () returned 0x1830000 [0114.163] GetSystemMetrics (nIndex=32) returned 4 [0114.163] GetSystemMetrics (nIndex=33) returned 4 [0114.164] CloseThemeData () returned 0x0 [0114.164] lstrlenA (lpString="\x92\x07") returned 2 [0114.164] lstrlenA (lpString="\x92\x07") returned 2 [0114.164] lstrlenA (lpString="\x92\x07") returned 2 [0114.164] lstrlenA (lpString="\x92\x07") returned 2 [0114.164] lstrlenA (lpString="\x92\x07") returned 2 [0114.164] lstrlenA (lpString="\x92\x07") returned 2 [0114.164] capGetDriverDescriptionA () returned 0x0 [0114.165] GetLastError () returned 0x0 [0114.165] SetLastError (dwErrCode=0x0) [0114.165] OpenThemeData () returned 0x1840000 [0114.165] GetSystemMetrics (nIndex=32) returned 4 [0114.165] GetSystemMetrics (nIndex=33) returned 4 [0114.165] CloseThemeData () returned 0x0 [0114.165] lstrlenA (lpString="\x92\x07") returned 2 [0114.165] lstrlenA (lpString="\x92\x07") returned 2 [0114.165] lstrlenA (lpString="\x92\x07") returned 2 [0114.165] lstrlenA (lpString="\x92\x07") returned 2 [0114.165] lstrlenA (lpString="\x92\x07") returned 2 [0114.165] lstrlenA (lpString="\x92\x07") returned 2 [0114.166] capGetDriverDescriptionA () returned 0x0 [0114.168] GetLastError () returned 0x0 [0114.168] SetLastError (dwErrCode=0x0) [0114.168] OpenThemeData () returned 0x1850000 [0114.168] GetSystemMetrics (nIndex=32) returned 4 [0114.168] GetSystemMetrics (nIndex=33) returned 4 [0114.168] CloseThemeData () returned 0x0 [0114.169] lstrlenA (lpString="\x92\x07") returned 2 [0114.169] lstrlenA (lpString="\x92\x07") returned 2 [0114.169] lstrlenA (lpString="\x92\x07") returned 2 [0114.169] lstrlenA (lpString="\x92\x07") returned 2 [0114.169] lstrlenA (lpString="\x92\x07") returned 2 [0114.169] lstrlenA (lpString="\x92\x07") returned 2 [0114.169] capGetDriverDescriptionA () returned 0x0 [0114.169] GetLastError () returned 0x0 [0114.169] SetLastError (dwErrCode=0x0) [0114.169] OpenThemeData () returned 0x1860000 [0114.170] GetSystemMetrics (nIndex=32) returned 4 [0114.170] GetSystemMetrics (nIndex=33) returned 4 [0114.170] CloseThemeData () returned 0x0 [0114.170] lstrlenA (lpString="\x92\x07") returned 2 [0114.170] lstrlenA (lpString="\x92\x07") returned 2 [0114.170] lstrlenA (lpString="\x92\x07") returned 2 [0114.170] lstrlenA (lpString="\x92\x07") returned 2 [0114.170] lstrlenA (lpString="\x92\x07") returned 2 [0114.170] lstrlenA (lpString="\x92\x07") returned 2 [0114.170] capGetDriverDescriptionA () returned 0x0 [0114.171] GetLastError () returned 0x0 [0114.171] SetLastError (dwErrCode=0x0) [0114.171] OpenThemeData () returned 0x1870000 [0114.171] GetSystemMetrics (nIndex=32) returned 4 [0114.171] GetSystemMetrics (nIndex=33) returned 4 [0114.171] CloseThemeData () returned 0x0 [0114.172] lstrlenA (lpString="\x92\x07") returned 2 [0114.172] lstrlenA (lpString="\x92\x07") returned 2 [0114.172] lstrlenA (lpString="\x92\x07") returned 2 [0114.172] lstrlenA (lpString="\x92\x07") returned 2 [0114.172] lstrlenA (lpString="\x92\x07") returned 2 [0114.172] lstrlenA (lpString="\x92\x07") returned 2 [0114.172] capGetDriverDescriptionA () returned 0x0 [0114.172] GetLastError () returned 0x0 [0114.173] SetLastError (dwErrCode=0x0) [0114.173] OpenThemeData () returned 0x1880000 [0114.173] GetSystemMetrics (nIndex=32) returned 4 [0114.173] GetSystemMetrics (nIndex=33) returned 4 [0114.173] CloseThemeData () returned 0x0 [0114.173] lstrlenA (lpString="\x92\x07") returned 2 [0114.173] lstrlenA (lpString="\x92\x07") returned 2 [0114.173] lstrlenA (lpString="\x92\x07") returned 2 [0114.173] lstrlenA (lpString="\x92\x07") returned 2 [0114.173] lstrlenA (lpString="\x92\x07") returned 2 [0114.173] lstrlenA (lpString="\x92\x07") returned 2 [0114.173] capGetDriverDescriptionA () returned 0x0 [0114.174] GetLastError () returned 0x0 [0114.174] SetLastError (dwErrCode=0x0) [0114.174] OpenThemeData () returned 0x1890000 [0114.370] GetSystemMetrics (nIndex=32) returned 4 [0114.370] GetSystemMetrics (nIndex=33) returned 4 [0114.370] CloseThemeData () returned 0x0 [0114.370] lstrlenA (lpString="\x92\x07") returned 2 [0114.370] lstrlenA (lpString="\x92\x07") returned 2 [0114.370] lstrlenA (lpString="\x92\x07") returned 2 [0114.371] lstrlenA (lpString="\x92\x07") returned 2 [0114.371] lstrlenA (lpString="\x92\x07") returned 2 [0114.371] lstrlenA (lpString="\x92\x07") returned 2 [0114.371] capGetDriverDescriptionA () returned 0x0 [0114.371] GetLastError () returned 0x0 [0114.372] SetLastError (dwErrCode=0x0) [0114.372] OpenThemeData () returned 0x18a0000 [0114.372] GetSystemMetrics (nIndex=32) returned 4 [0114.372] GetSystemMetrics (nIndex=33) returned 4 [0114.372] CloseThemeData () returned 0x0 [0114.372] lstrlenA (lpString="\x92\x07") returned 2 [0114.372] lstrlenA (lpString="\x92\x07") returned 2 [0114.372] lstrlenA (lpString="\x92\x07") returned 2 [0114.372] lstrlenA (lpString="\x92\x07") returned 2 [0114.373] lstrlenA (lpString="\x92\x07") returned 2 [0114.373] lstrlenA (lpString="\x92\x07") returned 2 [0114.373] capGetDriverDescriptionA () returned 0x0 [0114.373] GetLastError () returned 0x0 [0114.373] SetLastError (dwErrCode=0x0) [0114.373] OpenThemeData () returned 0x18b0000 [0114.374] GetSystemMetrics (nIndex=32) returned 4 [0114.374] GetSystemMetrics (nIndex=33) returned 4 [0114.374] CloseThemeData () returned 0x0 [0114.374] lstrlenA (lpString="\x92\x07") returned 2 [0114.374] lstrlenA (lpString="\x92\x07") returned 2 [0114.374] lstrlenA (lpString="\x92\x07") returned 2 [0114.374] lstrlenA (lpString="\x92\x07") returned 2 [0114.374] lstrlenA (lpString="\x92\x07") returned 2 [0114.374] lstrlenA (lpString="\x92\x07") returned 2 [0114.374] capGetDriverDescriptionA () returned 0x0 [0114.375] GetLastError () returned 0x0 [0114.375] SetLastError (dwErrCode=0x0) [0114.375] OpenThemeData () returned 0x18c0000 [0114.376] GetSystemMetrics (nIndex=32) returned 4 [0114.376] GetSystemMetrics (nIndex=33) returned 4 [0114.376] CloseThemeData () returned 0x0 [0114.377] lstrlenA (lpString="\x92\x07") returned 2 [0114.377] lstrlenA (lpString="\x92\x07") returned 2 [0114.377] lstrlenA (lpString="\x92\x07") returned 2 [0114.377] lstrlenA (lpString="\x92\x07") returned 2 [0114.377] lstrlenA (lpString="\x92\x07") returned 2 [0114.377] lstrlenA (lpString="\x92\x07") returned 2 [0114.377] capGetDriverDescriptionA () returned 0x0 [0114.378] GetLastError () returned 0x0 [0114.378] SetLastError (dwErrCode=0x0) [0114.378] OpenThemeData () returned 0x18d0000 [0114.378] GetSystemMetrics (nIndex=32) returned 4 [0114.378] GetSystemMetrics (nIndex=33) returned 4 [0114.378] CloseThemeData () returned 0x0 [0114.379] lstrlenA (lpString="\x92\x07") returned 2 [0114.379] lstrlenA (lpString="\x92\x07") returned 2 [0114.379] lstrlenA (lpString="\x92\x07") returned 2 [0114.379] lstrlenA (lpString="\x92\x07") returned 2 [0114.379] lstrlenA (lpString="\x92\x07") returned 2 [0114.379] lstrlenA (lpString="\x92\x07") returned 2 [0114.379] capGetDriverDescriptionA () returned 0x0 [0114.379] GetLastError () returned 0x0 [0114.379] SetLastError (dwErrCode=0x0) [0114.379] OpenThemeData () returned 0x18e0000 [0114.380] GetSystemMetrics (nIndex=32) returned 4 [0114.380] GetSystemMetrics (nIndex=33) returned 4 [0114.380] CloseThemeData () returned 0x0 [0114.380] lstrlenA (lpString="\x92\x07") returned 2 [0114.380] lstrlenA (lpString="\x92\x07") returned 2 [0114.380] lstrlenA (lpString="\x92\x07") returned 2 [0114.380] lstrlenA (lpString="\x92\x07") returned 2 [0114.380] lstrlenA (lpString="\x92\x07") returned 2 [0114.380] lstrlenA (lpString="\x92\x07") returned 2 [0114.380] capGetDriverDescriptionA () returned 0x0 [0114.381] GetLastError () returned 0x0 [0114.381] SetLastError (dwErrCode=0x0) [0114.381] OpenThemeData () returned 0x18f0000 [0114.382] GetSystemMetrics (nIndex=32) returned 4 [0114.382] GetSystemMetrics (nIndex=33) returned 4 [0114.382] CloseThemeData () returned 0x0 [0114.382] lstrlenA (lpString="\x92\x07") returned 2 [0114.382] lstrlenA (lpString="\x92\x07") returned 2 [0114.382] lstrlenA (lpString="\x92\x07") returned 2 [0114.382] lstrlenA (lpString="\x92\x07") returned 2 [0114.382] lstrlenA (lpString="\x92\x07") returned 2 [0114.382] lstrlenA (lpString="\x92\x07") returned 2 [0114.382] capGetDriverDescriptionA () returned 0x0 [0114.383] GetLastError () returned 0x0 [0114.383] SetLastError (dwErrCode=0x0) [0114.383] OpenThemeData () returned 0x1900000 [0114.383] GetSystemMetrics (nIndex=32) returned 4 [0114.383] GetSystemMetrics (nIndex=33) returned 4 [0114.383] CloseThemeData () returned 0x0 [0114.384] lstrlenA (lpString="\x92\x07") returned 2 [0114.384] lstrlenA (lpString="\x92\x07") returned 2 [0114.384] lstrlenA (lpString="\x92\x07") returned 2 [0114.384] lstrlenA (lpString="\x92\x07") returned 2 [0114.384] lstrlenA (lpString="\x92\x07") returned 2 [0114.384] lstrlenA (lpString="\x92\x07") returned 2 [0114.384] capGetDriverDescriptionA () returned 0x0 [0114.384] GetLastError () returned 0x0 [0114.384] SetLastError (dwErrCode=0x0) [0114.384] OpenThemeData () returned 0x1910000 [0114.385] GetSystemMetrics (nIndex=32) returned 4 [0114.385] GetSystemMetrics (nIndex=33) returned 4 [0114.385] CloseThemeData () returned 0x0 [0114.385] lstrlenA (lpString="\x92\x07") returned 2 [0114.385] lstrlenA (lpString="\x92\x07") returned 2 [0114.385] lstrlenA (lpString="\x92\x07") returned 2 [0114.385] lstrlenA (lpString="\x92\x07") returned 2 [0114.385] lstrlenA (lpString="\x92\x07") returned 2 [0114.385] lstrlenA (lpString="\x92\x07") returned 2 [0114.385] capGetDriverDescriptionA () returned 0x0 [0114.386] GetLastError () returned 0x0 [0114.386] SetLastError (dwErrCode=0x0) [0114.386] OpenThemeData () returned 0x1920000 [0114.386] GetSystemMetrics (nIndex=32) returned 4 [0114.386] GetSystemMetrics (nIndex=33) returned 4 [0114.386] CloseThemeData () returned 0x0 [0114.387] lstrlenA (lpString="\x92\x07") returned 2 [0114.387] lstrlenA (lpString="\x92\x07") returned 2 [0114.387] lstrlenA (lpString="\x92\x07") returned 2 [0114.387] lstrlenA (lpString="\x92\x07") returned 2 [0114.387] lstrlenA (lpString="\x92\x07") returned 2 [0114.387] lstrlenA (lpString="\x92\x07") returned 2 [0114.387] capGetDriverDescriptionA () returned 0x0 [0114.388] GetLastError () returned 0x0 [0114.388] SetLastError (dwErrCode=0x0) [0114.388] OpenThemeData () returned 0x1930000 [0114.388] GetSystemMetrics (nIndex=32) returned 4 [0114.388] GetSystemMetrics (nIndex=33) returned 4 [0114.388] CloseThemeData () returned 0x0 [0114.388] lstrlenA (lpString="\x92\x07") returned 2 [0114.388] lstrlenA (lpString="\x92\x07") returned 2 [0114.388] lstrlenA (lpString="\x92\x07") returned 2 [0114.388] lstrlenA (lpString="\x92\x07") returned 2 [0114.388] lstrlenA (lpString="\x92\x07") returned 2 [0114.389] lstrlenA (lpString="\x92\x07") returned 2 [0114.389] capGetDriverDescriptionA () returned 0x0 [0114.389] GetLastError () returned 0x0 [0114.389] SetLastError (dwErrCode=0x0) [0114.389] OpenThemeData () returned 0x1940000 [0114.390] GetSystemMetrics (nIndex=32) returned 4 [0114.390] GetSystemMetrics (nIndex=33) returned 4 [0114.390] CloseThemeData () returned 0x0 [0114.390] lstrlenA (lpString="\x92\x07") returned 2 [0114.390] lstrlenA (lpString="\x92\x07") returned 2 [0114.390] lstrlenA (lpString="\x92\x07") returned 2 [0114.390] lstrlenA (lpString="\x92\x07") returned 2 [0114.390] lstrlenA (lpString="\x92\x07") returned 2 [0114.390] lstrlenA (lpString="\x92\x07") returned 2 [0114.390] capGetDriverDescriptionA () returned 0x0 [0114.391] GetLastError () returned 0x0 [0114.391] SetLastError (dwErrCode=0x0) [0114.391] OpenThemeData () returned 0x1950000 [0114.391] GetSystemMetrics (nIndex=32) returned 4 [0114.391] GetSystemMetrics (nIndex=33) returned 4 [0114.391] CloseThemeData () returned 0x0 [0114.392] lstrlenA (lpString="\x92\x07") returned 2 [0114.392] lstrlenA (lpString="\x92\x07") returned 2 [0114.392] lstrlenA (lpString="\x92\x07") returned 2 [0114.392] lstrlenA (lpString="\x92\x07") returned 2 [0114.392] lstrlenA (lpString="\x92\x07") returned 2 [0114.392] lstrlenA (lpString="\x92\x07") returned 2 [0114.392] capGetDriverDescriptionA () returned 0x0 [0114.392] GetLastError () returned 0x0 [0114.392] SetLastError (dwErrCode=0x0) [0114.392] OpenThemeData () returned 0x1960000 [0114.393] GetSystemMetrics (nIndex=32) returned 4 [0114.393] GetSystemMetrics (nIndex=33) returned 4 [0114.393] CloseThemeData () returned 0x0 [0114.393] lstrlenA (lpString="\x92\x07") returned 2 [0114.393] lstrlenA (lpString="\x92\x07") returned 2 [0114.393] lstrlenA (lpString="\x92\x07") returned 2 [0114.393] lstrlenA (lpString="\x92\x07") returned 2 [0114.393] lstrlenA (lpString="\x92\x07") returned 2 [0114.393] lstrlenA (lpString="\x92\x07") returned 2 [0114.393] capGetDriverDescriptionA () returned 0x0 [0114.394] GetLastError () returned 0x0 [0114.394] SetLastError (dwErrCode=0x0) [0114.394] OpenThemeData () returned 0x1970000 [0114.395] GetSystemMetrics (nIndex=32) returned 4 [0114.395] GetSystemMetrics (nIndex=33) returned 4 [0114.395] CloseThemeData () returned 0x0 [0114.395] lstrlenA (lpString="\x92\x07") returned 2 [0114.395] lstrlenA (lpString="\x92\x07") returned 2 [0114.395] lstrlenA (lpString="\x92\x07") returned 2 [0114.395] lstrlenA (lpString="\x92\x07") returned 2 [0114.395] lstrlenA (lpString="\x92\x07") returned 2 [0114.395] lstrlenA (lpString="\x92\x07") returned 2 [0114.395] capGetDriverDescriptionA () returned 0x0 [0114.396] GetLastError () returned 0x0 [0114.396] SetLastError (dwErrCode=0x0) [0114.396] OpenThemeData () returned 0x1980000 [0114.396] GetSystemMetrics (nIndex=32) returned 4 [0114.396] GetSystemMetrics (nIndex=33) returned 4 [0114.396] CloseThemeData () returned 0x0 [0114.397] lstrlenA (lpString="\x92\x07") returned 2 [0114.397] lstrlenA (lpString="\x92\x07") returned 2 [0114.397] lstrlenA (lpString="\x92\x07") returned 2 [0114.397] lstrlenA (lpString="\x92\x07") returned 2 [0114.397] lstrlenA (lpString="\x92\x07") returned 2 [0114.397] lstrlenA (lpString="\x92\x07") returned 2 [0114.397] capGetDriverDescriptionA () returned 0x0 [0114.397] GetLastError () returned 0x0 [0114.397] SetLastError (dwErrCode=0x0) [0114.397] OpenThemeData () returned 0x1990000 [0114.398] GetSystemMetrics (nIndex=32) returned 4 [0114.398] GetSystemMetrics (nIndex=33) returned 4 [0114.398] CloseThemeData () returned 0x0 [0114.398] lstrlenA (lpString="\x92\x07") returned 2 [0114.398] lstrlenA (lpString="\x92\x07") returned 2 [0114.398] lstrlenA (lpString="\x92\x07") returned 2 [0114.398] lstrlenA (lpString="\x92\x07") returned 2 [0114.398] lstrlenA (lpString="\x92\x07") returned 2 [0114.398] lstrlenA (lpString="\x92\x07") returned 2 [0114.398] capGetDriverDescriptionA () returned 0x0 [0114.399] GetLastError () returned 0x0 [0114.399] SetLastError (dwErrCode=0x0) [0114.399] OpenThemeData () returned 0x19a0000 [0114.399] GetSystemMetrics (nIndex=32) returned 4 [0114.399] GetSystemMetrics (nIndex=33) returned 4 [0114.399] CloseThemeData () returned 0x0 [0114.400] lstrlenA (lpString="\x92\x07") returned 2 [0114.400] lstrlenA (lpString="\x92\x07") returned 2 [0114.400] lstrlenA (lpString="\x92\x07") returned 2 [0114.400] lstrlenA (lpString="\x92\x07") returned 2 [0114.400] lstrlenA (lpString="\x92\x07") returned 2 [0114.400] lstrlenA (lpString="\x92\x07") returned 2 [0114.400] capGetDriverDescriptionA () returned 0x0 [0114.401] GetLastError () returned 0x0 [0114.401] SetLastError (dwErrCode=0x0) [0114.401] OpenThemeData () returned 0x19b0000 [0114.401] GetSystemMetrics (nIndex=32) returned 4 [0114.401] GetSystemMetrics (nIndex=33) returned 4 [0114.401] CloseThemeData () returned 0x0 [0114.401] lstrlenA (lpString="\x92\x07") returned 2 [0114.401] lstrlenA (lpString="\x92\x07") returned 2 [0114.401] lstrlenA (lpString="\x92\x07") returned 2 [0114.402] lstrlenA (lpString="\x92\x07") returned 2 [0114.402] lstrlenA (lpString="\x92\x07") returned 2 [0114.402] lstrlenA (lpString="\x92\x07") returned 2 [0114.403] capGetDriverDescriptionA () returned 0x0 [0114.404] GetLastError () returned 0x0 [0114.404] SetLastError (dwErrCode=0x0) [0114.404] OpenThemeData () returned 0x19c0000 [0114.404] GetSystemMetrics (nIndex=32) returned 4 [0114.404] GetSystemMetrics (nIndex=33) returned 4 [0114.404] CloseThemeData () returned 0x0 [0114.405] lstrlenA (lpString="\x92\x07") returned 2 [0114.405] lstrlenA (lpString="\x92\x07") returned 2 [0114.405] lstrlenA (lpString="\x92\x07") returned 2 [0114.405] lstrlenA (lpString="\x92\x07") returned 2 [0114.405] lstrlenA (lpString="\x92\x07") returned 2 [0114.405] lstrlenA (lpString="\x92\x07") returned 2 [0114.405] capGetDriverDescriptionA () returned 0x0 [0114.406] GetLastError () returned 0x0 [0114.406] SetLastError (dwErrCode=0x0) [0114.406] OpenThemeData () returned 0x19d0000 [0114.406] GetSystemMetrics (nIndex=32) returned 4 [0114.406] GetSystemMetrics (nIndex=33) returned 4 [0114.406] CloseThemeData () returned 0x0 [0114.406] lstrlenA (lpString="\x92\x07") returned 2 [0114.406] lstrlenA (lpString="\x92\x07") returned 2 [0114.406] lstrlenA (lpString="\x92\x07") returned 2 [0114.406] lstrlenA (lpString="\x92\x07") returned 2 [0114.407] lstrlenA (lpString="\x92\x07") returned 2 [0114.407] lstrlenA (lpString="\x92\x07") returned 2 [0114.407] capGetDriverDescriptionA () returned 0x0 [0114.407] GetLastError () returned 0x0 [0114.407] SetLastError (dwErrCode=0x0) [0114.407] OpenThemeData () returned 0x19e0000 [0114.408] GetSystemMetrics (nIndex=32) returned 4 [0114.408] GetSystemMetrics (nIndex=33) returned 4 [0114.408] CloseThemeData () returned 0x0 [0114.408] lstrlenA (lpString="\x92\x07") returned 2 [0114.408] lstrlenA (lpString="\x92\x07") returned 2 [0114.408] lstrlenA (lpString="\x92\x07") returned 2 [0114.408] lstrlenA (lpString="\x92\x07") returned 2 [0114.408] lstrlenA (lpString="\x92\x07") returned 2 [0114.408] lstrlenA (lpString="\x92\x07") returned 2 [0114.408] capGetDriverDescriptionA () returned 0x0 [0115.207] GetLastError () returned 0x0 [0115.207] SetLastError (dwErrCode=0x0) [0115.207] OpenThemeData () returned 0x19f0000 [0115.207] GetSystemMetrics (nIndex=32) returned 4 [0115.207] GetSystemMetrics (nIndex=33) returned 4 [0115.207] CloseThemeData () returned 0x0 [0115.208] lstrlenA (lpString="\x92\x07") returned 2 [0115.208] lstrlenA (lpString="\x92\x07") returned 2 [0115.208] lstrlenA (lpString="\x92\x07") returned 2 [0115.208] lstrlenA (lpString="\x92\x07") returned 2 [0115.208] lstrlenA (lpString="\x92\x07") returned 2 [0115.208] lstrlenA (lpString="\x92\x07") returned 2 [0115.208] capGetDriverDescriptionA () returned 0x0 [0115.209] GetLastError () returned 0x0 [0115.209] SetLastError (dwErrCode=0x0) [0115.209] OpenThemeData () returned 0x1a00000 [0115.209] GetSystemMetrics (nIndex=32) returned 4 [0115.209] GetSystemMetrics (nIndex=33) returned 4 [0115.209] CloseThemeData () returned 0x0 [0115.210] lstrlenA (lpString="\x92\x07") returned 2 [0115.210] lstrlenA (lpString="\x92\x07") returned 2 [0115.210] lstrlenA (lpString="\x92\x07") returned 2 [0115.210] lstrlenA (lpString="\x92\x07") returned 2 [0115.210] lstrlenA (lpString="\x92\x07") returned 2 [0115.210] lstrlenA (lpString="\x92\x07") returned 2 [0115.210] capGetDriverDescriptionA () returned 0x0 [0115.210] GetLastError () returned 0x0 [0115.210] SetLastError (dwErrCode=0x0) [0115.210] OpenThemeData () returned 0x1a10000 [0115.211] GetSystemMetrics (nIndex=32) returned 4 [0115.211] GetSystemMetrics (nIndex=33) returned 4 [0115.211] CloseThemeData () returned 0x0 [0115.211] lstrlenA (lpString="\x92\x07") returned 2 [0115.211] lstrlenA (lpString="\x92\x07") returned 2 [0115.211] lstrlenA (lpString="\x92\x07") returned 2 [0115.211] lstrlenA (lpString="\x92\x07") returned 2 [0115.211] lstrlenA (lpString="\x92\x07") returned 2 [0115.211] lstrlenA (lpString="\x92\x07") returned 2 [0115.211] capGetDriverDescriptionA () returned 0x0 [0115.212] GetLastError () returned 0x0 [0115.212] SetLastError (dwErrCode=0x0) [0115.212] OpenThemeData () returned 0x1a20000 [0115.213] GetSystemMetrics (nIndex=32) returned 4 [0115.213] GetSystemMetrics (nIndex=33) returned 4 [0115.213] CloseThemeData () returned 0x0 [0115.213] lstrlenA (lpString="\x92\x07") returned 2 [0115.213] lstrlenA (lpString="\x92\x07") returned 2 [0115.213] lstrlenA (lpString="\x92\x07") returned 2 [0115.213] lstrlenA (lpString="\x92\x07") returned 2 [0115.213] lstrlenA (lpString="\x92\x07") returned 2 [0115.213] lstrlenA (lpString="\x92\x07") returned 2 [0115.213] capGetDriverDescriptionA () returned 0x0 [0115.214] GetLastError () returned 0x0 [0115.214] SetLastError (dwErrCode=0x0) [0115.214] OpenThemeData () returned 0x1a30000 [0115.214] GetSystemMetrics (nIndex=32) returned 4 [0115.214] GetSystemMetrics (nIndex=33) returned 4 [0115.214] CloseThemeData () returned 0x0 [0115.215] lstrlenA (lpString="\x92\x07") returned 2 [0115.215] lstrlenA (lpString="\x92\x07") returned 2 [0115.215] lstrlenA (lpString="\x92\x07") returned 2 [0115.215] lstrlenA (lpString="\x92\x07") returned 2 [0115.215] lstrlenA (lpString="\x92\x07") returned 2 [0115.215] lstrlenA (lpString="\x92\x07") returned 2 [0115.215] capGetDriverDescriptionA () returned 0x0 [0115.215] GetLastError () returned 0x0 [0115.215] SetLastError (dwErrCode=0x0) [0115.215] OpenThemeData () returned 0x1a40000 [0115.216] GetSystemMetrics (nIndex=32) returned 4 [0115.216] GetSystemMetrics (nIndex=33) returned 4 [0115.216] CloseThemeData () returned 0x0 [0115.216] lstrlenA (lpString="\x92\x07") returned 2 [0115.216] lstrlenA (lpString="\x92\x07") returned 2 [0115.216] lstrlenA (lpString="\x92\x07") returned 2 [0115.216] lstrlenA (lpString="\x92\x07") returned 2 [0115.216] lstrlenA (lpString="\x92\x07") returned 2 [0115.216] lstrlenA (lpString="\x92\x07") returned 2 [0115.216] capGetDriverDescriptionA () returned 0x0 [0115.217] GetLastError () returned 0x0 [0115.217] SetLastError (dwErrCode=0x0) [0115.217] OpenThemeData () returned 0x1a50000 [0115.218] GetSystemMetrics (nIndex=32) returned 4 [0115.218] GetSystemMetrics (nIndex=33) returned 4 [0115.218] CloseThemeData () returned 0x0 [0115.218] lstrlenA (lpString="\x92\x07") returned 2 [0115.218] lstrlenA (lpString="\x92\x07") returned 2 [0115.218] lstrlenA (lpString="\x92\x07") returned 2 [0115.218] lstrlenA (lpString="\x92\x07") returned 2 [0115.218] lstrlenA (lpString="\x92\x07") returned 2 [0115.218] lstrlenA (lpString="\x92\x07") returned 2 [0115.218] capGetDriverDescriptionA () returned 0x0 [0115.219] GetLastError () returned 0x0 [0115.219] SetLastError (dwErrCode=0x0) [0115.219] OpenThemeData () returned 0x1a60000 [0115.219] GetSystemMetrics (nIndex=32) returned 4 [0115.219] GetSystemMetrics (nIndex=33) returned 4 [0115.219] CloseThemeData () returned 0x0 [0115.220] lstrlenA (lpString="\x92\x07") returned 2 [0115.220] lstrlenA (lpString="\x92\x07") returned 2 [0115.220] lstrlenA (lpString="\x92\x07") returned 2 [0115.220] lstrlenA (lpString="\x92\x07") returned 2 [0115.220] lstrlenA (lpString="\x92\x07") returned 2 [0115.220] lstrlenA (lpString="\x92\x07") returned 2 [0115.220] capGetDriverDescriptionA () returned 0x0 [0115.220] GetLastError () returned 0x0 [0115.220] SetLastError (dwErrCode=0x0) [0115.220] OpenThemeData () returned 0x1a70000 [0115.221] GetSystemMetrics (nIndex=32) returned 4 [0115.221] GetSystemMetrics (nIndex=33) returned 4 [0115.221] CloseThemeData () returned 0x0 [0115.221] lstrlenA (lpString="\x92\x07") returned 2 [0115.221] lstrlenA (lpString="\x92\x07") returned 2 [0115.221] lstrlenA (lpString="\x92\x07") returned 2 [0115.221] lstrlenA (lpString="\x92\x07") returned 2 [0115.221] lstrlenA (lpString="\x92\x07") returned 2 [0115.221] lstrlenA (lpString="\x92\x07") returned 2 [0115.221] capGetDriverDescriptionA () returned 0x0 [0115.222] GetLastError () returned 0x0 [0115.222] SetLastError (dwErrCode=0x0) [0115.222] OpenThemeData () returned 0x1a80000 [0115.224] GetSystemMetrics (nIndex=32) returned 4 [0115.224] GetSystemMetrics (nIndex=33) returned 4 [0115.224] CloseThemeData () returned 0x0 [0115.224] lstrlenA (lpString="\x92\x07") returned 2 [0115.224] lstrlenA (lpString="\x92\x07") returned 2 [0115.224] lstrlenA (lpString="\x92\x07") returned 2 [0115.224] lstrlenA (lpString="\x92\x07") returned 2 [0115.224] lstrlenA (lpString="\x92\x07") returned 2 [0115.224] lstrlenA (lpString="\x92\x07") returned 2 [0115.224] capGetDriverDescriptionA () returned 0x0 [0115.225] GetLastError () returned 0x0 [0115.225] SetLastError (dwErrCode=0x0) [0115.225] OpenThemeData () returned 0x1a90000 [0115.225] GetSystemMetrics (nIndex=32) returned 4 [0115.226] GetSystemMetrics (nIndex=33) returned 4 [0115.226] CloseThemeData () returned 0x0 [0115.226] lstrlenA (lpString="\x92\x07") returned 2 [0115.226] lstrlenA (lpString="\x92\x07") returned 2 [0115.226] lstrlenA (lpString="\x92\x07") returned 2 [0115.226] lstrlenA (lpString="\x92\x07") returned 2 [0115.226] lstrlenA (lpString="\x92\x07") returned 2 [0115.226] lstrlenA (lpString="\x92\x07") returned 2 [0115.226] capGetDriverDescriptionA () returned 0x0 [0115.227] GetLastError () returned 0x0 [0115.227] SetLastError (dwErrCode=0x0) [0115.227] OpenThemeData () returned 0x1aa0000 [0115.227] GetSystemMetrics (nIndex=32) returned 4 [0115.227] GetSystemMetrics (nIndex=33) returned 4 [0115.227] CloseThemeData () returned 0x0 [0115.228] lstrlenA (lpString="\x92\x07") returned 2 [0115.228] lstrlenA (lpString="\x92\x07") returned 2 [0115.228] lstrlenA (lpString="\x92\x07") returned 2 [0115.228] lstrlenA (lpString="\x92\x07") returned 2 [0115.228] lstrlenA (lpString="\x92\x07") returned 2 [0115.228] lstrlenA (lpString="\x92\x07") returned 2 [0115.228] capGetDriverDescriptionA () returned 0x0 [0115.228] GetLastError () returned 0x0 [0115.228] SetLastError (dwErrCode=0x0) [0115.228] OpenThemeData () returned 0x1ab0000 [0115.229] GetSystemMetrics (nIndex=32) returned 4 [0115.229] GetSystemMetrics (nIndex=33) returned 4 [0115.229] CloseThemeData () returned 0x0 [0115.229] lstrlenA (lpString="\x92\x07") returned 2 [0115.229] lstrlenA (lpString="\x92\x07") returned 2 [0115.229] lstrlenA (lpString="\x92\x07") returned 2 [0115.229] lstrlenA (lpString="\x92\x07") returned 2 [0115.229] lstrlenA (lpString="\x92\x07") returned 2 [0115.229] lstrlenA (lpString="\x92\x07") returned 2 [0115.229] capGetDriverDescriptionA () returned 0x0 [0115.230] GetLastError () returned 0x0 [0115.230] SetLastError (dwErrCode=0x0) [0115.230] OpenThemeData () returned 0x1ac0000 [0115.230] GetSystemMetrics (nIndex=32) returned 4 [0115.231] GetSystemMetrics (nIndex=33) returned 4 [0115.231] CloseThemeData () returned 0x0 [0115.231] lstrlenA (lpString="\x92\x07") returned 2 [0115.231] lstrlenA (lpString="\x92\x07") returned 2 [0115.231] lstrlenA (lpString="\x92\x07") returned 2 [0115.231] lstrlenA (lpString="\x92\x07") returned 2 [0115.231] lstrlenA (lpString="\x92\x07") returned 2 [0115.231] lstrlenA (lpString="\x92\x07") returned 2 [0115.231] capGetDriverDescriptionA () returned 0x0 [0115.232] GetLastError () returned 0x0 [0115.232] SetLastError (dwErrCode=0x0) [0115.232] OpenThemeData () returned 0x1ad0000 [0115.232] GetSystemMetrics (nIndex=32) returned 4 [0115.232] GetSystemMetrics (nIndex=33) returned 4 [0115.232] CloseThemeData () returned 0x0 [0115.233] lstrlenA (lpString="\x92\x07") returned 2 [0115.233] lstrlenA (lpString="\x92\x07") returned 2 [0115.233] lstrlenA (lpString="\x92\x07") returned 2 [0115.233] lstrlenA (lpString="\x92\x07") returned 2 [0115.233] lstrlenA (lpString="\x92\x07") returned 2 [0115.233] lstrlenA (lpString="\x92\x07") returned 2 [0115.233] capGetDriverDescriptionA () returned 0x0 [0115.233] GetLastError () returned 0x0 [0115.233] SetLastError (dwErrCode=0x0) [0115.233] OpenThemeData () returned 0x1ae0000 [0115.234] GetSystemMetrics (nIndex=32) returned 4 [0115.234] GetSystemMetrics (nIndex=33) returned 4 [0115.234] CloseThemeData () returned 0x0 [0115.234] lstrlenA (lpString="\x92\x07") returned 2 [0115.234] lstrlenA (lpString="\x92\x07") returned 2 [0115.234] lstrlenA (lpString="\x92\x07") returned 2 [0115.234] lstrlenA (lpString="\x92\x07") returned 2 [0115.234] lstrlenA (lpString="\x92\x07") returned 2 [0115.234] lstrlenA (lpString="\x92\x07") returned 2 [0115.234] capGetDriverDescriptionA () returned 0x0 [0115.235] GetLastError () returned 0x0 [0115.235] SetLastError (dwErrCode=0x0) [0115.235] OpenThemeData () returned 0x1af0000 [0115.236] GetSystemMetrics (nIndex=32) returned 4 [0115.236] GetSystemMetrics (nIndex=33) returned 4 [0115.236] CloseThemeData () returned 0x0 [0115.236] lstrlenA (lpString="\x92\x07") returned 2 [0115.236] lstrlenA (lpString="\x92\x07") returned 2 [0115.236] lstrlenA (lpString="\x92\x07") returned 2 [0115.236] lstrlenA (lpString="\x92\x07") returned 2 [0115.236] lstrlenA (lpString="\x92\x07") returned 2 [0115.236] lstrlenA (lpString="\x92\x07") returned 2 [0115.236] capGetDriverDescriptionA () returned 0x0 [0115.237] GetLastError () returned 0x0 [0115.237] SetLastError (dwErrCode=0x0) [0115.237] OpenThemeData () returned 0x1b00000 [0115.237] GetSystemMetrics (nIndex=32) returned 4 [0115.237] GetSystemMetrics (nIndex=33) returned 4 [0115.237] CloseThemeData () returned 0x0 [0115.238] lstrlenA (lpString="\x92\x07") returned 2 [0115.238] lstrlenA (lpString="\x92\x07") returned 2 [0115.238] lstrlenA (lpString="\x92\x07") returned 2 [0115.238] lstrlenA (lpString="\x92\x07") returned 2 [0115.238] lstrlenA (lpString="\x92\x07") returned 2 [0115.238] lstrlenA (lpString="\x92\x07") returned 2 [0115.238] capGetDriverDescriptionA () returned 0x0 [0115.238] GetLastError () returned 0x0 [0115.238] SetLastError (dwErrCode=0x0) [0115.238] OpenThemeData () returned 0x1b10000 [0115.239] GetSystemMetrics (nIndex=32) returned 4 [0115.239] GetSystemMetrics (nIndex=33) returned 4 [0115.239] CloseThemeData () returned 0x0 [0115.239] lstrlenA (lpString="\x92\x07") returned 2 [0115.239] lstrlenA (lpString="\x92\x07") returned 2 [0115.239] lstrlenA (lpString="\x92\x07") returned 2 [0115.239] lstrlenA (lpString="\x92\x07") returned 2 [0115.239] lstrlenA (lpString="\x92\x07") returned 2 [0115.239] lstrlenA (lpString="\x92\x07") returned 2 [0115.239] capGetDriverDescriptionA () returned 0x0 [0115.240] GetLastError () returned 0x0 [0115.240] SetLastError (dwErrCode=0x0) [0115.240] OpenThemeData () returned 0x1b20000 [0115.241] GetSystemMetrics (nIndex=32) returned 4 [0115.241] GetSystemMetrics (nIndex=33) returned 4 [0115.241] CloseThemeData () returned 0x0 [0115.241] lstrlenA (lpString="\x92\x07") returned 2 [0115.241] lstrlenA (lpString="\x92\x07") returned 2 [0115.241] lstrlenA (lpString="\x92\x07") returned 2 [0115.241] lstrlenA (lpString="\x92\x07") returned 2 [0115.241] lstrlenA (lpString="\x92\x07") returned 2 [0115.241] lstrlenA (lpString="\x92\x07") returned 2 [0115.241] capGetDriverDescriptionA () returned 0x0 [0115.242] GetLastError () returned 0x0 [0115.242] SetLastError (dwErrCode=0x0) [0115.242] OpenThemeData () returned 0x1b30000 [0115.242] GetSystemMetrics (nIndex=32) returned 4 [0115.242] GetSystemMetrics (nIndex=33) returned 4 [0115.242] CloseThemeData () returned 0x0 [0115.242] lstrlenA (lpString="\x92\x07") returned 2 [0115.242] lstrlenA (lpString="\x92\x07") returned 2 [0115.242] lstrlenA (lpString="\x92\x07") returned 2 [0115.242] lstrlenA (lpString="\x92\x07") returned 2 [0115.243] lstrlenA (lpString="\x92\x07") returned 2 [0115.243] lstrlenA (lpString="\x92\x07") returned 2 [0115.243] capGetDriverDescriptionA () returned 0x0 [0115.243] GetLastError () returned 0x0 [0115.243] SetLastError (dwErrCode=0x0) [0115.243] OpenThemeData () returned 0x1b40000 [0115.244] GetSystemMetrics (nIndex=32) returned 4 [0115.244] GetSystemMetrics (nIndex=33) returned 4 [0115.244] CloseThemeData () returned 0x0 [0115.244] lstrlenA (lpString="\x92\x07") returned 2 [0115.244] lstrlenA (lpString="\x92\x07") returned 2 [0115.244] lstrlenA (lpString="\x92\x07") returned 2 [0115.244] lstrlenA (lpString="\x92\x07") returned 2 [0115.244] lstrlenA (lpString="\x92\x07") returned 2 [0115.244] lstrlenA (lpString="\x92\x07") returned 2 [0115.244] capGetDriverDescriptionA () returned 0x0 [0115.245] GetLastError () returned 0x0 [0115.245] SetLastError (dwErrCode=0x0) [0115.245] OpenThemeData () returned 0x1b50000 [0115.245] GetSystemMetrics (nIndex=32) returned 4 [0115.245] GetSystemMetrics (nIndex=33) returned 4 [0115.245] CloseThemeData () returned 0x0 [0115.246] lstrlenA (lpString="\x92\x07") returned 2 [0115.246] lstrlenA (lpString="\x92\x07") returned 2 [0115.246] lstrlenA (lpString="\x92\x07") returned 2 [0115.246] lstrlenA (lpString="\x92\x07") returned 2 [0115.246] lstrlenA (lpString="\x92\x07") returned 2 [0115.246] lstrlenA (lpString="\x92\x07") returned 2 [0115.246] capGetDriverDescriptionA () returned 0x0 [0115.246] GetLastError () returned 0x0 [0115.246] SetLastError (dwErrCode=0x0) [0115.246] OpenThemeData () returned 0x1b60000 [0115.247] GetSystemMetrics (nIndex=32) returned 4 [0115.247] GetSystemMetrics (nIndex=33) returned 4 [0115.247] CloseThemeData () returned 0x0 [0115.247] lstrlenA (lpString="\x92\x07") returned 2 [0115.247] lstrlenA (lpString="\x92\x07") returned 2 [0115.247] lstrlenA (lpString="\x92\x07") returned 2 [0115.247] lstrlenA (lpString="\x92\x07") returned 2 [0115.247] lstrlenA (lpString="\x92\x07") returned 2 [0115.247] lstrlenA (lpString="\x92\x07") returned 2 [0115.247] capGetDriverDescriptionA () returned 0x0 [0115.248] GetLastError () returned 0x0 [0115.248] SetLastError (dwErrCode=0x0) [0115.248] OpenThemeData () returned 0x1b70000 [0115.249] GetSystemMetrics (nIndex=32) returned 4 [0115.249] GetSystemMetrics (nIndex=33) returned 4 [0115.249] CloseThemeData () returned 0x0 [0115.249] lstrlenA (lpString="\x92\x07") returned 2 [0115.249] lstrlenA (lpString="\x92\x07") returned 2 [0115.249] lstrlenA (lpString="\x92\x07") returned 2 [0115.249] lstrlenA (lpString="\x92\x07") returned 2 [0115.249] lstrlenA (lpString="\x92\x07") returned 2 [0115.249] lstrlenA (lpString="\x92\x07") returned 2 [0115.249] capGetDriverDescriptionA () returned 0x0 [0115.250] GetLastError () returned 0x0 [0115.250] SetLastError (dwErrCode=0x0) [0115.250] OpenThemeData () returned 0x1b80000 [0115.250] GetSystemMetrics (nIndex=32) returned 4 [0115.250] GetSystemMetrics (nIndex=33) returned 4 [0115.250] CloseThemeData () returned 0x0 [0115.250] lstrlenA (lpString="\x92\x07") returned 2 [0115.251] lstrlenA (lpString="\x92\x07") returned 2 [0115.251] lstrlenA (lpString="\x92\x07") returned 2 [0115.251] lstrlenA (lpString="\x92\x07") returned 2 [0115.251] lstrlenA (lpString="\x92\x07") returned 2 [0115.251] lstrlenA (lpString="\x92\x07") returned 2 [0115.251] capGetDriverDescriptionA () returned 0x0 [0115.251] GetLastError () returned 0x0 [0115.251] SetLastError (dwErrCode=0x0) [0115.251] OpenThemeData () returned 0x1b90000 [0115.252] GetSystemMetrics (nIndex=32) returned 4 [0115.252] GetSystemMetrics (nIndex=33) returned 4 [0115.252] CloseThemeData () returned 0x0 [0115.252] lstrlenA (lpString="\x92\x07") returned 2 [0115.252] lstrlenA (lpString="\x92\x07") returned 2 [0115.962] lstrlenA (lpString="\x92\x07") returned 2 [0115.962] lstrlenA (lpString="\x92\x07") returned 2 [0115.962] lstrlenA (lpString="\x92\x07") returned 2 [0115.962] lstrlenA (lpString="\x92\x07") returned 2 [0115.962] capGetDriverDescriptionA () returned 0x0 [0115.963] GetLastError () returned 0x0 [0115.963] SetLastError (dwErrCode=0x0) [0115.963] OpenThemeData () returned 0x1ba0000 [0115.963] GetSystemMetrics (nIndex=32) returned 4 [0115.963] GetSystemMetrics (nIndex=33) returned 4 [0115.963] CloseThemeData () returned 0x0 [0115.963] lstrlenA (lpString="\x92\x07") returned 2 [0115.964] lstrlenA (lpString="\x92\x07") returned 2 [0115.964] lstrlenA (lpString="\x92\x07") returned 2 [0115.964] lstrlenA (lpString="\x92\x07") returned 2 [0115.964] lstrlenA (lpString="\x92\x07") returned 2 [0115.964] lstrlenA (lpString="\x92\x07") returned 2 [0115.964] capGetDriverDescriptionA () returned 0x0 [0115.964] GetLastError () returned 0x0 [0115.964] SetLastError (dwErrCode=0x0) [0115.964] OpenThemeData () returned 0x1bb0000 [0115.965] GetSystemMetrics (nIndex=32) returned 4 [0115.965] GetSystemMetrics (nIndex=33) returned 4 [0115.965] CloseThemeData () returned 0x0 [0115.965] lstrlenA (lpString="\x92\x07") returned 2 [0115.965] lstrlenA (lpString="\x92\x07") returned 2 [0115.965] lstrlenA (lpString="\x92\x07") returned 2 [0115.965] lstrlenA (lpString="\x92\x07") returned 2 [0115.965] lstrlenA (lpString="\x92\x07") returned 2 [0115.965] lstrlenA (lpString="\x92\x07") returned 2 [0115.965] capGetDriverDescriptionA () returned 0x0 [0115.966] GetLastError () returned 0x0 [0115.966] SetLastError (dwErrCode=0x0) [0115.966] OpenThemeData () returned 0x1bc0000 [0115.966] GetSystemMetrics (nIndex=32) returned 4 [0115.966] GetSystemMetrics (nIndex=33) returned 4 [0115.966] CloseThemeData () returned 0x0 [0115.967] lstrlenA (lpString="\x92\x07") returned 2 [0115.967] lstrlenA (lpString="\x92\x07") returned 2 [0115.967] lstrlenA (lpString="\x92\x07") returned 2 [0115.967] lstrlenA (lpString="\x92\x07") returned 2 [0115.967] lstrlenA (lpString="\x92\x07") returned 2 [0115.967] lstrlenA (lpString="\x92\x07") returned 2 [0115.967] capGetDriverDescriptionA () returned 0x0 [0115.968] GetLastError () returned 0x0 [0115.968] SetLastError (dwErrCode=0x0) [0115.968] OpenThemeData () returned 0x1bd0000 [0115.968] GetSystemMetrics (nIndex=32) returned 4 [0115.968] GetSystemMetrics (nIndex=33) returned 4 [0115.968] CloseThemeData () returned 0x0 [0115.968] lstrlenA (lpString="\x92\x07") returned 2 [0115.968] lstrlenA (lpString="\x92\x07") returned 2 [0115.969] lstrlenA (lpString="\x92\x07") returned 2 [0115.969] lstrlenA (lpString="\x92\x07") returned 2 [0115.969] lstrlenA (lpString="\x92\x07") returned 2 [0115.969] lstrlenA (lpString="\x92\x07") returned 2 [0115.969] capGetDriverDescriptionA () returned 0x0 [0115.969] GetLastError () returned 0x0 [0115.969] SetLastError (dwErrCode=0x0) [0115.969] OpenThemeData () returned 0x1be0000 [0115.970] GetSystemMetrics (nIndex=32) returned 4 [0115.970] GetSystemMetrics (nIndex=33) returned 4 [0115.970] CloseThemeData () returned 0x0 [0115.970] lstrlenA (lpString="\x92\x07") returned 2 [0115.970] lstrlenA (lpString="\x92\x07") returned 2 [0115.970] lstrlenA (lpString="\x92\x07") returned 2 [0115.970] lstrlenA (lpString="\x92\x07") returned 2 [0115.970] lstrlenA (lpString="\x92\x07") returned 2 [0115.970] lstrlenA (lpString="\x92\x07") returned 2 [0115.970] capGetDriverDescriptionA () returned 0x0 [0115.971] GetLastError () returned 0x0 [0115.971] SetLastError (dwErrCode=0x0) [0115.971] OpenThemeData () returned 0x1bf0000 [0115.972] GetSystemMetrics (nIndex=32) returned 4 [0115.972] GetSystemMetrics (nIndex=33) returned 4 [0115.972] CloseThemeData () returned 0x0 [0115.972] lstrlenA (lpString="\x92\x07") returned 2 [0115.972] lstrlenA (lpString="\x92\x07") returned 2 [0115.972] lstrlenA (lpString="\x92\x07") returned 2 [0115.972] lstrlenA (lpString="\x92\x07") returned 2 [0115.972] lstrlenA (lpString="\x92\x07") returned 2 [0115.972] lstrlenA (lpString="\x92\x07") returned 2 [0115.972] capGetDriverDescriptionA () returned 0x0 [0115.973] GetLastError () returned 0x0 [0115.973] SetLastError (dwErrCode=0x0) [0115.973] OpenThemeData () returned 0x1c00000 [0115.973] GetSystemMetrics (nIndex=32) returned 4 [0115.973] GetSystemMetrics (nIndex=33) returned 4 [0115.973] CloseThemeData () returned 0x0 [0115.974] lstrlenA (lpString="\x92\x07") returned 2 [0115.974] lstrlenA (lpString="\x92\x07") returned 2 [0115.974] lstrlenA (lpString="\x92\x07") returned 2 [0115.974] lstrlenA (lpString="\x92\x07") returned 2 [0115.974] lstrlenA (lpString="\x92\x07") returned 2 [0115.974] lstrlenA (lpString="\x92\x07") returned 2 [0115.974] capGetDriverDescriptionA () returned 0x0 [0115.974] GetLastError () returned 0x0 [0115.974] SetLastError (dwErrCode=0x0) [0115.974] OpenThemeData () returned 0x1c10000 [0115.975] GetSystemMetrics (nIndex=32) returned 4 [0115.975] GetSystemMetrics (nIndex=33) returned 4 [0115.975] CloseThemeData () returned 0x0 [0115.975] lstrlenA (lpString="\x92\x07") returned 2 [0115.975] lstrlenA (lpString="\x92\x07") returned 2 [0115.975] lstrlenA (lpString="\x92\x07") returned 2 [0115.975] lstrlenA (lpString="\x92\x07") returned 2 [0115.975] lstrlenA (lpString="\x92\x07") returned 2 [0115.975] lstrlenA (lpString="\x92\x07") returned 2 [0115.975] capGetDriverDescriptionA () returned 0x0 [0115.976] GetLastError () returned 0x0 [0115.976] SetLastError (dwErrCode=0x0) [0115.976] OpenThemeData () returned 0x1c20000 [0115.977] GetSystemMetrics (nIndex=32) returned 4 [0115.977] GetSystemMetrics (nIndex=33) returned 4 [0115.977] CloseThemeData () returned 0x0 [0115.977] lstrlenA (lpString="\x92\x07") returned 2 [0115.977] lstrlenA (lpString="\x92\x07") returned 2 [0115.977] lstrlenA (lpString="\x92\x07") returned 2 [0115.977] lstrlenA (lpString="\x92\x07") returned 2 [0115.977] lstrlenA (lpString="\x92\x07") returned 2 [0115.977] lstrlenA (lpString="\x92\x07") returned 2 [0115.977] capGetDriverDescriptionA () returned 0x0 [0115.978] GetLastError () returned 0x0 [0115.978] SetLastError (dwErrCode=0x0) [0115.978] OpenThemeData () returned 0x1c30000 [0115.978] GetSystemMetrics (nIndex=32) returned 4 [0115.978] GetSystemMetrics (nIndex=33) returned 4 [0115.978] CloseThemeData () returned 0x0 [0115.979] lstrlenA (lpString="\x92\x07") returned 2 [0115.979] lstrlenA (lpString="\x92\x07") returned 2 [0115.979] lstrlenA (lpString="\x92\x07") returned 2 [0115.979] lstrlenA (lpString="\x92\x07") returned 2 [0115.979] lstrlenA (lpString="\x92\x07") returned 2 [0115.979] lstrlenA (lpString="\x92\x07") returned 2 [0115.979] capGetDriverDescriptionA () returned 0x0 [0115.979] GetLastError () returned 0x0 [0115.979] SetLastError (dwErrCode=0x0) [0115.979] OpenThemeData () returned 0x1c40000 [0115.980] GetSystemMetrics (nIndex=32) returned 4 [0115.980] GetSystemMetrics (nIndex=33) returned 4 [0115.980] CloseThemeData () returned 0x0 [0115.980] lstrlenA (lpString="\x92\x07") returned 2 [0115.980] lstrlenA (lpString="\x92\x07") returned 2 [0115.980] lstrlenA (lpString="\x92\x07") returned 2 [0115.980] lstrlenA (lpString="\x92\x07") returned 2 [0115.980] lstrlenA (lpString="\x92\x07") returned 2 [0115.980] lstrlenA (lpString="\x92\x07") returned 2 [0115.980] capGetDriverDescriptionA () returned 0x0 [0115.981] GetLastError () returned 0x0 [0115.981] SetLastError (dwErrCode=0x0) [0115.981] OpenThemeData () returned 0x1c50000 [0115.981] GetSystemMetrics (nIndex=32) returned 4 [0115.981] GetSystemMetrics (nIndex=33) returned 4 [0115.981] CloseThemeData () returned 0x0 [0115.982] lstrlenA (lpString="\x92\x07") returned 2 [0115.982] lstrlenA (lpString="\x92\x07") returned 2 [0115.982] lstrlenA (lpString="\x92\x07") returned 2 [0115.982] lstrlenA (lpString="\x92\x07") returned 2 [0115.982] lstrlenA (lpString="\x92\x07") returned 2 [0115.982] lstrlenA (lpString="\x92\x07") returned 2 [0115.982] capGetDriverDescriptionA () returned 0x0 [0115.983] GetLastError () returned 0x0 [0115.983] SetLastError (dwErrCode=0x0) [0115.983] OpenThemeData () returned 0x1c60000 [0115.983] GetSystemMetrics (nIndex=32) returned 4 [0115.983] GetSystemMetrics (nIndex=33) returned 4 [0115.983] CloseThemeData () returned 0x0 [0115.983] lstrlenA (lpString="\x92\x07") returned 2 [0115.983] lstrlenA (lpString="\x92\x07") returned 2 [0115.983] lstrlenA (lpString="\x92\x07") returned 2 [0115.984] lstrlenA (lpString="\x92\x07") returned 2 [0115.984] lstrlenA (lpString="\x92\x07") returned 2 [0115.984] lstrlenA (lpString="\x92\x07") returned 2 [0115.984] capGetDriverDescriptionA () returned 0x0 [0115.984] GetLastError () returned 0x0 [0115.984] SetLastError (dwErrCode=0x0) [0115.984] OpenThemeData () returned 0x1c70000 [0115.985] GetSystemMetrics (nIndex=32) returned 4 [0115.985] GetSystemMetrics (nIndex=33) returned 4 [0115.985] CloseThemeData () returned 0x0 [0115.985] lstrlenA (lpString="\x92\x07") returned 2 [0115.985] lstrlenA (lpString="\x92\x07") returned 2 [0115.985] lstrlenA (lpString="\x92\x07") returned 2 [0115.985] lstrlenA (lpString="\x92\x07") returned 2 [0115.985] lstrlenA (lpString="\x92\x07") returned 2 [0115.985] lstrlenA (lpString="\x92\x07") returned 2 [0115.985] capGetDriverDescriptionA () returned 0x0 [0115.986] GetLastError () returned 0x0 [0115.986] SetLastError (dwErrCode=0x0) [0115.986] OpenThemeData () returned 0x1c80000 [0115.986] GetSystemMetrics (nIndex=32) returned 4 [0115.986] GetSystemMetrics (nIndex=33) returned 4 [0115.986] CloseThemeData () returned 0x0 [0115.987] lstrlenA (lpString="\x92\x07") returned 2 [0115.987] lstrlenA (lpString="\x92\x07") returned 2 [0115.987] lstrlenA (lpString="\x92\x07") returned 2 [0115.987] capGetDriverDescriptionA () returned 0x0 [0115.987] GetLastError () returned 0x0 [0115.987] SetLastError (dwErrCode=0x0) [0115.987] OpenThemeData () returned 0x1c90000 [0115.988] GetSystemMetrics (nIndex=32) returned 4 [0115.988] GetSystemMetrics (nIndex=33) returned 4 [0115.988] CloseThemeData () returned 0x0 [0115.988] capGetDriverDescriptionA () returned 0x0 [0115.989] GetLastError () returned 0x0 [0115.989] SetLastError (dwErrCode=0x0) [0115.989] OpenThemeData () returned 0x1ca0000 [0115.989] GetSystemMetrics (nIndex=32) returned 4 [0115.989] GetSystemMetrics (nIndex=33) returned 4 [0115.989] CloseThemeData () returned 0x0 [0115.990] capGetDriverDescriptionA () returned 0x0 [0115.990] GetLastError () returned 0x0 [0115.990] SetLastError (dwErrCode=0x0) [0115.990] OpenThemeData () returned 0x1cb0000 [0115.991] GetSystemMetrics (nIndex=32) returned 4 [0115.991] GetSystemMetrics (nIndex=33) returned 4 [0115.991] CloseThemeData () returned 0x0 [0115.991] capGetDriverDescriptionA () returned 0x0 [0115.992] GetLastError () returned 0x0 [0115.992] SetLastError (dwErrCode=0x0) [0115.992] OpenThemeData () returned 0x1cc0000 [0115.992] GetSystemMetrics (nIndex=32) returned 4 [0115.992] GetSystemMetrics (nIndex=33) returned 4 [0115.992] CloseThemeData () returned 0x0 [0115.993] capGetDriverDescriptionA () returned 0x0 [0115.993] GetLastError () returned 0x0 [0115.993] SetLastError (dwErrCode=0x0) [0115.993] OpenThemeData () returned 0x1cd0000 [0115.994] GetSystemMetrics (nIndex=32) returned 4 [0115.994] GetSystemMetrics (nIndex=33) returned 4 [0115.994] CloseThemeData () returned 0x0 [0115.994] capGetDriverDescriptionA () returned 0x0 [0115.995] GetLastError () returned 0x0 [0115.995] SetLastError (dwErrCode=0x0) [0115.995] OpenThemeData () returned 0x1ce0000 [0115.995] GetSystemMetrics (nIndex=32) returned 4 [0115.995] GetSystemMetrics (nIndex=33) returned 4 [0115.995] CloseThemeData () returned 0x0 [0115.996] capGetDriverDescriptionA () returned 0x0 [0115.996] GetLastError () returned 0x0 [0115.996] SetLastError (dwErrCode=0x0) [0115.996] OpenThemeData () returned 0x1cf0000 [0115.997] GetSystemMetrics (nIndex=32) returned 4 [0115.997] GetSystemMetrics (nIndex=33) returned 4 [0115.997] CloseThemeData () returned 0x0 [0115.997] capGetDriverDescriptionA () returned 0x0 [0115.998] GetLastError () returned 0x0 [0115.998] SetLastError (dwErrCode=0x0) [0115.998] OpenThemeData () returned 0x1d00000 [0115.998] GetSystemMetrics (nIndex=32) returned 4 [0115.998] GetSystemMetrics (nIndex=33) returned 4 [0115.998] CloseThemeData () returned 0x0 [0115.998] capGetDriverDescriptionA () returned 0x0 [0115.999] GetLastError () returned 0x0 [0115.999] SetLastError (dwErrCode=0x0) [0115.999] OpenThemeData () returned 0x1d10000 [0116.000] GetSystemMetrics (nIndex=32) returned 4 [0116.000] GetSystemMetrics (nIndex=33) returned 4 [0116.000] CloseThemeData () returned 0x0 [0116.000] capGetDriverDescriptionA () returned 0x0 [0116.000] GetLastError () returned 0x0 [0116.001] SetLastError (dwErrCode=0x0) [0116.001] OpenThemeData () returned 0x1d20000 [0116.001] GetSystemMetrics (nIndex=32) returned 4 [0116.001] GetSystemMetrics (nIndex=33) returned 4 [0116.001] CloseThemeData () returned 0x0 [0116.001] capGetDriverDescriptionA () returned 0x0 [0116.002] GetLastError () returned 0x0 [0116.002] SetLastError (dwErrCode=0x0) [0116.002] OpenThemeData () returned 0x1d30000 [0116.383] GetSystemMetrics (nIndex=32) returned 4 [0116.383] GetSystemMetrics (nIndex=33) returned 4 [0116.383] CloseThemeData () returned 0x0 [0116.383] capGetDriverDescriptionA () returned 0x0 [0116.385] GetLastError () returned 0x0 [0116.385] SetLastError (dwErrCode=0x0) [0116.385] OpenThemeData () returned 0x1d40000 [0116.385] GetSystemMetrics (nIndex=32) returned 4 [0116.385] GetSystemMetrics (nIndex=33) returned 4 [0116.385] CloseThemeData () returned 0x0 [0116.386] capGetDriverDescriptionA () returned 0x0 [0116.386] GetLastError () returned 0x0 [0116.386] SetLastError (dwErrCode=0x0) [0116.386] OpenThemeData () returned 0x1d50000 [0116.387] GetSystemMetrics (nIndex=32) returned 4 [0116.387] GetSystemMetrics (nIndex=33) returned 4 [0116.387] CloseThemeData () returned 0x0 [0116.387] capGetDriverDescriptionA () returned 0x0 [0116.388] GetLastError () returned 0x0 [0116.388] SetLastError (dwErrCode=0x0) [0116.388] OpenThemeData () returned 0x1d60000 [0116.388] GetSystemMetrics (nIndex=32) returned 4 [0116.388] GetSystemMetrics (nIndex=33) returned 4 [0116.388] CloseThemeData () returned 0x0 [0116.389] capGetDriverDescriptionA () returned 0x0 [0116.389] GetLastError () returned 0x0 [0116.389] SetLastError (dwErrCode=0x0) [0116.389] OpenThemeData () returned 0x1d70000 [0116.390] GetSystemMetrics (nIndex=32) returned 4 [0116.390] GetSystemMetrics (nIndex=33) returned 4 [0116.390] CloseThemeData () returned 0x0 [0116.390] capGetDriverDescriptionA () returned 0x0 [0116.391] GetLastError () returned 0x0 [0116.391] SetLastError (dwErrCode=0x0) [0116.391] OpenThemeData () returned 0x1d80000 [0116.391] GetSystemMetrics (nIndex=32) returned 4 [0116.391] GetSystemMetrics (nIndex=33) returned 4 [0116.391] CloseThemeData () returned 0x0 [0116.391] capGetDriverDescriptionA () returned 0x0 [0116.392] GetLastError () returned 0x0 [0116.392] SetLastError (dwErrCode=0x0) [0116.392] OpenThemeData () returned 0x1d90000 [0116.393] GetSystemMetrics (nIndex=32) returned 4 [0116.393] GetSystemMetrics (nIndex=33) returned 4 [0116.393] CloseThemeData () returned 0x0 [0116.393] capGetDriverDescriptionA () returned 0x0 [0116.394] GetLastError () returned 0x0 [0116.394] SetLastError (dwErrCode=0x0) [0116.394] OpenThemeData () returned 0x1da0000 [0116.394] GetSystemMetrics (nIndex=32) returned 4 [0116.394] GetSystemMetrics (nIndex=33) returned 4 [0116.394] CloseThemeData () returned 0x0 [0116.394] capGetDriverDescriptionA () returned 0x0 [0116.395] GetLastError () returned 0x0 [0116.395] SetLastError (dwErrCode=0x0) [0116.395] OpenThemeData () returned 0x1db0000 [0116.396] GetSystemMetrics (nIndex=32) returned 4 [0116.396] GetSystemMetrics (nIndex=33) returned 4 [0116.396] CloseThemeData () returned 0x0 [0116.396] capGetDriverDescriptionA () returned 0x0 [0116.397] GetLastError () returned 0x0 [0116.397] SetLastError (dwErrCode=0x0) [0116.397] OpenThemeData () returned 0x1dc0000 [0116.397] GetSystemMetrics (nIndex=32) returned 4 [0116.397] GetSystemMetrics (nIndex=33) returned 4 [0116.397] CloseThemeData () returned 0x0 [0116.399] capGetDriverDescriptionA () returned 0x0 [0116.399] GetLastError () returned 0x0 [0116.399] SetLastError (dwErrCode=0x0) [0116.399] OpenThemeData () returned 0x1dd0000 [0116.400] GetSystemMetrics (nIndex=32) returned 4 [0116.400] GetSystemMetrics (nIndex=33) returned 4 [0116.400] CloseThemeData () returned 0x0 [0116.400] capGetDriverDescriptionA () returned 0x0 [0116.401] GetLastError () returned 0x0 [0116.401] SetLastError (dwErrCode=0x0) [0116.401] OpenThemeData () returned 0x1de0000 [0116.401] GetSystemMetrics (nIndex=32) returned 4 [0116.401] GetSystemMetrics (nIndex=33) returned 4 [0116.401] CloseThemeData () returned 0x0 [0116.402] capGetDriverDescriptionA () returned 0x0 [0116.402] GetLastError () returned 0x0 [0116.402] SetLastError (dwErrCode=0x0) [0116.402] OpenThemeData () returned 0x1df0000 [0116.404] GetSystemMetrics (nIndex=32) returned 4 [0116.404] GetSystemMetrics (nIndex=33) returned 4 [0116.404] CloseThemeData () returned 0x0 [0116.404] capGetDriverDescriptionA () returned 0x0 [0116.405] GetLastError () returned 0x0 [0116.405] SetLastError (dwErrCode=0x0) [0116.405] OpenThemeData () returned 0x1e00000 [0116.405] GetSystemMetrics (nIndex=32) returned 4 [0116.406] GetSystemMetrics (nIndex=33) returned 4 [0116.406] CloseThemeData () returned 0x0 [0116.406] capGetDriverDescriptionA () returned 0x0 [0116.406] GetLastError () returned 0x0 [0116.406] SetLastError (dwErrCode=0x0) [0116.406] OpenThemeData () returned 0x1e10000 [0116.407] GetSystemMetrics (nIndex=32) returned 4 [0116.407] GetSystemMetrics (nIndex=33) returned 4 [0116.407] CloseThemeData () returned 0x0 [0116.407] capGetDriverDescriptionA () returned 0x0 [0116.408] GetLastError () returned 0x0 [0116.408] SetLastError (dwErrCode=0x0) [0116.408] OpenThemeData () returned 0x1e20000 [0116.408] GetSystemMetrics (nIndex=32) returned 4 [0116.408] GetSystemMetrics (nIndex=33) returned 4 [0116.408] CloseThemeData () returned 0x0 [0116.409] capGetDriverDescriptionA () returned 0x0 [0116.410] GetLastError () returned 0x0 [0116.410] SetLastError (dwErrCode=0x0) [0116.410] OpenThemeData () returned 0x1e30000 [0116.410] GetSystemMetrics (nIndex=32) returned 4 [0116.410] GetSystemMetrics (nIndex=33) returned 4 [0116.410] CloseThemeData () returned 0x0 [0116.410] capGetDriverDescriptionA () returned 0x0 [0116.411] GetLastError () returned 0x0 [0116.411] SetLastError (dwErrCode=0x0) [0116.411] OpenThemeData () returned 0x1e40000 [0116.412] GetSystemMetrics (nIndex=32) returned 4 [0116.412] GetSystemMetrics (nIndex=33) returned 4 [0116.412] CloseThemeData () returned 0x0 [0116.412] capGetDriverDescriptionA () returned 0x0 [0116.412] GetLastError () returned 0x0 [0116.413] SetLastError (dwErrCode=0x0) [0116.413] OpenThemeData () returned 0x1e50000 [0116.413] GetSystemMetrics (nIndex=32) returned 4 [0116.413] GetSystemMetrics (nIndex=33) returned 4 [0116.413] CloseThemeData () returned 0x0 [0116.413] capGetDriverDescriptionA () returned 0x0 [0116.414] GetLastError () returned 0x0 [0116.414] SetLastError (dwErrCode=0x0) [0116.414] OpenThemeData () returned 0x1e60000 [0116.414] GetSystemMetrics (nIndex=32) returned 4 [0116.414] GetSystemMetrics (nIndex=33) returned 4 [0116.414] CloseThemeData () returned 0x0 [0116.415] capGetDriverDescriptionA () returned 0x0 [0116.415] GetLastError () returned 0x0 [0116.415] SetLastError (dwErrCode=0x0) [0116.415] OpenThemeData () returned 0x1e70000 [0116.416] GetSystemMetrics (nIndex=32) returned 4 [0116.416] GetSystemMetrics (nIndex=33) returned 4 [0116.416] CloseThemeData () returned 0x0 [0116.416] capGetDriverDescriptionA () returned 0x0 [0116.417] GetLastError () returned 0x0 [0116.417] SetLastError (dwErrCode=0x0) [0116.417] OpenThemeData () returned 0x1e80000 [0116.417] GetSystemMetrics (nIndex=32) returned 4 [0116.417] GetSystemMetrics (nIndex=33) returned 4 [0116.417] CloseThemeData () returned 0x0 [0116.418] capGetDriverDescriptionA () returned 0x0 [0116.418] GetLastError () returned 0x0 [0116.418] SetLastError (dwErrCode=0x0) [0116.418] OpenThemeData () returned 0x1e90000 [0116.419] GetSystemMetrics (nIndex=32) returned 4 [0116.419] GetSystemMetrics (nIndex=33) returned 4 [0116.419] CloseThemeData () returned 0x0 [0116.419] capGetDriverDescriptionA () returned 0x0 [0116.420] GetLastError () returned 0x0 [0116.420] SetLastError (dwErrCode=0x0) [0116.420] OpenThemeData () returned 0x1ea0000 [0116.420] GetSystemMetrics (nIndex=32) returned 4 [0116.420] GetSystemMetrics (nIndex=33) returned 4 [0116.420] CloseThemeData () returned 0x0 [0116.421] capGetDriverDescriptionA () returned 0x0 [0116.421] GetLastError () returned 0x0 [0116.421] SetLastError (dwErrCode=0x0) [0116.421] OpenThemeData () returned 0x1eb0000 [0116.422] GetSystemMetrics (nIndex=32) returned 4 [0116.422] GetSystemMetrics (nIndex=33) returned 4 [0116.422] CloseThemeData () returned 0x0 [0116.422] capGetDriverDescriptionA () returned 0x0 [0116.422] GetLastError () returned 0x0 [0116.423] SetLastError (dwErrCode=0x0) [0116.423] OpenThemeData () returned 0x1ec0000 [0116.423] GetSystemMetrics (nIndex=32) returned 4 [0116.423] GetSystemMetrics (nIndex=33) returned 4 [0116.423] CloseThemeData () returned 0x0 [0116.423] capGetDriverDescriptionA () returned 0x0 [0116.424] GetLastError () returned 0x0 [0116.424] SetLastError (dwErrCode=0x0) [0116.424] OpenThemeData () returned 0x1ed0000 [0117.020] GetSystemMetrics (nIndex=32) returned 4 [0117.020] GetSystemMetrics (nIndex=33) returned 4 [0117.020] CloseThemeData () returned 0x0 [0117.021] capGetDriverDescriptionA () returned 0x0 [0117.022] GetLastError () returned 0x0 [0117.022] SetLastError (dwErrCode=0x0) [0117.022] OpenThemeData () returned 0x1ee0000 [0117.022] GetSystemMetrics (nIndex=32) returned 4 [0117.022] GetSystemMetrics (nIndex=33) returned 4 [0117.022] CloseThemeData () returned 0x0 [0117.023] capGetDriverDescriptionA () returned 0x0 [0117.023] GetLastError () returned 0x0 [0117.023] SetLastError (dwErrCode=0x0) [0117.023] OpenThemeData () returned 0x1ef0000 [0117.024] GetSystemMetrics (nIndex=32) returned 4 [0117.024] GetSystemMetrics (nIndex=33) returned 4 [0117.024] CloseThemeData () returned 0x0 [0117.024] capGetDriverDescriptionA () returned 0x0 [0117.025] GetLastError () returned 0x0 [0117.025] SetLastError (dwErrCode=0x0) [0117.025] OpenThemeData () returned 0x1f00000 [0117.025] GetSystemMetrics (nIndex=32) returned 4 [0117.025] GetSystemMetrics (nIndex=33) returned 4 [0117.025] CloseThemeData () returned 0x0 [0117.026] capGetDriverDescriptionA () returned 0x0 [0117.026] GetLastError () returned 0x0 [0117.026] SetLastError (dwErrCode=0x0) [0117.026] OpenThemeData () returned 0x1f10000 [0117.027] GetSystemMetrics (nIndex=32) returned 4 [0117.027] GetSystemMetrics (nIndex=33) returned 4 [0117.027] CloseThemeData () returned 0x0 [0117.027] capGetDriverDescriptionA () returned 0x0 [0117.028] GetLastError () returned 0x0 [0117.028] SetLastError (dwErrCode=0x0) [0117.028] OpenThemeData () returned 0x1f20000 [0117.028] GetSystemMetrics (nIndex=32) returned 4 [0117.028] GetSystemMetrics (nIndex=33) returned 4 [0117.028] CloseThemeData () returned 0x0 [0117.029] capGetDriverDescriptionA () returned 0x0 [0117.029] GetLastError () returned 0x0 [0117.029] SetLastError (dwErrCode=0x0) [0117.029] OpenThemeData () returned 0x1f30000 [0117.030] GetSystemMetrics (nIndex=32) returned 4 [0117.030] GetSystemMetrics (nIndex=33) returned 4 [0117.030] CloseThemeData () returned 0x0 [0117.030] capGetDriverDescriptionA () returned 0x0 [0117.031] GetLastError () returned 0x0 [0117.031] SetLastError (dwErrCode=0x0) [0117.031] OpenThemeData () returned 0x1f40000 [0117.031] GetSystemMetrics (nIndex=32) returned 4 [0117.031] GetSystemMetrics (nIndex=33) returned 4 [0117.031] CloseThemeData () returned 0x0 [0117.031] capGetDriverDescriptionA () returned 0x0 [0117.032] GetLastError () returned 0x0 [0117.032] SetLastError (dwErrCode=0x0) [0117.032] OpenThemeData () returned 0x1f50000 [0117.032] GetSystemMetrics (nIndex=32) returned 4 [0117.032] GetSystemMetrics (nIndex=33) returned 4 [0117.033] CloseThemeData () returned 0x0 [0117.033] capGetDriverDescriptionA () returned 0x0 [0117.033] GetLastError () returned 0x0 [0117.033] SetLastError (dwErrCode=0x0) [0117.034] OpenThemeData () returned 0x1f60000 [0117.034] GetSystemMetrics (nIndex=32) returned 4 [0117.034] GetSystemMetrics (nIndex=33) returned 4 [0117.034] CloseThemeData () returned 0x0 [0117.035] lstrlenA (lpString="\x92\x07") returned 2 [0117.035] lstrlenA (lpString="\x92\x07") returned 2 [0117.035] lstrlenA (lpString="\x92\x07") returned 2 [0117.035] lstrlenA (lpString="\x92\x07") returned 2 [0117.035] lstrlenA (lpString="\x92\x07") returned 2 [0117.035] lstrlenA (lpString="\x92\x07") returned 2 [0117.035] capGetDriverDescriptionA () returned 0x0 [0117.035] GetLastError () returned 0x0 [0117.035] SetLastError (dwErrCode=0x0) [0117.035] OpenThemeData () returned 0x1f70000 [0117.036] GetSystemMetrics (nIndex=32) returned 4 [0117.036] GetSystemMetrics (nIndex=33) returned 4 [0117.036] CloseThemeData () returned 0x0 [0117.036] lstrlenA (lpString="\x92\x07") returned 2 [0117.036] lstrlenA (lpString="\x92\x07") returned 2 [0117.036] lstrlenA (lpString="\x92\x07") returned 2 [0117.036] lstrlenA (lpString="\x92\x07") returned 2 [0117.036] lstrlenA (lpString="\x92\x07") returned 2 [0117.036] lstrlenA (lpString="\x92\x07") returned 2 [0117.036] capGetDriverDescriptionA () returned 0x0 [0117.037] GetLastError () returned 0x0 [0117.037] SetLastError (dwErrCode=0x0) [0117.037] OpenThemeData () returned 0x1f80000 [0117.037] GetSystemMetrics (nIndex=32) returned 4 [0117.037] GetSystemMetrics (nIndex=33) returned 4 [0117.037] CloseThemeData () returned 0x0 [0117.038] lstrlenA (lpString="\x92\x07") returned 2 [0117.038] lstrlenA (lpString="\x92\x07") returned 2 [0117.038] lstrlenA (lpString="\x92\x07") returned 2 [0117.038] lstrlenA (lpString="\x92\x07") returned 2 [0117.038] lstrlenA (lpString="\x92\x07") returned 2 [0117.038] lstrlenA (lpString="\x92\x07") returned 2 [0117.038] capGetDriverDescriptionA () returned 0x0 [0117.038] GetLastError () returned 0x0 [0117.039] SetLastError (dwErrCode=0x0) [0117.039] OpenThemeData () returned 0x1f90000 [0117.039] GetSystemMetrics (nIndex=32) returned 4 [0117.039] GetSystemMetrics (nIndex=33) returned 4 [0117.039] CloseThemeData () returned 0x0 [0117.039] lstrlenA (lpString="\x92\x07") returned 2 [0117.039] lstrlenA (lpString="\x92\x07") returned 2 [0117.039] lstrlenA (lpString="\x92\x07") returned 2 [0117.039] lstrlenA (lpString="\x92\x07") returned 2 [0117.039] lstrlenA (lpString="\x92\x07") returned 2 [0117.039] lstrlenA (lpString="\x92\x07") returned 2 [0117.039] capGetDriverDescriptionA () returned 0x0 [0117.040] GetLastError () returned 0x0 [0117.040] SetLastError (dwErrCode=0x0) [0117.040] OpenThemeData () returned 0x1fa0000 [0117.041] GetSystemMetrics (nIndex=32) returned 4 [0117.041] GetSystemMetrics (nIndex=33) returned 4 [0117.041] CloseThemeData () returned 0x0 [0117.041] lstrlenA (lpString="\x92\x07") returned 2 [0117.041] lstrlenA (lpString="\x92\x07") returned 2 [0117.041] lstrlenA (lpString="\x92\x07") returned 2 [0117.041] lstrlenA (lpString="\x92\x07") returned 2 [0117.041] lstrlenA (lpString="\x92\x07") returned 2 [0117.041] lstrlenA (lpString="\x92\x07") returned 2 [0117.041] capGetDriverDescriptionA () returned 0x0 [0117.042] GetLastError () returned 0x0 [0117.042] SetLastError (dwErrCode=0x0) [0117.042] OpenThemeData () returned 0x1fb0000 [0117.042] GetSystemMetrics (nIndex=32) returned 4 [0117.042] GetSystemMetrics (nIndex=33) returned 4 [0117.042] CloseThemeData () returned 0x0 [0117.042] lstrlenA (lpString="\x92\x07") returned 2 [0117.042] lstrlenA (lpString="\x92\x07") returned 2 [0117.042] lstrlenA (lpString="\x92\x07") returned 2 [0117.043] lstrlenA (lpString="\x92\x07") returned 2 [0117.043] lstrlenA (lpString="\x92\x07") returned 2 [0117.043] lstrlenA (lpString="\x92\x07") returned 2 [0117.043] capGetDriverDescriptionA () returned 0x0 [0117.043] GetLastError () returned 0x0 [0117.043] SetLastError (dwErrCode=0x0) [0117.043] OpenThemeData () returned 0x1fc0000 [0117.044] GetSystemMetrics (nIndex=32) returned 4 [0117.044] GetSystemMetrics (nIndex=33) returned 4 [0117.044] CloseThemeData () returned 0x0 [0117.044] lstrlenA (lpString="\x92\x07") returned 2 [0117.044] lstrlenA (lpString="\x92\x07") returned 2 [0117.044] lstrlenA (lpString="\x92\x07") returned 2 [0117.044] lstrlenA (lpString="\x92\x07") returned 2 [0117.044] lstrlenA (lpString="\x92\x07") returned 2 [0117.044] lstrlenA (lpString="\x92\x07") returned 2 [0117.044] capGetDriverDescriptionA () returned 0x0 [0117.045] GetLastError () returned 0x0 [0117.045] SetLastError (dwErrCode=0x0) [0117.045] OpenThemeData () returned 0x1fd0000 [0117.045] GetSystemMetrics (nIndex=32) returned 4 [0117.045] GetSystemMetrics (nIndex=33) returned 4 [0117.045] CloseThemeData () returned 0x0 [0117.046] lstrlenA (lpString="\x92\x07") returned 2 [0117.046] lstrlenA (lpString="\x92\x07") returned 2 [0117.046] lstrlenA (lpString="\x92\x07") returned 2 [0117.046] lstrlenA (lpString="\x92\x07") returned 2 [0117.046] lstrlenA (lpString="\x92\x07") returned 2 [0117.046] lstrlenA (lpString="\x92\x07") returned 2 [0117.046] capGetDriverDescriptionA () returned 0x0 [0117.046] GetLastError () returned 0x0 [0117.046] SetLastError (dwErrCode=0x0) [0117.046] OpenThemeData () returned 0x1fe0000 [0117.047] GetSystemMetrics (nIndex=32) returned 4 [0117.047] GetSystemMetrics (nIndex=33) returned 4 [0117.047] CloseThemeData () returned 0x0 [0117.047] lstrlenA (lpString="\x92\x07") returned 2 [0117.047] lstrlenA (lpString="\x92\x07") returned 2 [0117.047] lstrlenA (lpString="\x92\x07") returned 2 [0117.047] lstrlenA (lpString="\x92\x07") returned 2 [0117.047] lstrlenA (lpString="\x92\x07") returned 2 [0117.047] lstrlenA (lpString="\x92\x07") returned 2 [0117.047] capGetDriverDescriptionA () returned 0x0 [0117.048] GetLastError () returned 0x0 [0117.048] SetLastError (dwErrCode=0x0) [0117.048] OpenThemeData () returned 0x1ff0000 [0117.048] GetSystemMetrics (nIndex=32) returned 4 [0117.048] GetSystemMetrics (nIndex=33) returned 4 [0117.048] CloseThemeData () returned 0x0 [0117.049] lstrlenA (lpString="\x92\x07") returned 2 [0117.049] lstrlenA (lpString="\x92\x07") returned 2 [0117.049] lstrlenA (lpString="\x92\x07") returned 2 [0117.049] lstrlenA (lpString="\x92\x07") returned 2 [0117.049] lstrlenA (lpString="\x92\x07") returned 2 [0117.049] lstrlenA (lpString="\x92\x07") returned 2 [0117.049] capGetDriverDescriptionA () returned 0x0 [0117.050] GetLastError () returned 0x0 [0117.050] SetLastError (dwErrCode=0x0) [0117.050] OpenThemeData () returned 0x2000000 [0117.050] GetSystemMetrics (nIndex=32) returned 4 [0117.050] GetSystemMetrics (nIndex=33) returned 4 [0117.050] CloseThemeData () returned 0x0 [0117.050] lstrlenA (lpString="\x92\x07") returned 2 [0117.050] lstrlenA (lpString="\x92\x07") returned 2 [0117.050] lstrlenA (lpString="\x92\x07") returned 2 [0117.050] lstrlenA (lpString="\x92\x07") returned 2 [0117.050] lstrlenA (lpString="\x92\x07") returned 2 [0117.050] lstrlenA (lpString="\x92\x07") returned 2 [0117.051] capGetDriverDescriptionA () returned 0x0 [0117.051] GetLastError () returned 0x0 [0117.051] SetLastError (dwErrCode=0x0) [0117.051] OpenThemeData () returned 0x2010000 [0117.052] GetSystemMetrics (nIndex=32) returned 4 [0117.052] GetSystemMetrics (nIndex=33) returned 4 [0117.052] CloseThemeData () returned 0x0 [0117.052] lstrlenA (lpString="\x92\x07") returned 2 [0117.052] lstrlenA (lpString="\x92\x07") returned 2 [0117.052] lstrlenA (lpString="\x92\x07") returned 2 [0117.052] lstrlenA (lpString="\x92\x07") returned 2 [0117.052] lstrlenA (lpString="\x92\x07") returned 2 [0117.052] lstrlenA (lpString="\x92\x07") returned 2 [0117.052] capGetDriverDescriptionA () returned 0x0 [0117.053] GetLastError () returned 0x0 [0117.053] SetLastError (dwErrCode=0x0) [0117.053] OpenThemeData () returned 0x2020000 [0117.054] GetSystemMetrics (nIndex=32) returned 4 [0117.054] GetSystemMetrics (nIndex=33) returned 4 [0117.054] CloseThemeData () returned 0x0 [0117.055] lstrlenA (lpString="\x92\x07") returned 2 [0117.055] lstrlenA (lpString="\x92\x07") returned 2 [0117.055] lstrlenA (lpString="\x92\x07") returned 2 [0117.055] lstrlenA (lpString="\x92\x07") returned 2 [0117.055] lstrlenA (lpString="\x92\x07") returned 2 [0117.055] lstrlenA (lpString="\x92\x07") returned 2 [0117.055] capGetDriverDescriptionA () returned 0x0 [0117.056] GetLastError () returned 0x0 [0117.056] SetLastError (dwErrCode=0x0) [0117.056] OpenThemeData () returned 0x2030000 [0117.056] GetSystemMetrics (nIndex=32) returned 4 [0117.056] GetSystemMetrics (nIndex=33) returned 4 [0117.056] CloseThemeData () returned 0x0 [0117.056] lstrlenA (lpString="\x92\x07") returned 2 [0117.056] lstrlenA (lpString="\x92\x07") returned 2 [0117.056] lstrlenA (lpString="\x92\x07") returned 2 [0117.056] lstrlenA (lpString="\x92\x07") returned 2 [0117.056] lstrlenA (lpString="\x92\x07") returned 2 [0117.057] lstrlenA (lpString="\x92\x07") returned 2 [0117.057] capGetDriverDescriptionA () returned 0x0 [0117.057] GetLastError () returned 0x0 [0117.057] SetLastError (dwErrCode=0x0) [0117.057] OpenThemeData () returned 0x2040000 [0117.058] GetSystemMetrics (nIndex=32) returned 4 [0117.058] GetSystemMetrics (nIndex=33) returned 4 [0117.058] CloseThemeData () returned 0x0 [0117.058] lstrlenA (lpString="\x92\x07") returned 2 [0117.058] lstrlenA (lpString="\x92\x07") returned 2 [0117.058] lstrlenA (lpString="\x92\x07") returned 2 [0117.058] lstrlenA (lpString="\x92\x07") returned 2 [0117.058] lstrlenA (lpString="\x92\x07") returned 2 [0117.058] lstrlenA (lpString="\x92\x07") returned 2 [0117.058] capGetDriverDescriptionA () returned 0x0 [0117.059] GetLastError () returned 0x0 [0117.059] SetLastError (dwErrCode=0x0) [0117.059] OpenThemeData () returned 0x2050000 [0117.059] GetSystemMetrics (nIndex=32) returned 4 [0117.059] GetSystemMetrics (nIndex=33) returned 4 [0117.059] CloseThemeData () returned 0x0 [0117.060] lstrlenA (lpString="\x92\x07") returned 2 [0117.060] lstrlenA (lpString="\x92\x07") returned 2 [0117.060] lstrlenA (lpString="\x92\x07") returned 2 [0117.060] lstrlenA (lpString="\x92\x07") returned 2 [0117.060] lstrlenA (lpString="\x92\x07") returned 2 [0117.060] lstrlenA (lpString="\x92\x07") returned 2 [0117.060] capGetDriverDescriptionA () returned 0x0 [0117.060] GetLastError () returned 0x0 [0117.060] SetLastError (dwErrCode=0x0) [0117.060] OpenThemeData () returned 0x2060000 [0117.061] GetSystemMetrics (nIndex=32) returned 4 [0117.061] GetSystemMetrics (nIndex=33) returned 4 [0117.061] CloseThemeData () returned 0x0 [0117.061] lstrlenA (lpString="\x92\x07") returned 2 [0117.061] lstrlenA (lpString="\x92\x07") returned 2 [0117.061] lstrlenA (lpString="\x92\x07") returned 2 [0117.061] lstrlenA (lpString="\x92\x07") returned 2 [0117.061] lstrlenA (lpString="\x92\x07") returned 2 [0117.061] lstrlenA (lpString="\x92\x07") returned 2 [0117.061] capGetDriverDescriptionA () returned 0x0 [0117.062] GetLastError () returned 0x0 [0117.062] SetLastError (dwErrCode=0x0) [0117.062] OpenThemeData () returned 0x2070000 [0117.062] GetSystemMetrics (nIndex=32) returned 4 [0117.062] GetSystemMetrics (nIndex=33) returned 4 [0117.062] CloseThemeData () returned 0x0 [0117.063] lstrlenA (lpString="\x92\x07") returned 2 [0117.063] lstrlenA (lpString="\x92\x07") returned 2 [0117.063] lstrlenA (lpString="\x92\x07") returned 2 [0117.063] lstrlenA (lpString="\x92\x07") returned 2 [0117.063] lstrlenA (lpString="\x92\x07") returned 2 [0117.063] lstrlenA (lpString="\x92\x07") returned 2 [0117.063] capGetDriverDescriptionA () returned 0x0 [0117.063] GetLastError () returned 0x0 [0117.063] SetLastError (dwErrCode=0x0) [0117.063] OpenThemeData () returned 0x2080000 [0117.064] GetSystemMetrics (nIndex=32) returned 4 [0117.064] GetSystemMetrics (nIndex=33) returned 4 [0117.064] CloseThemeData () returned 0x0 [0117.064] lstrlenA (lpString="\x92\x07") returned 2 [0117.064] lstrlenA (lpString="\x92\x07") returned 2 [0117.064] lstrlenA (lpString="\x92\x07") returned 2 [0117.064] lstrlenA (lpString="\x92\x07") returned 2 [0117.064] lstrlenA (lpString="\x92\x07") returned 2 [0117.064] lstrlenA (lpString="\x92\x07") returned 2 [0117.064] capGetDriverDescriptionA () returned 0x0 [0117.740] GetLastError () returned 0x0 [0117.740] SetLastError (dwErrCode=0x0) [0117.740] OpenThemeData () returned 0x2090000 [0118.051] GetSystemMetrics (nIndex=32) returned 4 [0118.051] GetSystemMetrics (nIndex=33) returned 4 [0118.051] CloseThemeData () returned 0x0 [0118.051] lstrlenA (lpString="\x92\x07") returned 2 [0118.051] lstrlenA (lpString="\x92\x07") returned 2 [0118.051] lstrlenA (lpString="\x92\x07") returned 2 [0118.051] lstrlenA (lpString="\x92\x07") returned 2 [0118.051] lstrlenA (lpString="\x92\x07") returned 2 [0118.051] lstrlenA (lpString="\x92\x07") returned 2 [0118.052] capGetDriverDescriptionA () returned 0x0 [0118.052] GetLastError () returned 0x0 [0118.052] SetLastError (dwErrCode=0x0) [0118.052] OpenThemeData () returned 0x20a0000 [0118.053] GetSystemMetrics (nIndex=32) returned 4 [0118.053] GetSystemMetrics (nIndex=33) returned 4 [0118.053] CloseThemeData () returned 0x0 [0118.053] lstrlenA (lpString="\x92\x07") returned 2 [0118.053] lstrlenA (lpString="\x92\x07") returned 2 [0118.053] lstrlenA (lpString="\x92\x07") returned 2 [0118.053] lstrlenA (lpString="\x92\x07") returned 2 [0118.053] lstrlenA (lpString="\x92\x07") returned 2 [0118.053] lstrlenA (lpString="\x92\x07") returned 2 [0118.053] capGetDriverDescriptionA () returned 0x0 [0118.054] GetLastError () returned 0x0 [0118.054] SetLastError (dwErrCode=0x0) [0118.054] OpenThemeData () returned 0x20b0000 [0118.054] GetSystemMetrics (nIndex=32) returned 4 [0118.054] GetSystemMetrics (nIndex=33) returned 4 [0118.054] CloseThemeData () returned 0x0 [0118.055] lstrlenA (lpString="\x92\x07") returned 2 [0118.055] lstrlenA (lpString="\x92\x07") returned 2 [0118.055] lstrlenA (lpString="\x92\x07") returned 2 [0118.055] lstrlenA (lpString="\x92\x07") returned 2 [0118.055] lstrlenA (lpString="\x92\x07") returned 2 [0118.055] lstrlenA (lpString="\x92\x07") returned 2 [0118.055] capGetDriverDescriptionA () returned 0x0 [0118.055] GetLastError () returned 0x0 [0118.056] SetLastError (dwErrCode=0x0) [0118.056] OpenThemeData () returned 0x20c0000 [0118.056] GetSystemMetrics (nIndex=32) returned 4 [0118.056] GetSystemMetrics (nIndex=33) returned 4 [0118.056] CloseThemeData () returned 0x0 [0118.056] lstrlenA (lpString="\x92\x07") returned 2 [0118.056] lstrlenA (lpString="\x92\x07") returned 2 [0118.056] lstrlenA (lpString="\x92\x07") returned 2 [0118.056] lstrlenA (lpString="\x92\x07") returned 2 [0118.056] lstrlenA (lpString="\x92\x07") returned 2 [0118.056] lstrlenA (lpString="\x92\x07") returned 2 [0118.057] capGetDriverDescriptionA () returned 0x0 [0118.057] GetLastError () returned 0x0 [0118.057] SetLastError (dwErrCode=0x0) [0118.057] OpenThemeData () returned 0x20d0000 [0118.058] GetSystemMetrics (nIndex=32) returned 4 [0118.058] GetSystemMetrics (nIndex=33) returned 4 [0118.058] CloseThemeData () returned 0x0 [0118.058] lstrlenA (lpString="\x92\x07") returned 2 [0118.058] lstrlenA (lpString="\x92\x07") returned 2 [0118.058] lstrlenA (lpString="\x92\x07") returned 2 [0118.058] lstrlenA (lpString="\x92\x07") returned 2 [0118.058] lstrlenA (lpString="\x92\x07") returned 2 [0118.058] lstrlenA (lpString="\x92\x07") returned 2 [0118.058] capGetDriverDescriptionA () returned 0x0 [0118.059] GetLastError () returned 0x0 [0118.059] SetLastError (dwErrCode=0x0) [0118.059] OpenThemeData () returned 0x20e0000 [0118.059] GetSystemMetrics (nIndex=32) returned 4 [0118.059] GetSystemMetrics (nIndex=33) returned 4 [0118.059] CloseThemeData () returned 0x0 [0118.060] lstrlenA (lpString="\x92\x07") returned 2 [0118.060] lstrlenA (lpString="\x92\x07") returned 2 [0118.060] lstrlenA (lpString="\x92\x07") returned 2 [0118.060] lstrlenA (lpString="\x92\x07") returned 2 [0118.060] lstrlenA (lpString="\x92\x07") returned 2 [0118.060] lstrlenA (lpString="\x92\x07") returned 2 [0118.060] capGetDriverDescriptionA () returned 0x0 [0118.060] GetLastError () returned 0x0 [0118.060] SetLastError (dwErrCode=0x0) [0118.061] OpenThemeData () returned 0x20f0000 [0118.061] GetSystemMetrics (nIndex=32) returned 4 [0118.061] GetSystemMetrics (nIndex=33) returned 4 [0118.061] CloseThemeData () returned 0x0 [0118.061] lstrlenA (lpString="\x92\x07") returned 2 [0118.061] lstrlenA (lpString="\x92\x07") returned 2 [0118.061] lstrlenA (lpString="\x92\x07") returned 2 [0118.061] lstrlenA (lpString="\x92\x07") returned 2 [0118.061] lstrlenA (lpString="\x92\x07") returned 2 [0118.061] lstrlenA (lpString="\x92\x07") returned 2 [0118.061] capGetDriverDescriptionA () returned 0x0 [0118.062] GetLastError () returned 0x0 [0118.062] SetLastError (dwErrCode=0x0) [0118.062] OpenThemeData () returned 0x2100000 [0118.063] GetSystemMetrics (nIndex=32) returned 4 [0118.063] GetSystemMetrics (nIndex=33) returned 4 [0118.063] CloseThemeData () returned 0x0 [0118.063] lstrlenA (lpString="\x92\x07") returned 2 [0118.063] lstrlenA (lpString="\x92\x07") returned 2 [0118.063] lstrlenA (lpString="\x92\x07") returned 2 [0118.063] lstrlenA (lpString="\x92\x07") returned 2 [0118.063] lstrlenA (lpString="\x92\x07") returned 2 [0118.063] lstrlenA (lpString="\x92\x07") returned 2 [0118.063] capGetDriverDescriptionA () returned 0x0 [0118.064] GetLastError () returned 0x0 [0118.064] SetLastError (dwErrCode=0x0) [0118.064] OpenThemeData () returned 0x2110000 [0118.064] GetSystemMetrics (nIndex=32) returned 4 [0118.064] GetSystemMetrics (nIndex=33) returned 4 [0118.064] CloseThemeData () returned 0x0 [0118.065] lstrlenA (lpString="\x92\x07") returned 2 [0118.065] lstrlenA (lpString="\x92\x07") returned 2 [0118.065] lstrlenA (lpString="\x92\x07") returned 2 [0118.065] lstrlenA (lpString="\x92\x07") returned 2 [0118.065] lstrlenA (lpString="\x92\x07") returned 2 [0118.065] lstrlenA (lpString="\x92\x07") returned 2 [0118.065] capGetDriverDescriptionA () returned 0x0 [0118.065] GetLastError () returned 0x0 [0118.065] SetLastError (dwErrCode=0x0) [0118.065] OpenThemeData () returned 0x2120000 [0118.066] GetSystemMetrics (nIndex=32) returned 4 [0118.066] GetSystemMetrics (nIndex=33) returned 4 [0118.066] CloseThemeData () returned 0x0 [0118.066] lstrlenA (lpString="\x92\x07") returned 2 [0118.066] lstrlenA (lpString="\x92\x07") returned 2 [0118.066] lstrlenA (lpString="\x92\x07") returned 2 [0118.066] lstrlenA (lpString="\x92\x07") returned 2 [0118.066] lstrlenA (lpString="\x92\x07") returned 2 [0118.066] lstrlenA (lpString="\x92\x07") returned 2 [0118.066] capGetDriverDescriptionA () returned 0x0 [0118.067] GetLastError () returned 0x0 [0118.067] SetLastError (dwErrCode=0x0) [0118.067] OpenThemeData () returned 0x2130000 [0118.068] GetSystemMetrics (nIndex=32) returned 4 [0118.068] GetSystemMetrics (nIndex=33) returned 4 [0118.068] CloseThemeData () returned 0x0 [0118.068] lstrlenA (lpString="\x92\x07") returned 2 [0118.068] lstrlenA (lpString="\x92\x07") returned 2 [0118.068] lstrlenA (lpString="\x92\x07") returned 2 [0118.068] lstrlenA (lpString="\x92\x07") returned 2 [0118.068] lstrlenA (lpString="\x92\x07") returned 2 [0118.068] lstrlenA (lpString="\x92\x07") returned 2 [0118.068] capGetDriverDescriptionA () returned 0x0 [0118.069] GetLastError () returned 0x0 [0118.069] SetLastError (dwErrCode=0x0) [0118.069] OpenThemeData () returned 0x2140000 [0118.069] GetSystemMetrics (nIndex=32) returned 4 [0118.069] GetSystemMetrics (nIndex=33) returned 4 [0118.069] CloseThemeData () returned 0x0 [0118.069] lstrlenA (lpString="\x92\x07") returned 2 [0118.069] lstrlenA (lpString="\x92\x07") returned 2 [0118.070] lstrlenA (lpString="\x92\x07") returned 2 [0118.070] lstrlenA (lpString="\x92\x07") returned 2 [0118.070] lstrlenA (lpString="\x92\x07") returned 2 [0118.070] lstrlenA (lpString="\x92\x07") returned 2 [0118.070] capGetDriverDescriptionA () returned 0x0 [0118.070] GetLastError () returned 0x0 [0118.070] SetLastError (dwErrCode=0x0) [0118.070] OpenThemeData () returned 0x2150000 [0118.071] GetSystemMetrics (nIndex=32) returned 4 [0118.071] GetSystemMetrics (nIndex=33) returned 4 [0118.071] CloseThemeData () returned 0x0 [0118.071] lstrlenA (lpString="\x92\x07") returned 2 [0118.071] lstrlenA (lpString="\x92\x07") returned 2 [0118.071] lstrlenA (lpString="\x92\x07") returned 2 [0118.071] lstrlenA (lpString="\x92\x07") returned 2 [0118.071] lstrlenA (lpString="\x92\x07") returned 2 [0118.071] lstrlenA (lpString="\x92\x07") returned 2 [0118.071] capGetDriverDescriptionA () returned 0x0 [0118.072] GetLastError () returned 0x0 [0118.072] SetLastError (dwErrCode=0x0) [0118.072] OpenThemeData () returned 0x2160000 [0118.072] GetSystemMetrics (nIndex=32) returned 4 [0118.072] GetSystemMetrics (nIndex=33) returned 4 [0118.072] CloseThemeData () returned 0x0 [0118.073] lstrlenA (lpString="\x92\x07") returned 2 [0118.073] lstrlenA (lpString="\x92\x07") returned 2 [0118.073] lstrlenA (lpString="\x92\x07") returned 2 [0118.073] lstrlenA (lpString="\x92\x07") returned 2 [0118.073] lstrlenA (lpString="\x92\x07") returned 2 [0118.073] lstrlenA (lpString="\x92\x07") returned 2 [0118.073] capGetDriverDescriptionA () returned 0x0 [0118.073] GetLastError () returned 0x0 [0118.074] SetLastError (dwErrCode=0x0) [0118.074] OpenThemeData () returned 0x2170000 [0118.074] GetSystemMetrics (nIndex=32) returned 4 [0118.074] GetSystemMetrics (nIndex=33) returned 4 [0118.074] CloseThemeData () returned 0x0 [0118.074] lstrlenA (lpString="\x92\x07") returned 2 [0118.074] lstrlenA (lpString="\x92\x07") returned 2 [0118.074] lstrlenA (lpString="\x92\x07") returned 2 [0118.074] lstrlenA (lpString="\x92\x07") returned 2 [0118.074] lstrlenA (lpString="\x92\x07") returned 2 [0118.074] lstrlenA (lpString="\x92\x07") returned 2 [0118.075] capGetDriverDescriptionA () returned 0x0 [0118.075] GetLastError () returned 0x0 [0118.075] SetLastError (dwErrCode=0x0) [0118.075] OpenThemeData () returned 0x2180000 [0118.076] GetSystemMetrics (nIndex=32) returned 4 [0118.076] GetSystemMetrics (nIndex=33) returned 4 [0118.076] CloseThemeData () returned 0x0 [0118.076] lstrlenA (lpString="\x92\x07") returned 2 [0118.076] lstrlenA (lpString="\x92\x07") returned 2 [0118.076] lstrlenA (lpString="\x92\x07") returned 2 [0118.076] lstrlenA (lpString="\x92\x07") returned 2 [0118.076] lstrlenA (lpString="\x92\x07") returned 2 [0118.076] lstrlenA (lpString="\x92\x07") returned 2 [0118.076] capGetDriverDescriptionA () returned 0x0 [0118.077] GetLastError () returned 0x0 [0118.077] SetLastError (dwErrCode=0x0) [0118.077] OpenThemeData () returned 0x2190000 [0118.077] GetSystemMetrics (nIndex=32) returned 4 [0118.077] GetSystemMetrics (nIndex=33) returned 4 [0118.077] CloseThemeData () returned 0x0 [0118.078] lstrlenA (lpString="\x92\x07") returned 2 [0118.078] lstrlenA (lpString="\x92\x07") returned 2 [0118.078] lstrlenA (lpString="\x92\x07") returned 2 [0118.078] lstrlenA (lpString="\x92\x07") returned 2 [0118.078] lstrlenA (lpString="\x92\x07") returned 2 [0118.078] lstrlenA (lpString="\x92\x07") returned 2 [0118.078] capGetDriverDescriptionA () returned 0x0 [0118.078] GetLastError () returned 0x0 [0118.078] SetLastError (dwErrCode=0x0) [0118.078] OpenThemeData () returned 0x21a0000 [0118.079] GetSystemMetrics (nIndex=32) returned 4 [0118.079] GetSystemMetrics (nIndex=33) returned 4 [0118.079] CloseThemeData () returned 0x0 [0118.079] lstrlenA (lpString="\x92\x07") returned 2 [0118.079] lstrlenA (lpString="\x92\x07") returned 2 [0118.079] lstrlenA (lpString="\x92\x07") returned 2 [0118.079] lstrlenA (lpString="\x92\x07") returned 2 [0118.079] lstrlenA (lpString="\x92\x07") returned 2 [0118.079] lstrlenA (lpString="\x92\x07") returned 2 [0118.079] capGetDriverDescriptionA () returned 0x0 [0118.080] GetLastError () returned 0x0 [0118.080] SetLastError (dwErrCode=0x0) [0118.080] OpenThemeData () returned 0x21b0000 [0118.081] GetSystemMetrics (nIndex=32) returned 4 [0118.081] GetSystemMetrics (nIndex=33) returned 4 [0118.081] CloseThemeData () returned 0x0 [0118.081] lstrlenA (lpString="\x92\x07") returned 2 [0118.081] lstrlenA (lpString="\x92\x07") returned 2 [0118.081] lstrlenA (lpString="\x92\x07") returned 2 [0118.081] lstrlenA (lpString="\x92\x07") returned 2 [0118.081] lstrlenA (lpString="\x92\x07") returned 2 [0118.081] lstrlenA (lpString="\x92\x07") returned 2 [0118.081] capGetDriverDescriptionA () returned 0x0 [0118.082] GetLastError () returned 0x0 [0118.082] SetLastError (dwErrCode=0x0) [0118.082] OpenThemeData () returned 0x21c0000 [0118.082] GetSystemMetrics (nIndex=32) returned 4 [0118.083] GetSystemMetrics (nIndex=33) returned 4 [0118.083] CloseThemeData () returned 0x0 [0118.083] lstrlenA (lpString="\x92\x07") returned 2 [0118.083] lstrlenA (lpString="\x92\x07") returned 2 [0118.083] lstrlenA (lpString="\x92\x07") returned 2 [0118.083] lstrlenA (lpString="\x92\x07") returned 2 [0118.083] lstrlenA (lpString="\x92\x07") returned 2 [0118.083] lstrlenA (lpString="\x92\x07") returned 2 [0118.083] capGetDriverDescriptionA () returned 0x0 [0118.084] GetLastError () returned 0x0 [0118.084] SetLastError (dwErrCode=0x0) [0118.084] OpenThemeData () returned 0x21d0000 [0118.084] GetSystemMetrics (nIndex=32) returned 4 [0118.084] GetSystemMetrics (nIndex=33) returned 4 [0118.084] CloseThemeData () returned 0x0 [0118.084] lstrlenA (lpString="\x92\x07") returned 2 [0118.084] lstrlenA (lpString="\x92\x07") returned 2 [0118.085] lstrlenA (lpString="\x92\x07") returned 2 [0118.085] lstrlenA (lpString="\x92\x07") returned 2 [0118.085] lstrlenA (lpString="\x92\x07") returned 2 [0118.085] lstrlenA (lpString="\x92\x07") returned 2 [0118.086] capGetDriverDescriptionA () returned 0x0 [0118.087] GetLastError () returned 0x0 [0118.087] SetLastError (dwErrCode=0x0) [0118.087] OpenThemeData () returned 0x21e0000 [0118.087] GetSystemMetrics (nIndex=32) returned 4 [0118.087] GetSystemMetrics (nIndex=33) returned 4 [0118.087] CloseThemeData () returned 0x0 [0118.087] lstrlenA (lpString="\x92\x07") returned 2 [0118.087] lstrlenA (lpString="\x92\x07") returned 2 [0118.087] lstrlenA (lpString="\x92\x07") returned 2 [0118.088] lstrlenA (lpString="\x92\x07") returned 2 [0118.088] lstrlenA (lpString="\x92\x07") returned 2 [0118.088] lstrlenA (lpString="\x92\x07") returned 2 [0118.088] capGetDriverDescriptionA () returned 0x0 [0118.088] GetLastError () returned 0x0 [0118.088] SetLastError (dwErrCode=0x0) [0118.088] OpenThemeData () returned 0x21f0000 [0118.089] GetSystemMetrics (nIndex=32) returned 4 [0118.089] GetSystemMetrics (nIndex=33) returned 4 [0118.089] CloseThemeData () returned 0x0 [0118.089] lstrlenA (lpString="\x92\x07") returned 2 [0118.089] lstrlenA (lpString="\x92\x07") returned 2 [0118.089] lstrlenA (lpString="\x92\x07") returned 2 [0118.089] lstrlenA (lpString="\x92\x07") returned 2 [0118.089] lstrlenA (lpString="\x92\x07") returned 2 [0118.089] lstrlenA (lpString="\x92\x07") returned 2 [0118.089] capGetDriverDescriptionA () returned 0x0 [0118.090] GetLastError () returned 0x0 [0118.090] SetLastError (dwErrCode=0x0) [0118.090] OpenThemeData () returned 0x2200000 [0118.090] GetSystemMetrics (nIndex=32) returned 4 [0118.090] GetSystemMetrics (nIndex=33) returned 4 [0118.090] CloseThemeData () returned 0x0 [0118.091] lstrlenA (lpString="\x92\x07") returned 2 [0118.091] lstrlenA (lpString="\x92\x07") returned 2 [0118.091] lstrlenA (lpString="\x92\x07") returned 2 [0118.091] lstrlenA (lpString="\x92\x07") returned 2 [0118.091] lstrlenA (lpString="\x92\x07") returned 2 [0118.091] lstrlenA (lpString="\x92\x07") returned 2 [0118.091] capGetDriverDescriptionA () returned 0x0 [0118.091] GetLastError () returned 0x0 [0118.091] SetLastError (dwErrCode=0x0) [0118.091] OpenThemeData () returned 0x2210000 [0118.092] GetSystemMetrics (nIndex=32) returned 4 [0118.092] GetSystemMetrics (nIndex=33) returned 4 [0118.092] CloseThemeData () returned 0x0 [0118.092] lstrlenA (lpString="\x92\x07") returned 2 [0118.092] lstrlenA (lpString="\x92\x07") returned 2 [0118.092] lstrlenA (lpString="\x92\x07") returned 2 [0118.092] lstrlenA (lpString="\x92\x07") returned 2 [0118.092] lstrlenA (lpString="\x92\x07") returned 2 [0118.092] lstrlenA (lpString="\x92\x07") returned 2 [0118.092] capGetDriverDescriptionA () returned 0x0 [0118.093] GetLastError () returned 0x0 [0118.093] SetLastError (dwErrCode=0x0) [0118.093] OpenThemeData () returned 0x2220000 [0118.094] GetSystemMetrics (nIndex=32) returned 4 [0118.094] GetSystemMetrics (nIndex=33) returned 4 [0118.094] CloseThemeData () returned 0x0 [0118.094] lstrlenA (lpString="\x92\x07") returned 2 [0118.094] lstrlenA (lpString="\x92\x07") returned 2 [0118.094] lstrlenA (lpString="\x92\x07") returned 2 [0118.094] lstrlenA (lpString="\x92\x07") returned 2 [0118.094] lstrlenA (lpString="\x92\x07") returned 2 [0118.094] lstrlenA (lpString="\x92\x07") returned 2 [0118.094] capGetDriverDescriptionA () returned 0x0 [0118.095] GetLastError () returned 0x0 [0118.095] SetLastError (dwErrCode=0x0) [0118.095] OpenThemeData () returned 0x2230000 [0118.095] GetSystemMetrics (nIndex=32) returned 4 [0118.095] GetSystemMetrics (nIndex=33) returned 4 [0118.095] CloseThemeData () returned 0x0 [0118.096] lstrlenA (lpString="\x92\x07") returned 2 [0118.096] lstrlenA (lpString="\x92\x07") returned 2 [0118.096] lstrlenA (lpString="\x92\x07") returned 2 [0118.096] lstrlenA (lpString="\x92\x07") returned 2 [0118.096] lstrlenA (lpString="\x92\x07") returned 2 [0118.096] lstrlenA (lpString="\x92\x07") returned 2 [0118.096] capGetDriverDescriptionA () returned 0x0 [0118.096] GetLastError () returned 0x0 [0118.096] SetLastError (dwErrCode=0x0) [0118.096] OpenThemeData () returned 0x2240000 [0118.097] GetSystemMetrics (nIndex=32) returned 4 [0118.097] GetSystemMetrics (nIndex=33) returned 4 [0118.097] CloseThemeData () returned 0x0 [0118.573] lstrlenA (lpString="\x92\x07") returned 2 [0118.573] lstrlenA (lpString="\x92\x07") returned 2 [0118.573] lstrlenA (lpString="\x92\x07") returned 2 [0118.574] lstrlenA (lpString="\x92\x07") returned 2 [0118.574] lstrlenA (lpString="\x92\x07") returned 2 [0118.574] lstrlenA (lpString="\x92\x07") returned 2 [0118.574] capGetDriverDescriptionA () returned 0x0 [0118.574] GetLastError () returned 0x0 [0118.574] SetLastError (dwErrCode=0x0) [0118.574] OpenThemeData () returned 0x2250000 [0118.575] GetSystemMetrics (nIndex=32) returned 4 [0118.575] GetSystemMetrics (nIndex=33) returned 4 [0118.575] CloseThemeData () returned 0x0 [0118.575] lstrlenA (lpString="\x92\x07") returned 2 [0118.575] lstrlenA (lpString="\x92\x07") returned 2 [0118.575] lstrlenA (lpString="\x92\x07") returned 2 [0118.575] lstrlenA (lpString="\x92\x07") returned 2 [0118.575] lstrlenA (lpString="\x92\x07") returned 2 [0118.575] lstrlenA (lpString="\x92\x07") returned 2 [0118.575] capGetDriverDescriptionA () returned 0x0 [0118.576] GetLastError () returned 0x0 [0118.576] SetLastError (dwErrCode=0x0) [0118.576] OpenThemeData () returned 0x2260000 [0118.576] GetSystemMetrics (nIndex=32) returned 4 [0118.576] GetSystemMetrics (nIndex=33) returned 4 [0118.576] CloseThemeData () returned 0x0 [0118.577] lstrlenA (lpString="\x92\x07") returned 2 [0118.577] lstrlenA (lpString="\x92\x07") returned 2 [0118.577] lstrlenA (lpString="\x92\x07") returned 2 [0118.577] lstrlenA (lpString="\x92\x07") returned 2 [0118.577] lstrlenA (lpString="\x92\x07") returned 2 [0118.577] lstrlenA (lpString="\x92\x07") returned 2 [0118.577] capGetDriverDescriptionA () returned 0x0 [0118.577] GetLastError () returned 0x0 [0118.577] SetLastError (dwErrCode=0x0) [0118.577] OpenThemeData () returned 0x2270000 [0118.578] GetSystemMetrics (nIndex=32) returned 4 [0118.578] GetSystemMetrics (nIndex=33) returned 4 [0118.578] CloseThemeData () returned 0x0 [0118.578] lstrlenA (lpString="\x92\x07") returned 2 [0118.578] lstrlenA (lpString="\x92\x07") returned 2 [0118.578] lstrlenA (lpString="\x92\x07") returned 2 [0118.578] lstrlenA (lpString="\x92\x07") returned 2 [0118.579] lstrlenA (lpString="\x92\x07") returned 2 [0118.579] lstrlenA (lpString="\x92\x07") returned 2 [0118.579] capGetDriverDescriptionA () returned 0x0 [0118.579] GetLastError () returned 0x0 [0118.579] SetLastError (dwErrCode=0x0) [0118.579] OpenThemeData () returned 0x2280000 [0118.580] GetSystemMetrics (nIndex=32) returned 4 [0118.580] GetSystemMetrics (nIndex=33) returned 4 [0118.580] CloseThemeData () returned 0x0 [0118.580] lstrlenA (lpString="\x92\x07") returned 2 [0118.580] lstrlenA (lpString="\x92\x07") returned 2 [0118.580] lstrlenA (lpString="\x92\x07") returned 2 [0118.580] lstrlenA (lpString="\x92\x07") returned 2 [0118.580] lstrlenA (lpString="\x92\x07") returned 2 [0118.580] lstrlenA (lpString="\x92\x07") returned 2 [0118.580] capGetDriverDescriptionA () returned 0x0 [0118.581] GetLastError () returned 0x0 [0118.581] SetLastError (dwErrCode=0x0) [0118.581] OpenThemeData () returned 0x2290000 [0118.581] GetSystemMetrics (nIndex=32) returned 4 [0118.581] GetSystemMetrics (nIndex=33) returned 4 [0118.581] CloseThemeData () returned 0x0 [0118.582] lstrlenA (lpString="\x92\x07") returned 2 [0118.582] lstrlenA (lpString="\x92\x07") returned 2 [0118.582] lstrlenA (lpString="\x92\x07") returned 2 [0118.582] lstrlenA (lpString="\x92\x07") returned 2 [0118.582] lstrlenA (lpString="\x92\x07") returned 2 [0118.582] lstrlenA (lpString="\x92\x07") returned 2 [0118.582] capGetDriverDescriptionA () returned 0x0 [0118.582] GetLastError () returned 0x0 [0118.582] SetLastError (dwErrCode=0x0) [0118.582] OpenThemeData () returned 0x22a0000 [0118.583] GetSystemMetrics (nIndex=32) returned 4 [0118.583] GetSystemMetrics (nIndex=33) returned 4 [0118.583] CloseThemeData () returned 0x0 [0118.583] lstrlenA (lpString="\x92\x07") returned 2 [0118.583] lstrlenA (lpString="\x92\x07") returned 2 [0118.583] lstrlenA (lpString="\x92\x07") returned 2 [0118.583] lstrlenA (lpString="\x92\x07") returned 2 [0118.583] lstrlenA (lpString="\x92\x07") returned 2 [0118.583] lstrlenA (lpString="\x92\x07") returned 2 [0118.583] capGetDriverDescriptionA () returned 0x0 [0118.584] GetLastError () returned 0x0 [0118.584] SetLastError (dwErrCode=0x0) [0118.584] OpenThemeData () returned 0x22b0000 [0118.584] GetSystemMetrics (nIndex=32) returned 4 [0118.584] GetSystemMetrics (nIndex=33) returned 4 [0118.584] CloseThemeData () returned 0x0 [0118.585] lstrlenA (lpString="\x92\x07") returned 2 [0118.585] lstrlenA (lpString="\x92\x07") returned 2 [0118.585] lstrlenA (lpString="\x92\x07") returned 2 [0118.585] lstrlenA (lpString="\x92\x07") returned 2 [0118.585] lstrlenA (lpString="\x92\x07") returned 2 [0118.585] lstrlenA (lpString="\x92\x07") returned 2 [0118.585] capGetDriverDescriptionA () returned 0x0 [0118.585] GetLastError () returned 0x0 [0118.585] SetLastError (dwErrCode=0x0) [0118.585] OpenThemeData () returned 0x22c0000 [0118.586] GetSystemMetrics (nIndex=32) returned 4 [0118.586] GetSystemMetrics (nIndex=33) returned 4 [0118.586] CloseThemeData () returned 0x0 [0118.586] lstrlenA (lpString="\x92\x07") returned 2 [0118.586] lstrlenA (lpString="\x92\x07") returned 2 [0118.586] lstrlenA (lpString="\x92\x07") returned 2 [0118.586] lstrlenA (lpString="\x92\x07") returned 2 [0118.586] lstrlenA (lpString="\x92\x07") returned 2 [0118.586] lstrlenA (lpString="\x92\x07") returned 2 [0118.586] capGetDriverDescriptionA () returned 0x0 [0118.587] GetLastError () returned 0x0 [0118.587] SetLastError (dwErrCode=0x0) [0118.587] OpenThemeData () returned 0x22d0000 [0118.588] GetSystemMetrics (nIndex=32) returned 4 [0118.588] GetSystemMetrics (nIndex=33) returned 4 [0118.588] CloseThemeData () returned 0x0 [0118.588] lstrlenA (lpString="\x92\x07") returned 2 [0118.588] lstrlenA (lpString="\x92\x07") returned 2 [0118.588] lstrlenA (lpString="\x92\x07") returned 2 [0118.588] lstrlenA (lpString="\x92\x07") returned 2 [0118.588] lstrlenA (lpString="\x92\x07") returned 2 [0118.588] lstrlenA (lpString="\x92\x07") returned 2 [0118.588] capGetDriverDescriptionA () returned 0x0 [0118.589] GetLastError () returned 0x0 [0118.589] SetLastError (dwErrCode=0x0) [0118.589] OpenThemeData () returned 0x22e0000 [0118.589] GetSystemMetrics (nIndex=32) returned 4 [0118.589] GetSystemMetrics (nIndex=33) returned 4 [0118.589] CloseThemeData () returned 0x0 [0118.590] lstrlenA (lpString="\x92\x07") returned 2 [0118.590] lstrlenA (lpString="\x92\x07") returned 2 [0118.590] lstrlenA (lpString="\x92\x07") returned 2 [0118.590] lstrlenA (lpString="\x92\x07") returned 2 [0118.590] lstrlenA (lpString="\x92\x07") returned 2 [0118.590] lstrlenA (lpString="\x92\x07") returned 2 [0118.590] capGetDriverDescriptionA () returned 0x0 [0118.590] GetLastError () returned 0x0 [0118.590] SetLastError (dwErrCode=0x0) [0118.590] OpenThemeData () returned 0x22f0000 [0118.591] GetSystemMetrics (nIndex=32) returned 4 [0118.591] GetSystemMetrics (nIndex=33) returned 4 [0118.591] CloseThemeData () returned 0x0 [0118.591] lstrlenA (lpString="\x92\x07") returned 2 [0118.591] lstrlenA (lpString="\x92\x07") returned 2 [0118.591] lstrlenA (lpString="\x92\x07") returned 2 [0118.591] lstrlenA (lpString="\x92\x07") returned 2 [0118.591] lstrlenA (lpString="\x92\x07") returned 2 [0118.591] lstrlenA (lpString="\x92\x07") returned 2 [0118.591] capGetDriverDescriptionA () returned 0x0 [0118.592] GetLastError () returned 0x0 [0118.592] SetLastError (dwErrCode=0x0) [0118.592] OpenThemeData () returned 0x2300000 [0118.592] GetSystemMetrics (nIndex=32) returned 4 [0118.593] GetSystemMetrics (nIndex=33) returned 4 [0118.593] CloseThemeData () returned 0x0 [0118.593] lstrlenA (lpString="\x92\x07") returned 2 [0118.593] lstrlenA (lpString="\x92\x07") returned 2 [0118.593] lstrlenA (lpString="\x92\x07") returned 2 [0118.593] lstrlenA (lpString="\x92\x07") returned 2 [0118.593] lstrlenA (lpString="\x92\x07") returned 2 [0118.593] lstrlenA (lpString="\x92\x07") returned 2 [0118.593] capGetDriverDescriptionA () returned 0x0 [0118.594] GetLastError () returned 0x0 [0118.594] SetLastError (dwErrCode=0x0) [0118.594] OpenThemeData () returned 0x2310000 [0118.594] GetSystemMetrics (nIndex=32) returned 4 [0118.594] GetSystemMetrics (nIndex=33) returned 4 [0118.594] CloseThemeData () returned 0x0 [0118.595] lstrlenA (lpString="\x92\x07") returned 2 [0118.595] lstrlenA (lpString="\x92\x07") returned 2 [0118.595] lstrlenA (lpString="\x92\x07") returned 2 [0118.595] lstrlenA (lpString="\x92\x07") returned 2 [0118.595] lstrlenA (lpString="\x92\x07") returned 2 [0118.595] lstrlenA (lpString="\x92\x07") returned 2 [0118.595] capGetDriverDescriptionA () returned 0x0 [0118.595] GetLastError () returned 0x0 [0118.595] SetLastError (dwErrCode=0x0) [0118.595] OpenThemeData () returned 0x2320000 [0118.596] GetSystemMetrics (nIndex=32) returned 4 [0118.596] GetSystemMetrics (nIndex=33) returned 4 [0118.596] CloseThemeData () returned 0x0 [0118.596] lstrlenA (lpString="\x92\x07") returned 2 [0118.596] lstrlenA (lpString="\x92\x07") returned 2 [0118.596] lstrlenA (lpString="\x92\x07") returned 2 [0118.596] capGetDriverDescriptionA () returned 0x0 [0118.597] GetLastError () returned 0x0 [0118.597] SetLastError (dwErrCode=0x0) [0118.597] OpenThemeData () returned 0x2330000 [0118.597] GetSystemMetrics (nIndex=32) returned 4 [0118.597] GetSystemMetrics (nIndex=33) returned 4 [0118.597] CloseThemeData () returned 0x0 [0118.598] capGetDriverDescriptionA () returned 0x0 [0118.598] GetLastError () returned 0x0 [0118.598] SetLastError (dwErrCode=0x0) [0118.599] OpenThemeData () returned 0x2340000 [0118.599] GetSystemMetrics (nIndex=32) returned 4 [0118.599] GetSystemMetrics (nIndex=33) returned 4 [0118.599] CloseThemeData () returned 0x0 [0118.599] capGetDriverDescriptionA () returned 0x0 [0118.600] GetLastError () returned 0x0 [0118.600] SetLastError (dwErrCode=0x0) [0118.600] OpenThemeData () returned 0x2350000 [0118.600] GetSystemMetrics (nIndex=32) returned 4 [0118.600] GetSystemMetrics (nIndex=33) returned 4 [0118.600] CloseThemeData () returned 0x0 [0118.601] capGetDriverDescriptionA () returned 0x0 [0118.601] GetLastError () returned 0x0 [0118.601] SetLastError (dwErrCode=0x0) [0118.601] OpenThemeData () returned 0x2360000 [0118.602] GetSystemMetrics (nIndex=32) returned 4 [0118.602] GetSystemMetrics (nIndex=33) returned 4 [0118.602] CloseThemeData () returned 0x0 [0118.602] capGetDriverDescriptionA () returned 0x0 [0118.603] GetLastError () returned 0x0 [0118.603] SetLastError (dwErrCode=0x0) [0118.603] OpenThemeData () returned 0x2370000 [0118.603] GetSystemMetrics (nIndex=32) returned 4 [0118.603] GetSystemMetrics (nIndex=33) returned 4 [0118.604] CloseThemeData () returned 0x0 [0118.604] capGetDriverDescriptionA () returned 0x0 [0118.604] GetLastError () returned 0x0 [0118.604] SetLastError (dwErrCode=0x0) [0118.604] OpenThemeData () returned 0x2380000 [0118.605] GetSystemMetrics (nIndex=32) returned 4 [0118.605] GetSystemMetrics (nIndex=33) returned 4 [0118.605] CloseThemeData () returned 0x0 [0118.605] capGetDriverDescriptionA () returned 0x0 [0118.606] GetLastError () returned 0x0 [0118.606] SetLastError (dwErrCode=0x0) [0118.606] OpenThemeData () returned 0x2390000 [0118.606] GetSystemMetrics (nIndex=32) returned 4 [0118.606] GetSystemMetrics (nIndex=33) returned 4 [0118.606] CloseThemeData () returned 0x0 [0119.277] capGetDriverDescriptionA () returned 0x0 [0119.278] GetLastError () returned 0x0 [0119.278] SetLastError (dwErrCode=0x0) [0119.278] OpenThemeData () returned 0x23a0000 [0119.278] GetSystemMetrics (nIndex=32) returned 4 [0119.278] GetSystemMetrics (nIndex=33) returned 4 [0119.278] CloseThemeData () returned 0x0 [0119.279] capGetDriverDescriptionA () returned 0x0 [0119.279] GetLastError () returned 0x0 [0119.279] SetLastError (dwErrCode=0x0) [0119.279] OpenThemeData () returned 0x23b0000 [0119.280] GetSystemMetrics (nIndex=32) returned 4 [0119.280] GetSystemMetrics (nIndex=33) returned 4 [0119.280] CloseThemeData () returned 0x0 [0119.280] capGetDriverDescriptionA () returned 0x0 [0119.281] GetLastError () returned 0x0 [0119.281] SetLastError (dwErrCode=0x0) [0119.281] OpenThemeData () returned 0x23c0000 [0119.281] GetSystemMetrics (nIndex=32) returned 4 [0119.281] GetSystemMetrics (nIndex=33) returned 4 [0119.281] CloseThemeData () returned 0x0 [0119.282] capGetDriverDescriptionA () returned 0x0 [0119.282] GetLastError () returned 0x0 [0119.283] SetLastError (dwErrCode=0x0) [0119.283] OpenThemeData () returned 0x23d0000 [0119.283] GetSystemMetrics (nIndex=32) returned 4 [0119.283] GetSystemMetrics (nIndex=33) returned 4 [0119.283] CloseThemeData () returned 0x0 [0119.283] capGetDriverDescriptionA () returned 0x0 [0119.284] GetLastError () returned 0x0 [0119.284] SetLastError (dwErrCode=0x0) [0119.284] OpenThemeData () returned 0x23e0000 [0119.285] GetSystemMetrics (nIndex=32) returned 4 [0119.285] GetSystemMetrics (nIndex=33) returned 4 [0119.285] CloseThemeData () returned 0x0 [0119.285] capGetDriverDescriptionA () returned 0x0 [0119.286] GetLastError () returned 0x0 [0119.286] SetLastError (dwErrCode=0x0) [0119.286] OpenThemeData () returned 0x23f0000 [0119.286] GetSystemMetrics (nIndex=32) returned 4 [0119.286] GetSystemMetrics (nIndex=33) returned 4 [0119.286] CloseThemeData () returned 0x0 [0119.287] capGetDriverDescriptionA () returned 0x0 [0119.287] GetLastError () returned 0x0 [0119.287] SetLastError (dwErrCode=0x0) [0119.287] OpenThemeData () returned 0x2400000 [0119.288] GetSystemMetrics (nIndex=32) returned 4 [0119.288] GetSystemMetrics (nIndex=33) returned 4 [0119.288] CloseThemeData () returned 0x0 [0119.288] capGetDriverDescriptionA () returned 0x0 [0119.289] GetLastError () returned 0x0 [0119.289] SetLastError (dwErrCode=0x0) [0119.289] OpenThemeData () returned 0x2410000 [0119.289] GetSystemMetrics (nIndex=32) returned 4 [0119.289] GetSystemMetrics (nIndex=33) returned 4 [0119.289] CloseThemeData () returned 0x0 [0119.290] capGetDriverDescriptionA () returned 0x0 [0119.290] GetLastError () returned 0x0 [0119.290] SetLastError (dwErrCode=0x0) [0119.290] OpenThemeData () returned 0x2420000 [0119.292] GetSystemMetrics (nIndex=32) returned 4 [0119.292] GetSystemMetrics (nIndex=33) returned 4 [0119.292] CloseThemeData () returned 0x0 [0119.292] capGetDriverDescriptionA () returned 0x0 [0119.293] GetLastError () returned 0x0 [0119.293] SetLastError (dwErrCode=0x0) [0119.293] OpenThemeData () returned 0x2430000 [0119.294] GetSystemMetrics (nIndex=32) returned 4 [0119.294] GetSystemMetrics (nIndex=33) returned 4 [0119.294] CloseThemeData () returned 0x0 [0119.294] capGetDriverDescriptionA () returned 0x0 [0119.294] GetLastError () returned 0x0 [0119.295] SetLastError (dwErrCode=0x0) [0119.295] OpenThemeData () returned 0x2440000 [0119.295] GetSystemMetrics (nIndex=32) returned 4 [0119.295] GetSystemMetrics (nIndex=33) returned 4 [0119.295] CloseThemeData () returned 0x0 [0119.295] capGetDriverDescriptionA () returned 0x0 [0119.296] GetLastError () returned 0x0 [0119.296] SetLastError (dwErrCode=0x0) [0119.296] OpenThemeData () returned 0x2450000 [0119.297] GetSystemMetrics (nIndex=32) returned 4 [0119.297] GetSystemMetrics (nIndex=33) returned 4 [0119.297] CloseThemeData () returned 0x0 [0119.297] capGetDriverDescriptionA () returned 0x0 [0119.298] GetLastError () returned 0x0 [0119.298] SetLastError (dwErrCode=0x0) [0119.298] OpenThemeData () returned 0x2460000 [0119.298] GetSystemMetrics (nIndex=32) returned 4 [0119.298] GetSystemMetrics (nIndex=33) returned 4 [0119.298] CloseThemeData () returned 0x0 [0119.299] capGetDriverDescriptionA () returned 0x0 [0119.299] GetLastError () returned 0x0 [0119.299] SetLastError (dwErrCode=0x0) [0119.299] OpenThemeData () returned 0x2470000 [0119.300] GetSystemMetrics (nIndex=32) returned 4 [0119.300] GetSystemMetrics (nIndex=33) returned 4 [0119.300] CloseThemeData () returned 0x0 [0119.300] capGetDriverDescriptionA () returned 0x0 [0119.301] GetLastError () returned 0x0 [0119.301] SetLastError (dwErrCode=0x0) [0119.301] OpenThemeData () returned 0x2480000 [0119.301] GetSystemMetrics (nIndex=32) returned 4 [0119.301] GetSystemMetrics (nIndex=33) returned 4 [0119.301] CloseThemeData () returned 0x0 [0119.302] capGetDriverDescriptionA () returned 0x0 [0119.302] GetLastError () returned 0x0 [0119.302] SetLastError (dwErrCode=0x0) [0119.302] OpenThemeData () returned 0x2490000 [0119.303] GetSystemMetrics (nIndex=32) returned 4 [0119.303] GetSystemMetrics (nIndex=33) returned 4 [0119.303] CloseThemeData () returned 0x0 [0119.303] capGetDriverDescriptionA () returned 0x0 [0119.304] GetLastError () returned 0x0 [0119.304] SetLastError (dwErrCode=0x0) [0119.304] OpenThemeData () returned 0x24a0000 [0119.304] GetSystemMetrics (nIndex=32) returned 4 [0119.304] GetSystemMetrics (nIndex=33) returned 4 [0119.304] CloseThemeData () returned 0x0 [0119.305] capGetDriverDescriptionA () returned 0x0 [0119.305] GetLastError () returned 0x0 [0119.305] SetLastError (dwErrCode=0x0) [0119.305] OpenThemeData () returned 0x24b0000 [0119.306] GetSystemMetrics (nIndex=32) returned 4 [0119.306] GetSystemMetrics (nIndex=33) returned 4 [0119.306] CloseThemeData () returned 0x0 [0119.306] capGetDriverDescriptionA () returned 0x0 [0119.307] GetLastError () returned 0x0 [0119.307] SetLastError (dwErrCode=0x0) [0119.307] OpenThemeData () returned 0x24c0000 [0119.307] GetSystemMetrics (nIndex=32) returned 4 [0119.307] GetSystemMetrics (nIndex=33) returned 4 [0119.307] CloseThemeData () returned 0x0 [0119.308] capGetDriverDescriptionA () returned 0x0 [0119.308] GetLastError () returned 0x0 [0119.308] SetLastError (dwErrCode=0x0) [0119.308] OpenThemeData () returned 0x24d0000 [0119.309] GetSystemMetrics (nIndex=32) returned 4 [0119.309] GetSystemMetrics (nIndex=33) returned 4 [0119.309] CloseThemeData () returned 0x0 [0119.309] capGetDriverDescriptionA () returned 0x0 [0119.310] GetLastError () returned 0x0 [0119.310] SetLastError (dwErrCode=0x0) [0119.310] OpenThemeData () returned 0x24e0000 [0119.310] GetSystemMetrics (nIndex=32) returned 4 [0119.310] GetSystemMetrics (nIndex=33) returned 4 [0119.310] CloseThemeData () returned 0x0 [0119.636] capGetDriverDescriptionA () returned 0x0 [0119.637] GetLastError () returned 0x0 [0119.637] SetLastError (dwErrCode=0x0) [0119.637] OpenThemeData () returned 0x24f0000 [0119.638] GetSystemMetrics (nIndex=32) returned 4 [0119.638] GetSystemMetrics (nIndex=33) returned 4 [0119.638] CloseThemeData () returned 0x0 [0119.638] capGetDriverDescriptionA () returned 0x0 [0119.639] GetLastError () returned 0x0 [0119.639] SetLastError (dwErrCode=0x0) [0119.639] OpenThemeData () returned 0x2500000 [0119.639] GetSystemMetrics (nIndex=32) returned 4 [0119.639] GetSystemMetrics (nIndex=33) returned 4 [0119.639] CloseThemeData () returned 0x0 [0119.640] capGetDriverDescriptionA () returned 0x0 [0119.640] GetLastError () returned 0x0 [0119.640] SetLastError (dwErrCode=0x0) [0119.640] OpenThemeData () returned 0x2510000 [0119.641] GetSystemMetrics (nIndex=32) returned 4 [0119.641] GetSystemMetrics (nIndex=33) returned 4 [0119.641] CloseThemeData () returned 0x0 [0119.641] capGetDriverDescriptionA () returned 0x0 [0119.642] GetLastError () returned 0x0 [0119.642] SetLastError (dwErrCode=0x0) [0119.642] OpenThemeData () returned 0x2520000 [0119.642] GetSystemMetrics (nIndex=32) returned 4 [0119.642] GetSystemMetrics (nIndex=33) returned 4 [0119.642] CloseThemeData () returned 0x0 [0119.642] capGetDriverDescriptionA () returned 0x0 [0119.643] GetLastError () returned 0x0 [0119.643] SetLastError (dwErrCode=0x0) [0119.643] OpenThemeData () returned 0x2530000 [0119.643] GetSystemMetrics (nIndex=32) returned 4 [0119.643] GetSystemMetrics (nIndex=33) returned 4 [0119.643] CloseThemeData () returned 0x0 [0119.644] capGetDriverDescriptionA () returned 0x0 [0119.645] GetLastError () returned 0x0 [0119.645] SetLastError (dwErrCode=0x0) [0119.645] OpenThemeData () returned 0x2540000 [0119.645] GetSystemMetrics (nIndex=32) returned 4 [0119.645] GetSystemMetrics (nIndex=33) returned 4 [0119.645] CloseThemeData () returned 0x0 [0119.645] capGetDriverDescriptionA () returned 0x0 [0119.646] GetLastError () returned 0x0 [0119.646] SetLastError (dwErrCode=0x0) [0119.646] OpenThemeData () returned 0x2550000 [0119.646] GetSystemMetrics (nIndex=32) returned 4 [0119.646] GetSystemMetrics (nIndex=33) returned 4 [0119.646] CloseThemeData () returned 0x0 [0119.647] capGetDriverDescriptionA () returned 0x0 [0119.647] GetLastError () returned 0x0 [0119.647] SetLastError (dwErrCode=0x0) [0119.647] OpenThemeData () returned 0x2560000 [0119.648] GetSystemMetrics (nIndex=32) returned 4 [0119.648] GetSystemMetrics (nIndex=33) returned 4 [0119.648] CloseThemeData () returned 0x0 [0119.648] capGetDriverDescriptionA () returned 0x0 [0119.649] GetLastError () returned 0x0 [0119.649] SetLastError (dwErrCode=0x0) [0119.649] OpenThemeData () returned 0x2570000 [0119.649] GetSystemMetrics (nIndex=32) returned 4 [0119.649] GetSystemMetrics (nIndex=33) returned 4 [0119.649] CloseThemeData () returned 0x0 [0119.650] capGetDriverDescriptionA () returned 0x0 [0119.650] GetLastError () returned 0x0 [0119.650] SetLastError (dwErrCode=0x0) [0119.650] OpenThemeData () returned 0x2580000 [0119.651] GetSystemMetrics (nIndex=32) returned 4 [0119.651] GetSystemMetrics (nIndex=33) returned 4 [0119.651] CloseThemeData () returned 0x0 [0119.651] capGetDriverDescriptionA () returned 0x0 [0119.652] GetLastError () returned 0x0 [0119.652] SetLastError (dwErrCode=0x0) [0119.652] OpenThemeData () returned 0x2590000 [0119.652] GetSystemMetrics (nIndex=32) returned 4 [0119.652] GetSystemMetrics (nIndex=33) returned 4 [0119.652] CloseThemeData () returned 0x0 [0119.653] capGetDriverDescriptionA () returned 0x0 [0119.653] GetLastError () returned 0x0 [0119.653] SetLastError (dwErrCode=0x0) [0119.653] OpenThemeData () returned 0x25a0000 [0119.654] GetSystemMetrics (nIndex=32) returned 4 [0119.654] GetSystemMetrics (nIndex=33) returned 4 [0119.654] CloseThemeData () returned 0x0 [0119.654] capGetDriverDescriptionA () returned 0x0 [0119.655] GetLastError () returned 0x0 [0119.655] SetLastError (dwErrCode=0x0) [0119.655] OpenThemeData () returned 0x25b0000 [0119.655] GetSystemMetrics (nIndex=32) returned 4 [0119.655] GetSystemMetrics (nIndex=33) returned 4 [0119.655] CloseThemeData () returned 0x0 [0119.655] capGetDriverDescriptionA () returned 0x0 [0119.656] GetLastError () returned 0x0 [0119.656] SetLastError (dwErrCode=0x0) [0119.656] OpenThemeData () returned 0x25c0000 [0119.656] GetSystemMetrics (nIndex=32) returned 4 [0119.657] GetSystemMetrics (nIndex=33) returned 4 [0119.657] CloseThemeData () returned 0x0 [0119.657] capGetDriverDescriptionA () returned 0x0 [0119.658] GetLastError () returned 0x0 [0119.658] SetLastError (dwErrCode=0x0) [0119.658] OpenThemeData () returned 0x25d0000 [0119.658] GetSystemMetrics (nIndex=32) returned 4 [0119.658] GetSystemMetrics (nIndex=33) returned 4 [0119.658] CloseThemeData () returned 0x0 [0119.658] capGetDriverDescriptionA () returned 0x0 [0119.659] GetLastError () returned 0x0 [0119.659] SetLastError (dwErrCode=0x0) [0119.659] OpenThemeData () returned 0x25e0000 [0119.660] GetSystemMetrics (nIndex=32) returned 4 [0119.660] GetSystemMetrics (nIndex=33) returned 4 [0119.660] CloseThemeData () returned 0x0 [0119.662] capGetDriverDescriptionA () returned 0x0 [0119.663] GetLastError () returned 0x0 [0119.663] SetLastError (dwErrCode=0x0) [0119.663] OpenThemeData () returned 0x25f0000 [0119.663] GetSystemMetrics (nIndex=32) returned 4 [0119.663] GetSystemMetrics (nIndex=33) returned 4 [0119.663] CloseThemeData () returned 0x0 [0119.664] capGetDriverDescriptionA () returned 0x0 [0119.665] GetLastError () returned 0x0 [0119.665] SetLastError (dwErrCode=0x0) [0119.665] OpenThemeData () returned 0x2600000 [0119.665] GetSystemMetrics (nIndex=32) returned 4 [0119.665] GetSystemMetrics (nIndex=33) returned 4 [0119.665] CloseThemeData () returned 0x0 [0119.665] capGetDriverDescriptionA () returned 0x0 [0119.666] GetLastError () returned 0x0 [0119.666] SetLastError (dwErrCode=0x0) [0119.666] OpenThemeData () returned 0x2610000 [0119.666] GetSystemMetrics (nIndex=32) returned 4 [0119.666] GetSystemMetrics (nIndex=33) returned 4 [0119.666] CloseThemeData () returned 0x0 [0119.667] capGetDriverDescriptionA () returned 0x0 [0119.667] GetLastError () returned 0x0 [0119.667] SetLastError (dwErrCode=0x0) [0119.667] OpenThemeData () returned 0x2620000 [0119.668] GetSystemMetrics (nIndex=32) returned 4 [0119.668] GetSystemMetrics (nIndex=33) returned 4 [0119.668] CloseThemeData () returned 0x0 [0120.207] capGetDriverDescriptionA () returned 0x0 [0120.208] GetLastError () returned 0x0 [0120.208] SetLastError (dwErrCode=0x0) [0120.208] OpenThemeData () returned 0x2630000 [0120.208] GetSystemMetrics (nIndex=32) returned 4 [0120.208] GetSystemMetrics (nIndex=33) returned 4 [0120.208] CloseThemeData () returned 0x0 [0120.209] capGetDriverDescriptionA () returned 0x0 [0120.209] GetLastError () returned 0x0 [0120.209] SetLastError (dwErrCode=0x0) [0120.209] OpenThemeData () returned 0x2640000 [0120.210] GetSystemMetrics (nIndex=32) returned 4 [0120.210] GetSystemMetrics (nIndex=33) returned 4 [0120.210] CloseThemeData () returned 0x0 [0120.210] capGetDriverDescriptionA () returned 0x0 [0120.211] GetLastError () returned 0x0 [0120.211] SetLastError (dwErrCode=0x0) [0120.211] OpenThemeData () returned 0x2650000 [0120.211] GetSystemMetrics (nIndex=32) returned 4 [0120.211] GetSystemMetrics (nIndex=33) returned 4 [0120.211] CloseThemeData () returned 0x0 [0120.212] capGetDriverDescriptionA () returned 0x0 [0120.212] GetLastError () returned 0x0 [0120.212] SetLastError (dwErrCode=0x0) [0120.212] OpenThemeData () returned 0x2660000 [0120.213] GetSystemMetrics (nIndex=32) returned 4 [0120.213] GetSystemMetrics (nIndex=33) returned 4 [0120.213] CloseThemeData () returned 0x0 [0120.213] capGetDriverDescriptionA () returned 0x0 [0120.214] GetLastError () returned 0x0 [0120.214] SetLastError (dwErrCode=0x0) [0120.214] OpenThemeData () returned 0x2670000 [0120.214] GetSystemMetrics (nIndex=32) returned 4 [0120.214] GetSystemMetrics (nIndex=33) returned 4 [0120.214] CloseThemeData () returned 0x0 [0120.214] capGetDriverDescriptionA () returned 0x0 [0120.215] GetLastError () returned 0x0 [0120.215] SetLastError (dwErrCode=0x0) [0120.215] OpenThemeData () returned 0x2680000 [0120.215] GetSystemMetrics (nIndex=32) returned 4 [0120.215] GetSystemMetrics (nIndex=33) returned 4 [0120.216] CloseThemeData () returned 0x0 [0120.216] capGetDriverDescriptionA () returned 0x0 [0120.217] GetLastError () returned 0x0 [0120.217] SetLastError (dwErrCode=0x0) [0120.217] OpenThemeData () returned 0x2690000 [0120.217] GetSystemMetrics (nIndex=32) returned 4 [0120.217] GetSystemMetrics (nIndex=33) returned 4 [0120.217] CloseThemeData () returned 0x0 [0120.218] capGetDriverDescriptionA () returned 0x0 [0120.218] GetLastError () returned 0x0 [0120.218] SetLastError (dwErrCode=0x0) [0120.218] OpenThemeData () returned 0x26a0000 [0120.219] GetSystemMetrics (nIndex=32) returned 4 [0120.219] GetSystemMetrics (nIndex=33) returned 4 [0120.219] CloseThemeData () returned 0x0 [0120.219] capGetDriverDescriptionA () returned 0x0 [0120.220] GetLastError () returned 0x0 [0120.220] SetLastError (dwErrCode=0x0) [0120.220] OpenThemeData () returned 0x26b0000 [0120.220] GetSystemMetrics (nIndex=32) returned 4 [0120.220] GetSystemMetrics (nIndex=33) returned 4 [0120.220] CloseThemeData () returned 0x0 [0120.221] capGetDriverDescriptionA () returned 0x0 [0120.221] GetLastError () returned 0x0 [0120.222] SetLastError (dwErrCode=0x0) [0120.222] OpenThemeData () returned 0x26c0000 [0120.222] GetSystemMetrics (nIndex=32) returned 4 [0120.222] GetSystemMetrics (nIndex=33) returned 4 [0120.222] CloseThemeData () returned 0x0 [0120.222] capGetDriverDescriptionA () returned 0x0 [0120.223] GetLastError () returned 0x0 [0120.223] SetLastError (dwErrCode=0x0) [0120.223] OpenThemeData () returned 0x26d0000 [0120.223] GetSystemMetrics (nIndex=32) returned 4 [0120.223] GetSystemMetrics (nIndex=33) returned 4 [0120.224] CloseThemeData () returned 0x0 [0120.224] capGetDriverDescriptionA () returned 0x0 [0120.224] GetLastError () returned 0x0 [0120.224] SetLastError (dwErrCode=0x0) [0120.224] OpenThemeData () returned 0x26e0000 [0120.225] GetSystemMetrics (nIndex=32) returned 4 [0120.225] GetSystemMetrics (nIndex=33) returned 4 [0120.225] CloseThemeData () returned 0x0 [0120.225] capGetDriverDescriptionA () returned 0x0 [0120.226] GetLastError () returned 0x0 [0120.226] SetLastError (dwErrCode=0x0) [0120.226] OpenThemeData () returned 0x26f0000 [0120.227] GetSystemMetrics (nIndex=32) returned 4 [0120.227] GetSystemMetrics (nIndex=33) returned 4 [0120.227] CloseThemeData () returned 0x0 [0120.227] capGetDriverDescriptionA () returned 0x0 [0120.227] GetLastError () returned 0x0 [0120.228] SetLastError (dwErrCode=0x0) [0120.228] OpenThemeData () returned 0x2700000 [0120.228] GetSystemMetrics (nIndex=32) returned 4 [0120.228] GetSystemMetrics (nIndex=33) returned 4 [0120.228] CloseThemeData () returned 0x0 [0120.228] capGetDriverDescriptionA () returned 0x0 [0120.229] GetLastError () returned 0x0 [0120.229] SetLastError (dwErrCode=0x0) [0120.229] OpenThemeData () returned 0x2710000 [0120.229] GetSystemMetrics (nIndex=32) returned 4 [0120.229] GetSystemMetrics (nIndex=33) returned 4 [0120.229] CloseThemeData () returned 0x0 [0120.230] capGetDriverDescriptionA () returned 0x0 [0120.231] GetLastError () returned 0x0 [0120.231] SetLastError (dwErrCode=0x0) [0120.231] OpenThemeData () returned 0x2720000 [0120.231] GetSystemMetrics (nIndex=32) returned 4 [0120.231] GetSystemMetrics (nIndex=33) returned 4 [0120.231] CloseThemeData () returned 0x0 [0120.231] capGetDriverDescriptionA () returned 0x0 [0120.232] GetLastError () returned 0x0 [0120.232] SetLastError (dwErrCode=0x0) [0120.232] OpenThemeData () returned 0x2730000 [0120.233] GetSystemMetrics (nIndex=32) returned 4 [0120.233] GetSystemMetrics (nIndex=33) returned 4 [0120.233] CloseThemeData () returned 0x0 [0120.233] capGetDriverDescriptionA () returned 0x0 [0120.233] GetLastError () returned 0x0 [0120.234] SetLastError (dwErrCode=0x0) [0120.234] OpenThemeData () returned 0x2740000 [0120.234] GetSystemMetrics (nIndex=32) returned 4 [0120.234] GetSystemMetrics (nIndex=33) returned 4 [0120.234] CloseThemeData () returned 0x0 [0120.234] capGetDriverDescriptionA () returned 0x0 [0120.235] GetLastError () returned 0x0 [0120.235] SetLastError (dwErrCode=0x0) [0120.235] OpenThemeData () returned 0x2750000 [0120.236] GetSystemMetrics (nIndex=32) returned 4 [0120.236] GetSystemMetrics (nIndex=33) returned 4 [0120.236] CloseThemeData () returned 0x0 [0120.236] capGetDriverDescriptionA () returned 0x0 [0120.237] GetLastError () returned 0x0 [0120.237] SetLastError (dwErrCode=0x0) [0120.237] OpenThemeData () returned 0x2760000 [0120.237] GetSystemMetrics (nIndex=32) returned 4 [0120.237] GetSystemMetrics (nIndex=33) returned 4 [0120.237] CloseThemeData () returned 0x0 [0120.238] capGetDriverDescriptionA () returned 0x0 [0120.238] GetLastError () returned 0x0 [0120.238] SetLastError (dwErrCode=0x0) [0120.238] OpenThemeData () returned 0x2770000 [0120.239] GetSystemMetrics (nIndex=32) returned 4 [0120.239] GetSystemMetrics (nIndex=33) returned 4 [0120.239] CloseThemeData () returned 0x0 [0120.492] capGetDriverDescriptionA () returned 0x0 [0120.493] GetLastError () returned 0x0 [0120.493] SetLastError (dwErrCode=0x0) [0120.493] OpenThemeData () returned 0x2780000 [0120.493] GetSystemMetrics (nIndex=32) returned 4 [0120.493] GetSystemMetrics (nIndex=33) returned 4 [0120.493] CloseThemeData () returned 0x0 [0120.493] capGetDriverDescriptionA () returned 0x0 [0120.494] GetLastError () returned 0x0 [0120.494] SetLastError (dwErrCode=0x0) [0120.494] OpenThemeData () returned 0x2790000 [0120.495] GetSystemMetrics (nIndex=32) returned 4 [0120.495] GetSystemMetrics (nIndex=33) returned 4 [0120.495] CloseThemeData () returned 0x0 [0120.495] capGetDriverDescriptionA () returned 0x0 [0120.495] GetLastError () returned 0x0 [0120.496] SetLastError (dwErrCode=0x0) [0120.496] OpenThemeData () returned 0x27a0000 [0120.496] GetSystemMetrics (nIndex=32) returned 4 [0120.496] GetSystemMetrics (nIndex=33) returned 4 [0120.496] CloseThemeData () returned 0x0 [0120.497] capGetDriverDescriptionA () returned 0x0 [0120.497] GetLastError () returned 0x0 [0120.497] SetLastError (dwErrCode=0x0) [0120.497] OpenThemeData () returned 0x27b0000 [0120.498] GetSystemMetrics (nIndex=32) returned 4 [0120.498] GetSystemMetrics (nIndex=33) returned 4 [0120.498] CloseThemeData () returned 0x0 [0120.498] capGetDriverDescriptionA () returned 0x0 [0120.499] GetLastError () returned 0x0 [0120.499] SetLastError (dwErrCode=0x0) [0120.499] OpenThemeData () returned 0x27c0000 [0120.499] GetSystemMetrics (nIndex=32) returned 4 [0120.499] GetSystemMetrics (nIndex=33) returned 4 [0120.499] CloseThemeData () returned 0x0 [0120.499] capGetDriverDescriptionA () returned 0x0 [0120.500] GetLastError () returned 0x0 [0120.500] SetLastError (dwErrCode=0x0) [0120.500] OpenThemeData () returned 0x27d0000 [0120.501] GetSystemMetrics (nIndex=32) returned 4 [0120.501] GetSystemMetrics (nIndex=33) returned 4 [0120.501] CloseThemeData () returned 0x0 [0120.501] capGetDriverDescriptionA () returned 0x0 [0120.502] GetLastError () returned 0x0 [0120.502] SetLastError (dwErrCode=0x0) [0120.502] OpenThemeData () returned 0x27e0000 [0120.502] GetSystemMetrics (nIndex=32) returned 4 [0120.502] GetSystemMetrics (nIndex=33) returned 4 [0120.502] CloseThemeData () returned 0x0 [0120.502] capGetDriverDescriptionA () returned 0x0 [0120.503] GetLastError () returned 0x0 [0120.503] SetLastError (dwErrCode=0x0) [0120.503] OpenThemeData () returned 0x27f0000 [0120.504] GetSystemMetrics (nIndex=32) returned 4 [0120.504] GetSystemMetrics (nIndex=33) returned 4 [0120.504] CloseThemeData () returned 0x0 [0120.504] capGetDriverDescriptionA () returned 0x0 [0120.504] GetLastError () returned 0x0 [0120.504] SetLastError (dwErrCode=0x0) [0120.505] OpenThemeData () returned 0x2800000 [0120.505] GetSystemMetrics (nIndex=32) returned 4 [0120.505] GetSystemMetrics (nIndex=33) returned 4 [0120.505] CloseThemeData () returned 0x0 [0120.505] capGetDriverDescriptionA () returned 0x0 [0120.506] GetLastError () returned 0x0 [0120.506] SetLastError (dwErrCode=0x0) [0120.506] OpenThemeData () returned 0x2810000 [0120.507] GetSystemMetrics (nIndex=32) returned 4 [0120.507] GetSystemMetrics (nIndex=33) returned 4 [0120.507] CloseThemeData () returned 0x0 [0120.507] capGetDriverDescriptionA () returned 0x0 [0120.508] GetLastError () returned 0x0 [0120.508] SetLastError (dwErrCode=0x0) [0120.508] OpenThemeData () returned 0x2820000 [0120.508] GetSystemMetrics (nIndex=32) returned 4 [0120.508] GetSystemMetrics (nIndex=33) returned 4 [0120.508] CloseThemeData () returned 0x0 [0120.508] capGetDriverDescriptionA () returned 0x0 [0120.509] GetLastError () returned 0x0 [0120.509] SetLastError (dwErrCode=0x0) [0120.509] OpenThemeData () returned 0x2830000 [0120.510] GetSystemMetrics (nIndex=32) returned 4 [0120.510] GetSystemMetrics (nIndex=33) returned 4 [0120.510] CloseThemeData () returned 0x0 [0120.510] capGetDriverDescriptionA () returned 0x0 [0120.511] GetLastError () returned 0x0 [0120.511] SetLastError (dwErrCode=0x0) [0120.511] OpenThemeData () returned 0x2840000 [0120.511] GetSystemMetrics (nIndex=32) returned 4 [0120.511] GetSystemMetrics (nIndex=33) returned 4 [0120.511] CloseThemeData () returned 0x0 [0120.512] capGetDriverDescriptionA () returned 0x0 [0120.512] GetLastError () returned 0x0 [0120.512] SetLastError (dwErrCode=0x0) [0120.512] OpenThemeData () returned 0x2850000 [0120.513] GetSystemMetrics (nIndex=32) returned 4 [0120.513] GetSystemMetrics (nIndex=33) returned 4 [0120.513] CloseThemeData () returned 0x0 [0120.513] capGetDriverDescriptionA () returned 0x0 [0120.514] GetLastError () returned 0x0 [0120.514] SetLastError (dwErrCode=0x0) [0120.514] OpenThemeData () returned 0x2860000 [0120.514] GetSystemMetrics (nIndex=32) returned 4 [0120.514] GetSystemMetrics (nIndex=33) returned 4 [0120.514] CloseThemeData () returned 0x0 [0120.515] capGetDriverDescriptionA () returned 0x0 [0120.515] GetLastError () returned 0x0 [0120.515] SetLastError (dwErrCode=0x0) [0120.515] OpenThemeData () returned 0x2870000 [0120.516] GetSystemMetrics (nIndex=32) returned 4 [0120.516] GetSystemMetrics (nIndex=33) returned 4 [0120.516] CloseThemeData () returned 0x0 [0120.516] capGetDriverDescriptionA () returned 0x0 [0120.517] GetLastError () returned 0x0 [0120.517] SetLastError (dwErrCode=0x0) [0120.517] OpenThemeData () returned 0x2880000 [0120.517] GetSystemMetrics (nIndex=32) returned 4 [0120.517] GetSystemMetrics (nIndex=33) returned 4 [0120.517] CloseThemeData () returned 0x0 [0120.518] capGetDriverDescriptionA () returned 0x0 [0120.518] GetLastError () returned 0x0 [0120.518] SetLastError (dwErrCode=0x0) [0120.518] OpenThemeData () returned 0x2890000 [0120.519] GetSystemMetrics (nIndex=32) returned 4 [0120.519] GetSystemMetrics (nIndex=33) returned 4 [0120.519] CloseThemeData () returned 0x0 [0120.520] capGetDriverDescriptionA () returned 0x0 [0120.520] GetLastError () returned 0x0 [0120.520] SetLastError (dwErrCode=0x0) [0120.520] OpenThemeData () returned 0x28a0000 [0120.521] GetSystemMetrics (nIndex=32) returned 4 [0120.521] GetSystemMetrics (nIndex=33) returned 4 [0120.521] CloseThemeData () returned 0x0 [0120.521] capGetDriverDescriptionA () returned 0x0 [0120.522] GetLastError () returned 0x0 [0120.522] SetLastError (dwErrCode=0x0) [0120.522] OpenThemeData () returned 0x28b0000 [0120.522] GetSystemMetrics (nIndex=32) returned 4 [0120.522] GetSystemMetrics (nIndex=33) returned 4 [0120.522] CloseThemeData () returned 0x0 [0120.523] capGetDriverDescriptionA () returned 0x0 [0120.523] GetLastError () returned 0x0 [0120.523] SetLastError (dwErrCode=0x0) [0120.523] OpenThemeData () returned 0x28c0000 [0120.524] GetSystemMetrics (nIndex=32) returned 4 [0120.524] GetSystemMetrics (nIndex=33) returned 4 [0120.524] CloseThemeData () returned 0x0 [0120.524] capGetDriverDescriptionA () returned 0x0 [0120.525] GetLastError () returned 0x0 [0120.525] SetLastError (dwErrCode=0x0) [0120.525] OpenThemeData () returned 0x28d0000 [0120.527] GetSystemMetrics (nIndex=32) returned 4 [0120.527] GetSystemMetrics (nIndex=33) returned 4 [0120.527] CloseThemeData () returned 0x0 [0120.528] capGetDriverDescriptionA () returned 0x0 [0120.528] GetLastError () returned 0x0 [0120.528] SetLastError (dwErrCode=0x0) [0120.528] OpenThemeData () returned 0x28e0000 [0120.529] GetSystemMetrics (nIndex=32) returned 4 [0120.529] GetSystemMetrics (nIndex=33) returned 4 [0120.529] CloseThemeData () returned 0x0 [0120.529] capGetDriverDescriptionA () returned 0x0 [0120.530] GetLastError () returned 0x0 [0120.530] SetLastError (dwErrCode=0x0) [0120.530] OpenThemeData () returned 0x28f0000 [0120.530] GetSystemMetrics (nIndex=32) returned 4 [0120.530] GetSystemMetrics (nIndex=33) returned 4 [0120.530] CloseThemeData () returned 0x0 [0121.007] capGetDriverDescriptionA () returned 0x0 [0121.007] GetLastError () returned 0x0 [0121.007] SetLastError (dwErrCode=0x0) [0121.007] OpenThemeData () returned 0x2900000 [0121.008] GetSystemMetrics (nIndex=32) returned 4 [0121.008] GetSystemMetrics (nIndex=33) returned 4 [0121.008] CloseThemeData () returned 0x0 [0121.008] capGetDriverDescriptionA () returned 0x0 [0121.009] GetLastError () returned 0x0 [0121.009] SetLastError (dwErrCode=0x0) [0121.009] OpenThemeData () returned 0x2910000 [0121.009] GetSystemMetrics (nIndex=32) returned 4 [0121.009] GetSystemMetrics (nIndex=33) returned 4 [0121.010] CloseThemeData () returned 0x0 [0121.010] capGetDriverDescriptionA () returned 0x0 [0121.010] GetLastError () returned 0x0 [0121.010] SetLastError (dwErrCode=0x0) [0121.010] OpenThemeData () returned 0x2920000 [0121.011] GetSystemMetrics (nIndex=32) returned 4 [0121.011] GetSystemMetrics (nIndex=33) returned 4 [0121.011] CloseThemeData () returned 0x0 [0121.011] capGetDriverDescriptionA () returned 0x0 [0121.012] GetLastError () returned 0x0 [0121.012] SetLastError (dwErrCode=0x0) [0121.012] OpenThemeData () returned 0x2930000 [0121.013] GetSystemMetrics (nIndex=32) returned 4 [0121.013] GetSystemMetrics (nIndex=33) returned 4 [0121.013] CloseThemeData () returned 0x0 [0121.013] capGetDriverDescriptionA () returned 0x0 [0121.013] GetLastError () returned 0x0 [0121.014] SetLastError (dwErrCode=0x0) [0121.014] OpenThemeData () returned 0x2940000 [0121.014] GetSystemMetrics (nIndex=32) returned 4 [0121.014] GetSystemMetrics (nIndex=33) returned 4 [0121.014] CloseThemeData () returned 0x0 [0121.014] capGetDriverDescriptionA () returned 0x0 [0121.015] GetLastError () returned 0x0 [0121.015] SetLastError (dwErrCode=0x0) [0121.015] OpenThemeData () returned 0x2950000 [0121.016] GetSystemMetrics (nIndex=32) returned 4 [0121.016] GetSystemMetrics (nIndex=33) returned 4 [0121.016] CloseThemeData () returned 0x0 [0121.016] capGetDriverDescriptionA () returned 0x0 [0121.017] GetLastError () returned 0x0 [0121.017] SetLastError (dwErrCode=0x0) [0121.017] OpenThemeData () returned 0x2960000 [0121.017] GetSystemMetrics (nIndex=32) returned 4 [0121.017] GetSystemMetrics (nIndex=33) returned 4 [0121.017] CloseThemeData () returned 0x0 [0121.018] capGetDriverDescriptionA () returned 0x0 [0121.018] GetLastError () returned 0x0 [0121.018] SetLastError (dwErrCode=0x0) [0121.018] OpenThemeData () returned 0x2970000 [0121.019] GetSystemMetrics (nIndex=32) returned 4 [0121.019] GetSystemMetrics (nIndex=33) returned 4 [0121.019] CloseThemeData () returned 0x0 [0121.020] capGetDriverDescriptionA () returned 0x0 [0121.020] GetLastError () returned 0x0 [0121.020] SetLastError (dwErrCode=0x0) [0121.020] OpenThemeData () returned 0x2980000 [0121.021] GetSystemMetrics (nIndex=32) returned 4 [0121.021] GetSystemMetrics (nIndex=33) returned 4 [0121.021] CloseThemeData () returned 0x0 [0121.021] capGetDriverDescriptionA () returned 0x0 [0121.022] GetLastError () returned 0x0 [0121.022] SetLastError (dwErrCode=0x0) [0121.022] OpenThemeData () returned 0x2990000 [0121.022] GetSystemMetrics (nIndex=32) returned 4 [0121.022] GetSystemMetrics (nIndex=33) returned 4 [0121.022] CloseThemeData () returned 0x0 [0121.023] capGetDriverDescriptionA () returned 0x0 [0121.023] GetLastError () returned 0x0 [0121.023] SetLastError (dwErrCode=0x0) [0121.023] OpenThemeData () returned 0x29a0000 [0121.024] GetSystemMetrics (nIndex=32) returned 4 [0121.024] GetSystemMetrics (nIndex=33) returned 4 [0121.024] CloseThemeData () returned 0x0 [0121.024] capGetDriverDescriptionA () returned 0x0 [0121.025] GetLastError () returned 0x0 [0121.025] SetLastError (dwErrCode=0x0) [0121.025] OpenThemeData () returned 0x29b0000 [0121.025] GetSystemMetrics (nIndex=32) returned 4 [0121.025] GetSystemMetrics (nIndex=33) returned 4 [0121.025] CloseThemeData () returned 0x0 [0121.026] capGetDriverDescriptionA () returned 0x0 [0121.027] GetLastError () returned 0x0 [0121.027] SetLastError (dwErrCode=0x0) [0121.027] OpenThemeData () returned 0x29c0000 [0121.027] GetSystemMetrics (nIndex=32) returned 4 [0121.027] GetSystemMetrics (nIndex=33) returned 4 [0121.027] CloseThemeData () returned 0x0 [0121.027] capGetDriverDescriptionA () returned 0x0 [0121.028] GetLastError () returned 0x0 [0121.028] SetLastError (dwErrCode=0x0) [0121.028] OpenThemeData () returned 0x29d0000 [0121.030] GetSystemMetrics (nIndex=32) returned 4 [0121.030] GetSystemMetrics (nIndex=33) returned 4 [0121.030] CloseThemeData () returned 0x0 [0121.030] capGetDriverDescriptionA () returned 0x0 [0121.031] GetLastError () returned 0x0 [0121.031] SetLastError (dwErrCode=0x0) [0121.031] OpenThemeData () returned 0x29e0000 [0121.031] GetSystemMetrics (nIndex=32) returned 4 [0121.031] GetSystemMetrics (nIndex=33) returned 4 [0121.031] CloseThemeData () returned 0x0 [0121.032] capGetDriverDescriptionA () returned 0x0 [0121.032] GetLastError () returned 0x0 [0121.032] SetLastError (dwErrCode=0x0) [0121.032] OpenThemeData () returned 0x29f0000 [0121.033] GetSystemMetrics (nIndex=32) returned 4 [0121.033] GetSystemMetrics (nIndex=33) returned 4 [0121.033] CloseThemeData () returned 0x0 [0121.033] capGetDriverDescriptionA () returned 0x0 [0121.035] GetLastError () returned 0x0 [0121.035] SetLastError (dwErrCode=0x0) [0121.035] OpenThemeData () returned 0x2a00000 [0121.035] GetSystemMetrics (nIndex=32) returned 4 [0121.035] GetSystemMetrics (nIndex=33) returned 4 [0121.035] CloseThemeData () returned 0x0 [0121.035] capGetDriverDescriptionA () returned 0x0 [0121.036] GetLastError () returned 0x0 [0121.036] SetLastError (dwErrCode=0x0) [0121.036] OpenThemeData () returned 0x2a10000 [0121.037] GetSystemMetrics (nIndex=32) returned 4 [0121.037] GetSystemMetrics (nIndex=33) returned 4 [0121.037] CloseThemeData () returned 0x0 [0121.037] capGetDriverDescriptionA () returned 0x0 [0121.038] GetLastError () returned 0x0 [0121.038] SetLastError (dwErrCode=0x0) [0121.038] OpenThemeData () returned 0x2a20000 [0121.038] GetSystemMetrics (nIndex=32) returned 4 [0121.038] GetSystemMetrics (nIndex=33) returned 4 [0121.038] CloseThemeData () returned 0x0 [0121.039] capGetDriverDescriptionA () returned 0x0 [0121.039] GetLastError () returned 0x0 [0121.039] SetLastError (dwErrCode=0x0) [0121.039] OpenThemeData () returned 0x2a30000 [0121.040] GetSystemMetrics (nIndex=32) returned 4 [0121.040] GetSystemMetrics (nIndex=33) returned 4 [0121.040] CloseThemeData () returned 0x0 [0121.040] capGetDriverDescriptionA () returned 0x0 [0121.041] GetLastError () returned 0x0 [0121.041] SetLastError (dwErrCode=0x0) [0121.041] OpenThemeData () returned 0x2a40000 [0121.041] GetSystemMetrics (nIndex=32) returned 4 [0121.041] GetSystemMetrics (nIndex=33) returned 4 [0121.041] CloseThemeData () returned 0x0 [0121.915] capGetDriverDescriptionA () returned 0x0 [0121.916] GetLastError () returned 0x0 [0121.916] SetLastError (dwErrCode=0x0) [0121.916] OpenThemeData () returned 0x2a50000 [0121.916] GetSystemMetrics (nIndex=32) returned 4 [0121.916] GetSystemMetrics (nIndex=33) returned 4 [0121.916] CloseThemeData () returned 0x0 [0121.917] capGetDriverDescriptionA () returned 0x0 [0121.917] GetLastError () returned 0x0 [0121.917] SetLastError (dwErrCode=0x0) [0121.917] OpenThemeData () returned 0x2a60000 [0121.918] GetSystemMetrics (nIndex=32) returned 4 [0121.918] GetSystemMetrics (nIndex=33) returned 4 [0121.918] CloseThemeData () returned 0x0 [0121.918] capGetDriverDescriptionA () returned 0x0 [0121.919] GetLastError () returned 0x0 [0121.919] SetLastError (dwErrCode=0x0) [0121.919] OpenThemeData () returned 0x2a70000 [0121.919] GetSystemMetrics (nIndex=32) returned 4 [0121.919] GetSystemMetrics (nIndex=33) returned 4 [0121.919] CloseThemeData () returned 0x0 [0121.920] capGetDriverDescriptionA () returned 0x0 [0121.920] GetLastError () returned 0x0 [0121.920] SetLastError (dwErrCode=0x0) [0121.920] OpenThemeData () returned 0x2a80000 [0121.921] GetSystemMetrics (nIndex=32) returned 4 [0121.921] GetSystemMetrics (nIndex=33) returned 4 [0121.921] CloseThemeData () returned 0x0 [0121.921] capGetDriverDescriptionA () returned 0x0 [0121.922] GetLastError () returned 0x0 [0121.922] SetLastError (dwErrCode=0x0) [0121.922] OpenThemeData () returned 0x2a90000 [0121.922] GetSystemMetrics (nIndex=32) returned 4 [0121.922] GetSystemMetrics (nIndex=33) returned 4 [0121.922] CloseThemeData () returned 0x0 [0121.923] capGetDriverDescriptionA () returned 0x0 [0121.923] GetLastError () returned 0x0 [0121.923] SetLastError (dwErrCode=0x0) [0121.923] OpenThemeData () returned 0x2aa0000 [0121.924] GetSystemMetrics (nIndex=32) returned 4 [0121.924] GetSystemMetrics (nIndex=33) returned 4 [0121.924] CloseThemeData () returned 0x0 [0121.924] capGetDriverDescriptionA () returned 0x0 [0121.925] GetLastError () returned 0x0 [0121.925] SetLastError (dwErrCode=0x0) [0121.925] OpenThemeData () returned 0x2ab0000 [0121.925] GetSystemMetrics (nIndex=32) returned 4 [0121.925] GetSystemMetrics (nIndex=33) returned 4 [0121.925] CloseThemeData () returned 0x0 [0121.926] capGetDriverDescriptionA () returned 0x0 [0121.926] GetLastError () returned 0x0 [0121.926] SetLastError (dwErrCode=0x0) [0121.926] OpenThemeData () returned 0x2ac0000 [0121.927] GetSystemMetrics (nIndex=32) returned 4 [0121.927] GetSystemMetrics (nIndex=33) returned 4 [0121.927] CloseThemeData () returned 0x0 [0121.927] capGetDriverDescriptionA () returned 0x0 [0121.928] GetLastError () returned 0x0 [0121.928] SetLastError (dwErrCode=0x0) [0121.928] OpenThemeData () returned 0x2ad0000 [0121.928] GetSystemMetrics (nIndex=32) returned 4 [0121.928] GetSystemMetrics (nIndex=33) returned 4 [0121.928] CloseThemeData () returned 0x0 [0121.929] capGetDriverDescriptionA () returned 0x0 [0121.929] GetLastError () returned 0x0 [0121.929] SetLastError (dwErrCode=0x0) [0121.929] OpenThemeData () returned 0x2ae0000 [0121.930] GetSystemMetrics (nIndex=32) returned 4 [0121.930] GetSystemMetrics (nIndex=33) returned 4 [0121.930] CloseThemeData () returned 0x0 [0121.930] capGetDriverDescriptionA () returned 0x0 [0121.931] GetLastError () returned 0x0 [0121.931] SetLastError (dwErrCode=0x0) [0121.931] OpenThemeData () returned 0x2af0000 [0121.931] GetSystemMetrics (nIndex=32) returned 4 [0121.931] GetSystemMetrics (nIndex=33) returned 4 [0121.931] CloseThemeData () returned 0x0 [0121.931] capGetDriverDescriptionA () returned 0x0 [0121.932] GetLastError () returned 0x0 [0121.932] SetLastError (dwErrCode=0x0) [0121.932] OpenThemeData () returned 0x2b00000 [0121.933] GetSystemMetrics (nIndex=32) returned 4 [0121.933] GetSystemMetrics (nIndex=33) returned 4 [0121.933] CloseThemeData () returned 0x0 [0121.933] capGetDriverDescriptionA () returned 0x0 [0121.934] GetLastError () returned 0x0 [0121.934] SetLastError (dwErrCode=0x0) [0121.934] OpenThemeData () returned 0x2b10000 [0121.934] GetSystemMetrics (nIndex=32) returned 4 [0121.934] GetSystemMetrics (nIndex=33) returned 4 [0121.934] CloseThemeData () returned 0x0 [0121.934] capGetDriverDescriptionA () returned 0x0 [0121.935] GetLastError () returned 0x0 [0121.935] SetLastError (dwErrCode=0x0) [0121.935] OpenThemeData () returned 0x2b20000 [0121.935] GetSystemMetrics (nIndex=32) returned 4 [0121.935] GetSystemMetrics (nIndex=33) returned 4 [0121.935] CloseThemeData () returned 0x0 [0121.936] capGetDriverDescriptionA () returned 0x0 [0121.936] GetLastError () returned 0x0 [0121.936] SetLastError (dwErrCode=0x0) [0121.936] OpenThemeData () returned 0x2b30000 [0121.937] GetSystemMetrics (nIndex=32) returned 4 [0121.937] GetSystemMetrics (nIndex=33) returned 4 [0121.937] CloseThemeData () returned 0x0 [0121.937] capGetDriverDescriptionA () returned 0x0 [0121.938] GetLastError () returned 0x0 [0121.938] SetLastError (dwErrCode=0x0) [0121.938] OpenThemeData () returned 0x2b40000 [0121.938] GetSystemMetrics (nIndex=32) returned 4 [0121.938] GetSystemMetrics (nIndex=33) returned 4 [0121.938] CloseThemeData () returned 0x0 [0121.939] capGetDriverDescriptionA () returned 0x0 [0121.939] GetLastError () returned 0x0 [0121.939] SetLastError (dwErrCode=0x0) [0121.939] OpenThemeData () returned 0x2b50000 [0121.942] GetSystemMetrics (nIndex=32) returned 4 [0121.942] GetSystemMetrics (nIndex=33) returned 4 [0121.942] CloseThemeData () returned 0x0 [0121.942] capGetDriverDescriptionA () returned 0x0 [0121.943] GetLastError () returned 0x0 [0121.943] SetLastError (dwErrCode=0x0) [0121.943] OpenThemeData () returned 0x2b60000 [0121.943] GetSystemMetrics (nIndex=32) returned 4 [0121.943] GetSystemMetrics (nIndex=33) returned 4 [0121.943] CloseThemeData () returned 0x0 [0121.944] capGetDriverDescriptionA () returned 0x0 [0121.944] GetLastError () returned 0x0 [0121.945] SetLastError (dwErrCode=0x0) [0121.945] OpenThemeData () returned 0x2b70000 [0121.945] GetSystemMetrics (nIndex=32) returned 4 [0121.945] GetSystemMetrics (nIndex=33) returned 4 [0121.945] CloseThemeData () returned 0x0 [0121.945] capGetDriverDescriptionA () returned 0x0 [0121.946] GetLastError () returned 0x0 [0121.946] SetLastError (dwErrCode=0x0) [0121.946] OpenThemeData () returned 0x2b80000 [0121.946] GetSystemMetrics (nIndex=32) returned 4 [0121.946] GetSystemMetrics (nIndex=33) returned 4 [0121.946] CloseThemeData () returned 0x0 [0121.947] capGetDriverDescriptionA () returned 0x0 [0121.947] GetLastError () returned 0x0 [0121.947] SetLastError (dwErrCode=0x0) [0121.947] OpenThemeData () returned 0x2b90000 [0121.948] GetSystemMetrics (nIndex=32) returned 4 [0121.948] GetSystemMetrics (nIndex=33) returned 4 [0121.948] CloseThemeData () returned 0x0 [0122.581] capGetDriverDescriptionA () returned 0x0 [0122.582] GetLastError () returned 0x0 [0122.582] SetLastError (dwErrCode=0x0) [0122.582] OpenThemeData () returned 0x2ba0000 [0122.582] GetSystemMetrics (nIndex=32) returned 4 [0122.582] GetSystemMetrics (nIndex=33) returned 4 [0122.582] CloseThemeData () returned 0x0 [0122.583] capGetDriverDescriptionA () returned 0x0 [0122.583] GetLastError () returned 0x0 [0122.583] SetLastError (dwErrCode=0x0) [0122.583] OpenThemeData () returned 0x2bb0000 [0122.584] GetSystemMetrics (nIndex=32) returned 4 [0122.584] GetSystemMetrics (nIndex=33) returned 4 [0122.584] CloseThemeData () returned 0x0 [0122.584] capGetDriverDescriptionA () returned 0x0 [0122.585] GetLastError () returned 0x0 [0122.585] SetLastError (dwErrCode=0x0) [0122.585] OpenThemeData () returned 0x2bc0000 [0122.585] GetSystemMetrics (nIndex=32) returned 4 [0122.585] GetSystemMetrics (nIndex=33) returned 4 [0122.585] CloseThemeData () returned 0x0 [0122.586] capGetDriverDescriptionA () returned 0x0 [0122.586] GetLastError () returned 0x0 [0122.586] SetLastError (dwErrCode=0x0) [0122.586] OpenThemeData () returned 0x2bd0000 [0122.587] GetSystemMetrics (nIndex=32) returned 4 [0122.587] GetSystemMetrics (nIndex=33) returned 4 [0122.587] CloseThemeData () returned 0x0 [0122.587] capGetDriverDescriptionA () returned 0x0 [0122.588] GetLastError () returned 0x0 [0122.588] SetLastError (dwErrCode=0x0) [0122.588] OpenThemeData () returned 0x2be0000 [0122.588] GetSystemMetrics (nIndex=32) returned 4 [0122.588] GetSystemMetrics (nIndex=33) returned 4 [0122.588] CloseThemeData () returned 0x0 [0122.589] capGetDriverDescriptionA () returned 0x0 [0122.589] GetLastError () returned 0x0 [0122.589] SetLastError (dwErrCode=0x0) [0122.589] OpenThemeData () returned 0x2bf0000 [0122.592] GetSystemMetrics (nIndex=32) returned 4 [0122.592] GetSystemMetrics (nIndex=33) returned 4 [0122.592] CloseThemeData () returned 0x0 [0122.593] capGetDriverDescriptionA () returned 0x0 [0122.593] GetLastError () returned 0x0 [0122.593] SetLastError (dwErrCode=0x0) [0122.593] OpenThemeData () returned 0x2c00000 [0122.594] GetSystemMetrics (nIndex=32) returned 4 [0122.594] GetSystemMetrics (nIndex=33) returned 4 [0122.594] CloseThemeData () returned 0x0 [0122.594] capGetDriverDescriptionA () returned 0x0 [0122.594] GetLastError () returned 0x0 [0122.595] SetLastError (dwErrCode=0x0) [0122.595] OpenThemeData () returned 0x2c10000 [0122.595] GetSystemMetrics (nIndex=32) returned 4 [0122.595] GetSystemMetrics (nIndex=33) returned 4 [0122.595] CloseThemeData () returned 0x0 [0122.595] capGetDriverDescriptionA () returned 0x0 [0122.596] GetLastError () returned 0x0 [0122.596] SetLastError (dwErrCode=0x0) [0122.596] OpenThemeData () returned 0x2c20000 [0122.597] GetSystemMetrics (nIndex=32) returned 4 [0122.597] GetSystemMetrics (nIndex=33) returned 4 [0122.597] CloseThemeData () returned 0x0 [0122.597] capGetDriverDescriptionA () returned 0x0 [0122.598] GetLastError () returned 0x0 [0122.598] SetLastError (dwErrCode=0x0) [0122.598] OpenThemeData () returned 0x2c30000 [0122.598] GetSystemMetrics (nIndex=32) returned 4 [0122.598] GetSystemMetrics (nIndex=33) returned 4 [0122.598] CloseThemeData () returned 0x0 [0122.598] capGetDriverDescriptionA () returned 0x0 [0122.599] GetLastError () returned 0x0 [0122.599] SetLastError (dwErrCode=0x0) [0122.599] OpenThemeData () returned 0x2c40000 [0122.600] GetSystemMetrics (nIndex=32) returned 4 [0122.600] GetSystemMetrics (nIndex=33) returned 4 [0122.600] CloseThemeData () returned 0x0 [0122.600] capGetDriverDescriptionA () returned 0x0 [0122.600] GetLastError () returned 0x0 [0122.601] SetLastError (dwErrCode=0x0) [0122.601] OpenThemeData () returned 0x2c50000 [0122.601] GetSystemMetrics (nIndex=32) returned 4 [0122.601] GetSystemMetrics (nIndex=33) returned 4 [0122.601] CloseThemeData () returned 0x0 [0122.601] capGetDriverDescriptionA () returned 0x0 [0122.602] GetLastError () returned 0x0 [0122.602] SetLastError (dwErrCode=0x0) [0122.602] OpenThemeData () returned 0x2c60000 [0122.602] GetSystemMetrics (nIndex=32) returned 4 [0122.602] GetSystemMetrics (nIndex=33) returned 4 [0122.602] CloseThemeData () returned 0x0 [0122.603] capGetDriverDescriptionA () returned 0x0 [0122.603] GetLastError () returned 0x0 [0122.603] SetLastError (dwErrCode=0x0) [0122.603] OpenThemeData () returned 0x2c70000 [0122.604] GetSystemMetrics (nIndex=32) returned 4 [0122.604] GetSystemMetrics (nIndex=33) returned 4 [0122.604] CloseThemeData () returned 0x0 [0122.604] capGetDriverDescriptionA () returned 0x0 [0122.605] GetLastError () returned 0x0 [0122.605] SetLastError (dwErrCode=0x0) [0122.605] OpenThemeData () returned 0x2c80000 [0122.605] GetSystemMetrics (nIndex=32) returned 4 [0122.605] GetSystemMetrics (nIndex=33) returned 4 [0122.605] CloseThemeData () returned 0x0 [0122.606] capGetDriverDescriptionA () returned 0x0 [0122.606] GetLastError () returned 0x0 [0122.606] SetLastError (dwErrCode=0x0) [0122.606] OpenThemeData () returned 0x2c90000 [0122.607] GetSystemMetrics (nIndex=32) returned 4 [0122.607] GetSystemMetrics (nIndex=33) returned 4 [0122.607] CloseThemeData () returned 0x0 [0122.607] capGetDriverDescriptionA () returned 0x0 [0122.608] GetLastError () returned 0x0 [0122.608] SetLastError (dwErrCode=0x0) [0122.608] OpenThemeData () returned 0x2ca0000 [0122.608] GetSystemMetrics (nIndex=32) returned 4 [0122.608] GetSystemMetrics (nIndex=33) returned 4 [0122.608] CloseThemeData () returned 0x0 [0122.609] capGetDriverDescriptionA () returned 0x0 [0122.609] GetLastError () returned 0x0 [0122.609] SetLastError (dwErrCode=0x0) [0122.609] OpenThemeData () returned 0x2cb0000 [0122.610] GetSystemMetrics (nIndex=32) returned 4 [0122.610] GetSystemMetrics (nIndex=33) returned 4 [0122.610] CloseThemeData () returned 0x0 [0122.610] capGetDriverDescriptionA () returned 0x0 [0122.611] GetLastError () returned 0x0 [0122.611] SetLastError (dwErrCode=0x0) [0122.611] OpenThemeData () returned 0x2cc0000 [0122.611] GetSystemMetrics (nIndex=32) returned 4 [0122.611] GetSystemMetrics (nIndex=33) returned 4 [0122.611] CloseThemeData () returned 0x0 [0122.612] capGetDriverDescriptionA () returned 0x0 [0122.612] GetLastError () returned 0x0 [0122.612] SetLastError (dwErrCode=0x0) [0122.612] OpenThemeData () returned 0x2cd0000 [0122.613] GetSystemMetrics (nIndex=32) returned 4 [0122.613] GetSystemMetrics (nIndex=33) returned 4 [0122.613] CloseThemeData () returned 0x0 [0122.613] capGetDriverDescriptionA () returned 0x0 [0122.614] GetLastError () returned 0x0 [0122.614] SetLastError (dwErrCode=0x0) [0122.614] OpenThemeData () returned 0x2ce0000 [0122.614] GetSystemMetrics (nIndex=32) returned 4 [0122.614] GetSystemMetrics (nIndex=33) returned 4 [0122.614] CloseThemeData () returned 0x0 [0122.615] capGetDriverDescriptionA () returned 0x0 [0122.615] GetLastError () returned 0x0 [0122.615] SetLastError (dwErrCode=0x0) [0122.615] OpenThemeData () returned 0x2cf0000 [0122.616] GetSystemMetrics (nIndex=32) returned 4 [0122.616] GetSystemMetrics (nIndex=33) returned 4 [0122.616] CloseThemeData () returned 0x0 [0122.616] capGetDriverDescriptionA () returned 0x0 [0122.617] GetLastError () returned 0x0 [0122.617] SetLastError (dwErrCode=0x0) [0122.617] OpenThemeData () returned 0x2d00000 [0122.617] GetSystemMetrics (nIndex=32) returned 4 [0122.617] GetSystemMetrics (nIndex=33) returned 4 [0122.617] CloseThemeData () returned 0x0 [0122.617] capGetDriverDescriptionA () returned 0x0 [0122.618] GetLastError () returned 0x0 [0122.618] SetLastError (dwErrCode=0x0) [0122.618] OpenThemeData () returned 0x2d10000 [0122.619] GetSystemMetrics (nIndex=32) returned 4 [0122.619] GetSystemMetrics (nIndex=33) returned 4 [0122.619] CloseThemeData () returned 0x0 [0122.619] capGetDriverDescriptionA () returned 0x0 [0122.619] GetLastError () returned 0x0 [0122.620] SetLastError (dwErrCode=0x0) [0122.620] OpenThemeData () returned 0x2d20000 [0122.620] GetSystemMetrics (nIndex=32) returned 4 [0122.620] GetSystemMetrics (nIndex=33) returned 4 [0122.620] CloseThemeData () returned 0x0 [0122.620] capGetDriverDescriptionA () returned 0x0 [0122.621] GetLastError () returned 0x0 [0122.621] SetLastError (dwErrCode=0x0) [0122.621] OpenThemeData () returned 0x2d30000 [0122.621] GetSystemMetrics (nIndex=32) returned 4 [0122.621] GetSystemMetrics (nIndex=33) returned 4 [0122.621] CloseThemeData () returned 0x0 [0122.622] capGetDriverDescriptionA () returned 0x0 [0122.622] GetLastError () returned 0x0 [0122.622] SetLastError (dwErrCode=0x0) [0122.622] OpenThemeData () returned 0x2d40000 [0122.623] GetSystemMetrics (nIndex=32) returned 4 [0122.623] GetSystemMetrics (nIndex=33) returned 4 [0122.623] CloseThemeData () returned 0x0 [0122.623] capGetDriverDescriptionA () returned 0x0 [0122.624] GetLastError () returned 0x0 [0122.624] SetLastError (dwErrCode=0x0) [0122.624] OpenThemeData () returned 0x2d50000 [0122.624] GetSystemMetrics (nIndex=32) returned 4 [0122.624] GetSystemMetrics (nIndex=33) returned 4 [0122.624] CloseThemeData () returned 0x0 [0122.625] capGetDriverDescriptionA () returned 0x0 [0122.625] GetLastError () returned 0x0 [0122.625] SetLastError (dwErrCode=0x0) [0122.625] OpenThemeData () returned 0x2d60000 [0122.626] GetSystemMetrics (nIndex=32) returned 4 [0122.626] GetSystemMetrics (nIndex=33) returned 4 [0122.626] CloseThemeData () returned 0x0 [0122.626] capGetDriverDescriptionA () returned 0x0 [0122.627] GetLastError () returned 0x0 [0122.627] SetLastError (dwErrCode=0x0) [0122.627] OpenThemeData () returned 0x2d70000 [0122.627] GetSystemMetrics (nIndex=32) returned 4 [0122.627] GetSystemMetrics (nIndex=33) returned 4 [0122.627] CloseThemeData () returned 0x0 [0122.628] capGetDriverDescriptionA () returned 0x0 [0122.972] GetLastError () returned 0x0 [0122.972] SetLastError (dwErrCode=0x0) [0122.972] OpenThemeData () returned 0x2d80000 [0122.973] GetSystemMetrics (nIndex=32) returned 4 [0122.973] GetSystemMetrics (nIndex=33) returned 4 [0122.973] CloseThemeData () returned 0x0 [0122.973] capGetDriverDescriptionA () returned 0x0 [0122.974] GetLastError () returned 0x0 [0122.974] SetLastError (dwErrCode=0x0) [0122.974] OpenThemeData () returned 0x2d90000 [0122.974] GetSystemMetrics (nIndex=32) returned 4 [0122.974] GetSystemMetrics (nIndex=33) returned 4 [0122.974] CloseThemeData () returned 0x0 [0122.975] capGetDriverDescriptionA () returned 0x0 [0122.975] GetLastError () returned 0x0 [0122.975] SetLastError (dwErrCode=0x0) [0122.975] OpenThemeData () returned 0x2da0000 [0122.976] GetSystemMetrics (nIndex=32) returned 4 [0122.976] GetSystemMetrics (nIndex=33) returned 4 [0122.976] CloseThemeData () returned 0x0 [0122.976] capGetDriverDescriptionA () returned 0x0 [0122.977] GetLastError () returned 0x0 [0122.977] SetLastError (dwErrCode=0x0) [0122.977] OpenThemeData () returned 0x2db0000 [0122.977] GetSystemMetrics (nIndex=32) returned 4 [0122.977] GetSystemMetrics (nIndex=33) returned 4 [0122.977] CloseThemeData () returned 0x0 [0122.978] capGetDriverDescriptionA () returned 0x0 [0122.978] GetLastError () returned 0x0 [0122.978] SetLastError (dwErrCode=0x0) [0122.978] OpenThemeData () returned 0x2dc0000 [0122.979] GetSystemMetrics (nIndex=32) returned 4 [0122.979] GetSystemMetrics (nIndex=33) returned 4 [0122.979] CloseThemeData () returned 0x0 [0122.979] capGetDriverDescriptionA () returned 0x0 [0122.980] GetLastError () returned 0x0 [0122.980] SetLastError (dwErrCode=0x0) [0122.980] OpenThemeData () returned 0x2dd0000 [0122.980] GetSystemMetrics (nIndex=32) returned 4 [0122.980] GetSystemMetrics (nIndex=33) returned 4 [0122.980] CloseThemeData () returned 0x0 [0122.981] capGetDriverDescriptionA () returned 0x0 [0122.981] GetLastError () returned 0x0 [0122.981] SetLastError (dwErrCode=0x0) [0122.981] OpenThemeData () returned 0x2de0000 [0122.983] GetSystemMetrics (nIndex=32) returned 4 [0122.983] GetSystemMetrics (nIndex=33) returned 4 [0122.983] CloseThemeData () returned 0x0 [0122.983] capGetDriverDescriptionA () returned 0x0 [0122.984] GetLastError () returned 0x0 [0122.984] SetLastError (dwErrCode=0x0) [0122.984] OpenThemeData () returned 0x2df0000 [0122.984] GetSystemMetrics (nIndex=32) returned 4 [0122.984] GetSystemMetrics (nIndex=33) returned 4 [0122.984] CloseThemeData () returned 0x0 [0122.984] capGetDriverDescriptionA () returned 0x0 [0122.985] GetLastError () returned 0x0 [0122.985] SetLastError (dwErrCode=0x0) [0122.985] OpenThemeData () returned 0x2e00000 [0122.985] GetSystemMetrics (nIndex=32) returned 4 [0122.986] GetSystemMetrics (nIndex=33) returned 4 [0122.986] CloseThemeData () returned 0x0 [0122.986] capGetDriverDescriptionA () returned 0x0 [0122.986] GetLastError () returned 0x0 [0122.986] SetLastError (dwErrCode=0x0) [0122.986] OpenThemeData () returned 0x2e10000 [0122.987] GetSystemMetrics (nIndex=32) returned 4 [0122.988] GetSystemMetrics (nIndex=33) returned 4 [0122.988] CloseThemeData () returned 0x0 [0122.988] lstrlenA (lpString="\x92\x07") returned 2 [0122.988] lstrlenA (lpString="\x92\x07") returned 2 [0122.988] lstrlenA (lpString="\x92\x07") returned 2 [0122.988] lstrlenA (lpString="\x92\x07") returned 2 [0122.988] lstrlenA (lpString="\x92\x07") returned 2 [0122.988] lstrlenA (lpString="\x92\x07") returned 2 [0122.988] capGetDriverDescriptionA () returned 0x0 [0122.989] GetLastError () returned 0x0 [0122.989] SetLastError (dwErrCode=0x0) [0122.989] OpenThemeData () returned 0x2e20000 [0122.989] GetSystemMetrics (nIndex=32) returned 4 [0122.989] GetSystemMetrics (nIndex=33) returned 4 [0122.989] CloseThemeData () returned 0x0 [0122.990] lstrlenA (lpString="\x92\x07") returned 2 [0122.990] lstrlenA (lpString="\x92\x07") returned 2 [0122.990] lstrlenA (lpString="\x92\x07") returned 2 [0122.990] lstrlenA (lpString="\x92\x07") returned 2 [0122.990] lstrlenA (lpString="\x92\x07") returned 2 [0122.990] lstrlenA (lpString="\x92\x07") returned 2 [0122.990] capGetDriverDescriptionA () returned 0x0 [0122.990] GetLastError () returned 0x0 [0122.990] SetLastError (dwErrCode=0x0) [0122.990] OpenThemeData () returned 0x2e30000 [0122.991] GetSystemMetrics (nIndex=32) returned 4 [0122.991] GetSystemMetrics (nIndex=33) returned 4 [0122.991] CloseThemeData () returned 0x0 [0122.991] lstrlenA (lpString="\x92\x07") returned 2 [0122.991] lstrlenA (lpString="\x92\x07") returned 2 [0122.991] lstrlenA (lpString="\x92\x07") returned 2 [0122.991] lstrlenA (lpString="\x92\x07") returned 2 [0122.991] lstrlenA (lpString="\x92\x07") returned 2 [0122.991] lstrlenA (lpString="\x92\x07") returned 2 [0122.994] capGetDriverDescriptionA () returned 0x0 [0122.995] GetLastError () returned 0x0 [0122.995] SetLastError (dwErrCode=0x0) [0122.995] OpenThemeData () returned 0x2e40000 [0122.995] GetSystemMetrics (nIndex=32) returned 4 [0122.995] GetSystemMetrics (nIndex=33) returned 4 [0122.995] CloseThemeData () returned 0x0 [0122.995] lstrlenA (lpString="\x92\x07") returned 2 [0122.995] lstrlenA (lpString="\x92\x07") returned 2 [0122.995] lstrlenA (lpString="\x92\x07") returned 2 [0122.995] lstrlenA (lpString="\x92\x07") returned 2 [0122.995] lstrlenA (lpString="\x92\x07") returned 2 [0122.996] lstrlenA (lpString="\x92\x07") returned 2 [0122.996] capGetDriverDescriptionA () returned 0x0 [0122.996] GetLastError () returned 0x0 [0122.996] SetLastError (dwErrCode=0x0) [0122.996] OpenThemeData () returned 0x2e50000 [0122.997] GetSystemMetrics (nIndex=32) returned 4 [0122.997] GetSystemMetrics (nIndex=33) returned 4 [0122.997] CloseThemeData () returned 0x0 [0122.997] lstrlenA (lpString="\x92\x07") returned 2 [0122.997] lstrlenA (lpString="\x92\x07") returned 2 [0122.997] lstrlenA (lpString="\x92\x07") returned 2 [0122.997] lstrlenA (lpString="\x92\x07") returned 2 [0122.997] lstrlenA (lpString="\x92\x07") returned 2 [0122.997] lstrlenA (lpString="\x92\x07") returned 2 [0122.997] capGetDriverDescriptionA () returned 0x0 [0122.998] GetLastError () returned 0x0 [0122.998] SetLastError (dwErrCode=0x0) [0122.998] OpenThemeData () returned 0x2e60000 [0122.998] GetSystemMetrics (nIndex=32) returned 4 [0122.998] GetSystemMetrics (nIndex=33) returned 4 [0122.998] CloseThemeData () returned 0x0 [0122.999] lstrlenA (lpString="\x92\x07") returned 2 [0122.999] lstrlenA (lpString="\x92\x07") returned 2 [0122.999] lstrlenA (lpString="\x92\x07") returned 2 [0122.999] lstrlenA (lpString="\x92\x07") returned 2 [0122.999] lstrlenA (lpString="\x92\x07") returned 2 [0122.999] lstrlenA (lpString="\x92\x07") returned 2 [0122.999] capGetDriverDescriptionA () returned 0x0 [0122.999] GetLastError () returned 0x0 [0122.999] SetLastError (dwErrCode=0x0) [0122.999] OpenThemeData () returned 0x2e70000 [0123.000] GetSystemMetrics (nIndex=32) returned 4 [0123.000] GetSystemMetrics (nIndex=33) returned 4 [0123.000] CloseThemeData () returned 0x0 [0123.000] lstrlenA (lpString="\x92\x07") returned 2 [0123.000] lstrlenA (lpString="\x92\x07") returned 2 [0123.000] lstrlenA (lpString="\x92\x07") returned 2 [0123.000] lstrlenA (lpString="\x92\x07") returned 2 [0123.000] lstrlenA (lpString="\x92\x07") returned 2 [0123.000] lstrlenA (lpString="\x92\x07") returned 2 [0123.000] capGetDriverDescriptionA () returned 0x0 [0123.001] GetLastError () returned 0x0 [0123.001] SetLastError (dwErrCode=0x0) [0123.001] OpenThemeData () returned 0x2e80000 [0123.001] GetSystemMetrics (nIndex=32) returned 4 [0123.001] GetSystemMetrics (nIndex=33) returned 4 [0123.002] CloseThemeData () returned 0x0 [0123.002] lstrlenA (lpString="\x92\x07") returned 2 [0123.002] lstrlenA (lpString="\x92\x07") returned 2 [0123.002] lstrlenA (lpString="\x92\x07") returned 2 [0123.002] lstrlenA (lpString="\x92\x07") returned 2 [0123.002] lstrlenA (lpString="\x92\x07") returned 2 [0123.002] lstrlenA (lpString="\x92\x07") returned 2 [0123.002] capGetDriverDescriptionA () returned 0x0 [0123.003] GetLastError () returned 0x0 [0123.003] SetLastError (dwErrCode=0x0) [0123.003] OpenThemeData () returned 0x2e90000 [0123.003] GetSystemMetrics (nIndex=32) returned 4 [0123.003] GetSystemMetrics (nIndex=33) returned 4 [0123.003] CloseThemeData () returned 0x0 [0123.004] lstrlenA (lpString="\x92\x07") returned 2 [0123.004] lstrlenA (lpString="\x92\x07") returned 2 [0123.004] lstrlenA (lpString="\x92\x07") returned 2 [0123.004] lstrlenA (lpString="\x92\x07") returned 2 [0123.004] lstrlenA (lpString="\x92\x07") returned 2 [0123.004] lstrlenA (lpString="\x92\x07") returned 2 [0123.004] capGetDriverDescriptionA () returned 0x0 [0123.005] GetLastError () returned 0x0 [0123.005] SetLastError (dwErrCode=0x0) [0123.005] OpenThemeData () returned 0x2ea0000 [0123.005] GetSystemMetrics (nIndex=32) returned 4 [0123.005] GetSystemMetrics (nIndex=33) returned 4 [0123.005] CloseThemeData () returned 0x0 [0123.005] lstrlenA (lpString="\x92\x07") returned 2 [0123.005] lstrlenA (lpString="\x92\x07") returned 2 [0123.005] lstrlenA (lpString="\x92\x07") returned 2 [0123.005] lstrlenA (lpString="\x92\x07") returned 2 [0123.005] lstrlenA (lpString="\x92\x07") returned 2 [0123.006] lstrlenA (lpString="\x92\x07") returned 2 [0123.006] capGetDriverDescriptionA () returned 0x0 [0123.006] GetLastError () returned 0x0 [0123.006] SetLastError (dwErrCode=0x0) [0123.006] OpenThemeData () returned 0x2eb0000 [0123.007] GetSystemMetrics (nIndex=32) returned 4 [0123.007] GetSystemMetrics (nIndex=33) returned 4 [0123.007] CloseThemeData () returned 0x0 [0123.007] lstrlenA (lpString="\x92\x07") returned 2 [0123.007] lstrlenA (lpString="\x92\x07") returned 2 [0123.007] lstrlenA (lpString="\x92\x07") returned 2 [0123.007] lstrlenA (lpString="\x92\x07") returned 2 [0123.007] lstrlenA (lpString="\x92\x07") returned 2 [0123.007] lstrlenA (lpString="\x92\x07") returned 2 [0123.007] capGetDriverDescriptionA () returned 0x0 [0123.008] GetLastError () returned 0x0 [0123.008] SetLastError (dwErrCode=0x0) [0123.008] OpenThemeData () returned 0x2ec0000 [0123.008] GetSystemMetrics (nIndex=32) returned 4 [0123.008] GetSystemMetrics (nIndex=33) returned 4 [0123.008] CloseThemeData () returned 0x0 [0123.009] lstrlenA (lpString="\x92\x07") returned 2 [0123.009] lstrlenA (lpString="\x92\x07") returned 2 [0123.009] lstrlenA (lpString="\x92\x07") returned 2 [0123.009] lstrlenA (lpString="\x92\x07") returned 2 [0123.009] lstrlenA (lpString="\x92\x07") returned 2 [0123.009] lstrlenA (lpString="\x92\x07") returned 2 [0123.009] capGetDriverDescriptionA () returned 0x0 [0123.009] GetLastError () returned 0x0 [0123.009] SetLastError (dwErrCode=0x0) [0123.009] OpenThemeData () returned 0x2ed0000 [0123.010] GetSystemMetrics (nIndex=32) returned 4 [0123.010] GetSystemMetrics (nIndex=33) returned 4 [0123.010] CloseThemeData () returned 0x0 [0123.010] lstrlenA (lpString="\x92\x07") returned 2 [0123.010] lstrlenA (lpString="\x92\x07") returned 2 [0123.010] lstrlenA (lpString="\x92\x07") returned 2 [0123.010] lstrlenA (lpString="\x92\x07") returned 2 [0123.010] lstrlenA (lpString="\x92\x07") returned 2 [0123.010] lstrlenA (lpString="\x92\x07") returned 2 [0123.010] capGetDriverDescriptionA () returned 0x0 [0123.011] GetLastError () returned 0x0 [0123.011] SetLastError (dwErrCode=0x0) [0123.011] OpenThemeData () returned 0x2ee0000 [0123.012] GetSystemMetrics (nIndex=32) returned 4 [0123.012] GetSystemMetrics (nIndex=33) returned 4 [0123.012] CloseThemeData () returned 0x0 [0123.012] lstrlenA (lpString="\x92\x07") returned 2 [0123.012] lstrlenA (lpString="\x92\x07") returned 2 [0123.012] lstrlenA (lpString="\x92\x07") returned 2 [0123.012] lstrlenA (lpString="\x92\x07") returned 2 [0123.012] lstrlenA (lpString="\x92\x07") returned 2 [0123.012] lstrlenA (lpString="\x92\x07") returned 2 [0123.012] capGetDriverDescriptionA () returned 0x0 [0123.013] GetLastError () returned 0x0 [0123.013] SetLastError (dwErrCode=0x0) [0123.013] OpenThemeData () returned 0x2ef0000 [0123.013] GetSystemMetrics (nIndex=32) returned 4 [0123.013] GetSystemMetrics (nIndex=33) returned 4 [0123.013] CloseThemeData () returned 0x0 [0123.014] lstrlenA (lpString="\x92\x07") returned 2 [0123.014] lstrlenA (lpString="\x92\x07") returned 2 [0123.014] lstrlenA (lpString="\x92\x07") returned 2 [0123.014] lstrlenA (lpString="\x92\x07") returned 2 [0123.014] lstrlenA (lpString="\x92\x07") returned 2 [0123.014] lstrlenA (lpString="\x92\x07") returned 2 [0123.014] capGetDriverDescriptionA () returned 0x0 [0123.014] GetLastError () returned 0x0 [0123.014] SetLastError (dwErrCode=0x0) [0123.014] OpenThemeData () returned 0x2f00000 [0123.015] GetSystemMetrics (nIndex=32) returned 4 [0123.015] GetSystemMetrics (nIndex=33) returned 4 [0123.015] CloseThemeData () returned 0x0 [0123.015] lstrlenA (lpString="\x92\x07") returned 2 [0123.015] lstrlenA (lpString="\x92\x07") returned 2 [0123.015] lstrlenA (lpString="\x92\x07") returned 2 [0123.015] lstrlenA (lpString="\x92\x07") returned 2 [0123.015] lstrlenA (lpString="\x92\x07") returned 2 [0123.015] lstrlenA (lpString="\x92\x07") returned 2 [0123.015] capGetDriverDescriptionA () returned 0x0 [0123.016] GetLastError () returned 0x0 [0123.016] SetLastError (dwErrCode=0x0) [0123.016] OpenThemeData () returned 0x2f10000 [0123.017] GetSystemMetrics (nIndex=32) returned 4 [0123.017] GetSystemMetrics (nIndex=33) returned 4 [0123.017] CloseThemeData () returned 0x0 [0123.017] lstrlenA (lpString="\x92\x07") returned 2 [0123.017] lstrlenA (lpString="\x92\x07") returned 2 [0123.017] lstrlenA (lpString="\x92\x07") returned 2 [0123.017] lstrlenA (lpString="\x92\x07") returned 2 [0123.017] lstrlenA (lpString="\x92\x07") returned 2 [0123.017] lstrlenA (lpString="\x92\x07") returned 2 [0123.017] capGetDriverDescriptionA () returned 0x0 [0123.018] GetLastError () returned 0x0 [0123.018] SetLastError (dwErrCode=0x0) [0123.018] OpenThemeData () returned 0x2f20000 [0123.706] GetSystemMetrics (nIndex=32) returned 4 [0123.706] GetSystemMetrics (nIndex=33) returned 4 [0123.706] CloseThemeData () returned 0x0 [0123.707] lstrlenA (lpString="\x92\x07") returned 2 [0123.707] lstrlenA (lpString="\x92\x07") returned 2 [0123.707] lstrlenA (lpString="\x92\x07") returned 2 [0123.707] lstrlenA (lpString="\x92\x07") returned 2 [0123.707] lstrlenA (lpString="\x92\x07") returned 2 [0123.707] lstrlenA (lpString="\x92\x07") returned 2 [0123.707] capGetDriverDescriptionA () returned 0x0 [0123.708] GetLastError () returned 0x0 [0123.708] SetLastError (dwErrCode=0x0) [0123.708] OpenThemeData () returned 0x2f30000 [0123.708] GetSystemMetrics (nIndex=32) returned 4 [0123.708] GetSystemMetrics (nIndex=33) returned 4 [0123.708] CloseThemeData () returned 0x0 [0123.708] lstrlenA (lpString="\x92\x07") returned 2 [0123.708] lstrlenA (lpString="\x92\x07") returned 2 [0123.708] lstrlenA (lpString="\x92\x07") returned 2 [0123.709] lstrlenA (lpString="\x92\x07") returned 2 [0123.709] lstrlenA (lpString="\x92\x07") returned 2 [0123.709] lstrlenA (lpString="\x92\x07") returned 2 [0123.709] capGetDriverDescriptionA () returned 0x0 [0123.709] GetLastError () returned 0x0 [0123.709] SetLastError (dwErrCode=0x0) [0123.709] OpenThemeData () returned 0x2f40000 [0123.710] GetSystemMetrics (nIndex=32) returned 4 [0123.710] GetSystemMetrics (nIndex=33) returned 4 [0123.710] CloseThemeData () returned 0x0 [0123.710] lstrlenA (lpString="\x92\x07") returned 2 [0123.710] lstrlenA (lpString="\x92\x07") returned 2 [0123.710] lstrlenA (lpString="\x92\x07") returned 2 [0123.710] lstrlenA (lpString="\x92\x07") returned 2 [0123.710] lstrlenA (lpString="\x92\x07") returned 2 [0123.710] lstrlenA (lpString="\x92\x07") returned 2 [0123.710] capGetDriverDescriptionA () returned 0x0 [0123.711] GetLastError () returned 0x0 [0123.711] SetLastError (dwErrCode=0x0) [0123.711] OpenThemeData () returned 0x2f50000 [0123.711] GetSystemMetrics (nIndex=32) returned 4 [0123.711] GetSystemMetrics (nIndex=33) returned 4 [0123.711] CloseThemeData () returned 0x0 [0123.712] lstrlenA (lpString="\x92\x07") returned 2 [0123.712] lstrlenA (lpString="\x92\x07") returned 2 [0123.712] lstrlenA (lpString="\x92\x07") returned 2 [0123.712] lstrlenA (lpString="\x92\x07") returned 2 [0123.712] lstrlenA (lpString="\x92\x07") returned 2 [0123.712] lstrlenA (lpString="\x92\x07") returned 2 [0123.712] capGetDriverDescriptionA () returned 0x0 [0123.713] GetLastError () returned 0x0 [0123.713] SetLastError (dwErrCode=0x0) [0123.713] OpenThemeData () returned 0x2f60000 [0123.713] GetSystemMetrics (nIndex=32) returned 4 [0123.713] GetSystemMetrics (nIndex=33) returned 4 [0123.713] CloseThemeData () returned 0x0 [0123.713] lstrlenA (lpString="\x92\x07") returned 2 [0123.713] lstrlenA (lpString="\x92\x07") returned 2 [0123.713] lstrlenA (lpString="\x92\x07") returned 2 [0123.713] lstrlenA (lpString="\x92\x07") returned 2 [0123.714] lstrlenA (lpString="\x92\x07") returned 2 [0123.714] lstrlenA (lpString="\x92\x07") returned 2 [0123.714] capGetDriverDescriptionA () returned 0x0 [0123.714] GetLastError () returned 0x0 [0123.714] SetLastError (dwErrCode=0x0) [0123.714] OpenThemeData () returned 0x2f70000 [0123.715] GetSystemMetrics (nIndex=32) returned 4 [0123.715] GetSystemMetrics (nIndex=33) returned 4 [0123.715] CloseThemeData () returned 0x0 [0123.715] lstrlenA (lpString="\x92\x07") returned 2 [0123.715] lstrlenA (lpString="\x92\x07") returned 2 [0123.715] lstrlenA (lpString="\x92\x07") returned 2 [0123.715] lstrlenA (lpString="\x92\x07") returned 2 [0123.715] lstrlenA (lpString="\x92\x07") returned 2 [0123.715] lstrlenA (lpString="\x92\x07") returned 2 [0123.715] capGetDriverDescriptionA () returned 0x0 [0123.716] GetLastError () returned 0x0 [0123.716] SetLastError (dwErrCode=0x0) [0123.716] OpenThemeData () returned 0x2f80000 [0123.716] GetSystemMetrics (nIndex=32) returned 4 [0123.716] GetSystemMetrics (nIndex=33) returned 4 [0123.716] CloseThemeData () returned 0x0 [0123.717] lstrlenA (lpString="\x92\x07") returned 2 [0123.717] lstrlenA (lpString="\x92\x07") returned 2 [0123.717] lstrlenA (lpString="\x92\x07") returned 2 [0123.717] lstrlenA (lpString="\x92\x07") returned 2 [0123.717] lstrlenA (lpString="\x92\x07") returned 2 [0123.717] lstrlenA (lpString="\x92\x07") returned 2 [0123.717] capGetDriverDescriptionA () returned 0x0 [0123.718] GetLastError () returned 0x0 [0123.718] SetLastError (dwErrCode=0x0) [0123.718] OpenThemeData () returned 0x2f90000 [0123.718] GetSystemMetrics (nIndex=32) returned 4 [0123.718] GetSystemMetrics (nIndex=33) returned 4 [0123.718] CloseThemeData () returned 0x0 [0123.718] lstrlenA (lpString="\x92\x07") returned 2 [0123.718] lstrlenA (lpString="\x92\x07") returned 2 [0123.718] lstrlenA (lpString="\x92\x07") returned 2 [0123.718] lstrlenA (lpString="\x92\x07") returned 2 [0123.719] lstrlenA (lpString="\x92\x07") returned 2 [0123.719] lstrlenA (lpString="\x92\x07") returned 2 [0123.719] capGetDriverDescriptionA () returned 0x0 [0123.719] GetLastError () returned 0x0 [0123.719] SetLastError (dwErrCode=0x0) [0123.719] OpenThemeData () returned 0x2fa0000 [0123.720] GetSystemMetrics (nIndex=32) returned 4 [0123.720] GetSystemMetrics (nIndex=33) returned 4 [0123.720] CloseThemeData () returned 0x0 [0123.720] lstrlenA (lpString="\x92\x07") returned 2 [0123.720] lstrlenA (lpString="\x92\x07") returned 2 [0123.720] lstrlenA (lpString="\x92\x07") returned 2 [0123.720] lstrlenA (lpString="\x92\x07") returned 2 [0123.720] lstrlenA (lpString="\x92\x07") returned 2 [0123.720] lstrlenA (lpString="\x92\x07") returned 2 [0123.720] capGetDriverDescriptionA () returned 0x0 [0123.721] GetLastError () returned 0x0 [0123.721] SetLastError (dwErrCode=0x0) [0123.721] OpenThemeData () returned 0x2fb0000 [0123.721] GetSystemMetrics (nIndex=32) returned 4 [0123.721] GetSystemMetrics (nIndex=33) returned 4 [0123.721] CloseThemeData () returned 0x0 [0123.722] lstrlenA (lpString="\x92\x07") returned 2 [0123.722] lstrlenA (lpString="\x92\x07") returned 2 [0123.722] lstrlenA (lpString="\x92\x07") returned 2 [0123.722] lstrlenA (lpString="\x92\x07") returned 2 [0123.722] lstrlenA (lpString="\x92\x07") returned 2 [0123.722] lstrlenA (lpString="\x92\x07") returned 2 [0123.722] capGetDriverDescriptionA () returned 0x0 [0123.723] GetLastError () returned 0x0 [0123.723] SetLastError (dwErrCode=0x0) [0123.723] OpenThemeData () returned 0x2fc0000 [0123.723] GetSystemMetrics (nIndex=32) returned 4 [0123.723] GetSystemMetrics (nIndex=33) returned 4 [0123.723] CloseThemeData () returned 0x0 [0123.723] lstrlenA (lpString="\x92\x07") returned 2 [0123.723] lstrlenA (lpString="\x92\x07") returned 2 [0123.724] lstrlenA (lpString="\x92\x07") returned 2 [0123.724] lstrlenA (lpString="\x92\x07") returned 2 [0123.724] lstrlenA (lpString="\x92\x07") returned 2 [0123.724] lstrlenA (lpString="\x92\x07") returned 2 [0123.724] capGetDriverDescriptionA () returned 0x0 [0123.724] GetLastError () returned 0x0 [0123.724] SetLastError (dwErrCode=0x0) [0123.724] OpenThemeData () returned 0x2fd0000 [0123.725] GetSystemMetrics (nIndex=32) returned 4 [0123.725] GetSystemMetrics (nIndex=33) returned 4 [0123.725] CloseThemeData () returned 0x0 [0123.725] lstrlenA (lpString="\x92\x07") returned 2 [0123.725] lstrlenA (lpString="\x92\x07") returned 2 [0123.725] lstrlenA (lpString="\x92\x07") returned 2 [0123.725] lstrlenA (lpString="\x92\x07") returned 2 [0123.725] lstrlenA (lpString="\x92\x07") returned 2 [0123.725] lstrlenA (lpString="\x92\x07") returned 2 [0123.725] capGetDriverDescriptionA () returned 0x0 [0123.726] GetLastError () returned 0x0 [0123.726] SetLastError (dwErrCode=0x0) [0123.726] OpenThemeData () returned 0x2fe0000 [0123.726] GetSystemMetrics (nIndex=32) returned 4 [0123.726] GetSystemMetrics (nIndex=33) returned 4 [0123.726] CloseThemeData () returned 0x0 [0123.727] lstrlenA (lpString="\x92\x07") returned 2 [0123.727] lstrlenA (lpString="\x92\x07") returned 2 [0123.727] lstrlenA (lpString="\x92\x07") returned 2 [0123.727] lstrlenA (lpString="\x92\x07") returned 2 [0123.727] lstrlenA (lpString="\x92\x07") returned 2 [0123.727] lstrlenA (lpString="\x92\x07") returned 2 [0123.727] capGetDriverDescriptionA () returned 0x0 [0123.728] GetLastError () returned 0x0 [0123.728] SetLastError (dwErrCode=0x0) [0123.728] OpenThemeData () returned 0x2ff0000 [0123.728] GetSystemMetrics (nIndex=32) returned 4 [0123.728] GetSystemMetrics (nIndex=33) returned 4 [0123.728] CloseThemeData () returned 0x0 [0123.728] lstrlenA (lpString="\x92\x07") returned 2 [0123.729] lstrlenA (lpString="\x92\x07") returned 2 [0123.729] lstrlenA (lpString="\x92\x07") returned 2 [0123.729] lstrlenA (lpString="\x92\x07") returned 2 [0123.729] lstrlenA (lpString="\x92\x07") returned 2 [0123.729] lstrlenA (lpString="\x92\x07") returned 2 [0123.729] capGetDriverDescriptionA () returned 0x0 [0123.730] GetLastError () returned 0x0 [0123.730] SetLastError (dwErrCode=0x0) [0123.730] OpenThemeData () returned 0x3000000 [0123.732] GetSystemMetrics (nIndex=32) returned 4 [0123.732] GetSystemMetrics (nIndex=33) returned 4 [0123.732] CloseThemeData () returned 0x0 [0123.732] lstrlenA (lpString="\x92\x07") returned 2 [0123.732] lstrlenA (lpString="\x92\x07") returned 2 [0123.732] lstrlenA (lpString="\x92\x07") returned 2 [0123.732] lstrlenA (lpString="\x92\x07") returned 2 [0123.732] lstrlenA (lpString="\x92\x07") returned 2 [0123.732] lstrlenA (lpString="\x92\x07") returned 2 [0123.732] capGetDriverDescriptionA () returned 0x0 [0123.733] GetLastError () returned 0x0 [0123.733] SetLastError (dwErrCode=0x0) [0123.733] OpenThemeData () returned 0x3010000 [0123.733] GetSystemMetrics (nIndex=32) returned 4 [0123.734] GetSystemMetrics (nIndex=33) returned 4 [0123.734] CloseThemeData () returned 0x0 [0123.734] lstrlenA (lpString="\x92\x07") returned 2 [0123.734] lstrlenA (lpString="\x92\x07") returned 2 [0123.734] lstrlenA (lpString="\x92\x07") returned 2 [0123.734] lstrlenA (lpString="\x92\x07") returned 2 [0123.734] lstrlenA (lpString="\x92\x07") returned 2 [0123.734] lstrlenA (lpString="\x92\x07") returned 2 [0123.734] capGetDriverDescriptionA () returned 0x0 [0123.735] GetLastError () returned 0x0 [0123.735] SetLastError (dwErrCode=0x0) [0123.735] OpenThemeData () returned 0x3020000 [0123.735] GetSystemMetrics (nIndex=32) returned 4 [0123.735] GetSystemMetrics (nIndex=33) returned 4 [0123.735] CloseThemeData () returned 0x0 [0123.736] lstrlenA (lpString="\x92\x07") returned 2 [0123.736] lstrlenA (lpString="\x92\x07") returned 2 [0123.736] lstrlenA (lpString="\x92\x07") returned 2 [0123.736] lstrlenA (lpString="\x92\x07") returned 2 [0123.736] lstrlenA (lpString="\x92\x07") returned 2 [0123.736] lstrlenA (lpString="\x92\x07") returned 2 [0123.736] capGetDriverDescriptionA () returned 0x0 [0123.736] GetLastError () returned 0x0 [0123.736] SetLastError (dwErrCode=0x0) [0123.736] OpenThemeData () returned 0x3030000 [0123.737] GetSystemMetrics (nIndex=32) returned 4 [0123.745] GetSystemMetrics (nIndex=33) returned 4 [0123.745] CloseThemeData () returned 0x0 [0123.745] lstrlenA (lpString="\x92\x07") returned 2 [0123.745] lstrlenA (lpString="\x92\x07") returned 2 [0123.745] lstrlenA (lpString="\x92\x07") returned 2 [0123.745] lstrlenA (lpString="\x92\x07") returned 2 [0123.746] lstrlenA (lpString="\x92\x07") returned 2 [0123.746] lstrlenA (lpString="\x92\x07") returned 2 [0123.746] capGetDriverDescriptionA () returned 0x0 [0123.746] GetLastError () returned 0x0 [0123.746] SetLastError (dwErrCode=0x0) [0123.746] OpenThemeData () returned 0x3040000 [0123.747] GetSystemMetrics (nIndex=32) returned 4 [0123.747] GetSystemMetrics (nIndex=33) returned 4 [0123.747] CloseThemeData () returned 0x0 [0123.747] lstrlenA (lpString="\x92\x07") returned 2 [0123.747] lstrlenA (lpString="\x92\x07") returned 2 [0123.747] lstrlenA (lpString="\x92\x07") returned 2 [0123.747] lstrlenA (lpString="\x92\x07") returned 2 [0123.747] lstrlenA (lpString="\x92\x07") returned 2 [0123.747] lstrlenA (lpString="\x92\x07") returned 2 [0123.747] capGetDriverDescriptionA () returned 0x0 [0123.748] GetLastError () returned 0x0 [0123.748] SetLastError (dwErrCode=0x0) [0123.748] OpenThemeData () returned 0x3050000 [0123.749] GetSystemMetrics (nIndex=32) returned 4 [0123.749] GetSystemMetrics (nIndex=33) returned 4 [0123.749] CloseThemeData () returned 0x0 [0123.749] lstrlenA (lpString="\x92\x07") returned 2 [0123.749] lstrlenA (lpString="\x92\x07") returned 2 [0123.749] lstrlenA (lpString="\x92\x07") returned 2 [0123.749] lstrlenA (lpString="\x92\x07") returned 2 [0123.749] lstrlenA (lpString="\x92\x07") returned 2 [0123.749] lstrlenA (lpString="\x92\x07") returned 2 [0123.749] capGetDriverDescriptionA () returned 0x0 [0123.750] GetLastError () returned 0x0 [0123.750] SetLastError (dwErrCode=0x0) [0123.750] OpenThemeData () returned 0x3060000 [0123.750] GetSystemMetrics (nIndex=32) returned 4 [0123.750] GetSystemMetrics (nIndex=33) returned 4 [0123.750] CloseThemeData () returned 0x0 [0123.751] lstrlenA (lpString="\x92\x07") returned 2 [0123.751] lstrlenA (lpString="\x92\x07") returned 2 [0123.751] lstrlenA (lpString="\x92\x07") returned 2 [0123.751] lstrlenA (lpString="\x92\x07") returned 2 [0123.751] lstrlenA (lpString="\x92\x07") returned 2 [0123.751] lstrlenA (lpString="\x92\x07") returned 2 [0123.751] capGetDriverDescriptionA () returned 0x0 [0123.751] GetLastError () returned 0x0 [0123.752] SetLastError (dwErrCode=0x0) [0123.752] OpenThemeData () returned 0x3070000 [0123.752] GetSystemMetrics (nIndex=32) returned 4 [0123.752] GetSystemMetrics (nIndex=33) returned 4 [0123.752] CloseThemeData () returned 0x0 [0123.752] lstrlenA (lpString="\x92\x07") returned 2 [0123.752] lstrlenA (lpString="\x92\x07") returned 2 [0123.752] lstrlenA (lpString="\x92\x07") returned 2 [0123.752] lstrlenA (lpString="\x92\x07") returned 2 [0123.752] lstrlenA (lpString="\x92\x07") returned 2 [0123.753] lstrlenA (lpString="\x92\x07") returned 2 [0124.113] capGetDriverDescriptionA () returned 0x0 [0124.114] GetLastError () returned 0x0 [0124.114] SetLastError (dwErrCode=0x0) [0124.114] OpenThemeData () returned 0x3080000 [0124.114] GetSystemMetrics (nIndex=32) returned 4 [0124.114] GetSystemMetrics (nIndex=33) returned 4 [0124.114] CloseThemeData () returned 0x0 [0124.114] lstrlenA (lpString="\x92\x07") returned 2 [0124.114] lstrlenA (lpString="\x92\x07") returned 2 [0124.114] lstrlenA (lpString="\x92\x07") returned 2 [0124.114] lstrlenA (lpString="\x92\x07") returned 2 [0124.114] lstrlenA (lpString="\x92\x07") returned 2 [0124.115] lstrlenA (lpString="\x92\x07") returned 2 [0124.115] capGetDriverDescriptionA () returned 0x0 [0124.115] GetLastError () returned 0x0 [0124.115] SetLastError (dwErrCode=0x0) [0124.115] OpenThemeData () returned 0x3090000 [0124.116] GetSystemMetrics (nIndex=32) returned 4 [0124.116] GetSystemMetrics (nIndex=33) returned 4 [0124.116] CloseThemeData () returned 0x0 [0124.116] lstrlenA (lpString="\x92\x07") returned 2 [0124.116] lstrlenA (lpString="\x92\x07") returned 2 [0124.116] lstrlenA (lpString="\x92\x07") returned 2 [0124.116] lstrlenA (lpString="\x92\x07") returned 2 [0124.116] lstrlenA (lpString="\x92\x07") returned 2 [0124.116] lstrlenA (lpString="\x92\x07") returned 2 [0124.116] capGetDriverDescriptionA () returned 0x0 [0124.117] GetLastError () returned 0x0 [0124.117] SetLastError (dwErrCode=0x0) [0124.117] OpenThemeData () returned 0x30a0000 [0124.117] GetSystemMetrics (nIndex=32) returned 4 [0124.117] GetSystemMetrics (nIndex=33) returned 4 [0124.117] CloseThemeData () returned 0x0 [0124.118] lstrlenA (lpString="\x92\x07") returned 2 [0124.118] lstrlenA (lpString="\x92\x07") returned 2 [0124.118] lstrlenA (lpString="\x92\x07") returned 2 [0124.118] lstrlenA (lpString="\x92\x07") returned 2 [0124.118] lstrlenA (lpString="\x92\x07") returned 2 [0124.118] lstrlenA (lpString="\x92\x07") returned 2 [0124.118] capGetDriverDescriptionA () returned 0x0 [0124.118] GetLastError () returned 0x0 [0124.118] SetLastError (dwErrCode=0x0) [0124.118] OpenThemeData () returned 0x30b0000 [0124.119] GetSystemMetrics (nIndex=32) returned 4 [0124.119] GetSystemMetrics (nIndex=33) returned 4 [0124.119] CloseThemeData () returned 0x0 [0124.119] lstrlenA (lpString="\x92\x07") returned 2 [0124.119] lstrlenA (lpString="\x92\x07") returned 2 [0124.119] lstrlenA (lpString="\x92\x07") returned 2 [0124.119] lstrlenA (lpString="\x92\x07") returned 2 [0124.119] lstrlenA (lpString="\x92\x07") returned 2 [0124.119] lstrlenA (lpString="\x92\x07") returned 2 [0124.119] capGetDriverDescriptionA () returned 0x0 [0124.120] GetLastError () returned 0x0 [0124.120] SetLastError (dwErrCode=0x0) [0124.120] OpenThemeData () returned 0x30c0000 [0124.120] GetSystemMetrics (nIndex=32) returned 4 [0124.121] GetSystemMetrics (nIndex=33) returned 4 [0124.121] CloseThemeData () returned 0x0 [0124.121] lstrlenA (lpString="\x92\x07") returned 2 [0124.121] lstrlenA (lpString="\x92\x07") returned 2 [0124.121] lstrlenA (lpString="\x92\x07") returned 2 [0124.121] lstrlenA (lpString="\x92\x07") returned 2 [0124.121] lstrlenA (lpString="\x92\x07") returned 2 [0124.121] lstrlenA (lpString="\x92\x07") returned 2 [0124.121] capGetDriverDescriptionA () returned 0x0 [0124.122] GetLastError () returned 0x0 [0124.122] SetLastError (dwErrCode=0x0) [0124.122] OpenThemeData () returned 0x30d0000 [0124.122] GetSystemMetrics (nIndex=32) returned 4 [0124.122] GetSystemMetrics (nIndex=33) returned 4 [0124.122] CloseThemeData () returned 0x0 [0124.122] lstrlenA (lpString="\x92\x07") returned 2 [0124.122] lstrlenA (lpString="\x92\x07") returned 2 [0124.122] lstrlenA (lpString="\x92\x07") returned 2 [0124.122] lstrlenA (lpString="\x92\x07") returned 2 [0124.123] lstrlenA (lpString="\x92\x07") returned 2 [0124.123] lstrlenA (lpString="\x92\x07") returned 2 [0124.123] capGetDriverDescriptionA () returned 0x0 [0124.123] GetLastError () returned 0x0 [0124.123] SetLastError (dwErrCode=0x0) [0124.123] OpenThemeData () returned 0x30e0000 [0124.124] GetSystemMetrics (nIndex=32) returned 4 [0124.124] GetSystemMetrics (nIndex=33) returned 4 [0124.124] CloseThemeData () returned 0x0 [0124.124] lstrlenA (lpString="\x92\x07") returned 2 [0124.124] lstrlenA (lpString="\x92\x07") returned 2 [0124.124] lstrlenA (lpString="\x92\x07") returned 2 [0124.124] lstrlenA (lpString="\x92\x07") returned 2 [0124.124] lstrlenA (lpString="\x92\x07") returned 2 [0124.124] lstrlenA (lpString="\x92\x07") returned 2 [0124.124] capGetDriverDescriptionA () returned 0x0 [0124.125] GetLastError () returned 0x0 [0124.125] SetLastError (dwErrCode=0x0) [0124.125] OpenThemeData () returned 0x30f0000 [0124.125] GetSystemMetrics (nIndex=32) returned 4 [0124.125] GetSystemMetrics (nIndex=33) returned 4 [0124.125] CloseThemeData () returned 0x0 [0124.126] lstrlenA (lpString="\x92\x07") returned 2 [0124.126] lstrlenA (lpString="\x92\x07") returned 2 [0124.126] lstrlenA (lpString="\x92\x07") returned 2 [0124.126] lstrlenA (lpString="\x92\x07") returned 2 [0124.126] lstrlenA (lpString="\x92\x07") returned 2 [0124.126] lstrlenA (lpString="\x92\x07") returned 2 [0124.126] capGetDriverDescriptionA () returned 0x0 [0124.126] GetLastError () returned 0x0 [0124.126] SetLastError (dwErrCode=0x0) [0124.126] OpenThemeData () returned 0x3100000 [0124.127] GetSystemMetrics (nIndex=32) returned 4 [0124.127] GetSystemMetrics (nIndex=33) returned 4 [0124.127] CloseThemeData () returned 0x0 [0124.127] lstrlenA (lpString="\x92\x07") returned 2 [0124.127] lstrlenA (lpString="\x92\x07") returned 2 [0124.127] lstrlenA (lpString="\x92\x07") returned 2 [0124.127] lstrlenA (lpString="\x92\x07") returned 2 [0124.127] lstrlenA (lpString="\x92\x07") returned 2 [0124.127] lstrlenA (lpString="\x92\x07") returned 2 [0124.127] capGetDriverDescriptionA () returned 0x0 [0124.128] GetLastError () returned 0x0 [0124.128] SetLastError (dwErrCode=0x0) [0124.128] OpenThemeData () returned 0x3110000 [0124.129] GetSystemMetrics (nIndex=32) returned 4 [0124.129] GetSystemMetrics (nIndex=33) returned 4 [0124.129] CloseThemeData () returned 0x0 [0124.129] lstrlenA (lpString="\x92\x07") returned 2 [0124.129] lstrlenA (lpString="\x92\x07") returned 2 [0124.129] lstrlenA (lpString="\x92\x07") returned 2 [0124.129] lstrlenA (lpString="\x92\x07") returned 2 [0124.129] lstrlenA (lpString="\x92\x07") returned 2 [0124.129] lstrlenA (lpString="\x92\x07") returned 2 [0124.129] capGetDriverDescriptionA () returned 0x0 [0124.130] GetLastError () returned 0x0 [0124.130] SetLastError (dwErrCode=0x0) [0124.130] OpenThemeData () returned 0x3120000 [0124.130] GetSystemMetrics (nIndex=32) returned 4 [0124.130] GetSystemMetrics (nIndex=33) returned 4 [0124.130] CloseThemeData () returned 0x0 [0124.131] lstrlenA (lpString="\x92\x07") returned 2 [0124.131] lstrlenA (lpString="\x92\x07") returned 2 [0124.131] lstrlenA (lpString="\x92\x07") returned 2 [0124.131] lstrlenA (lpString="\x92\x07") returned 2 [0124.131] lstrlenA (lpString="\x92\x07") returned 2 [0124.131] lstrlenA (lpString="\x92\x07") returned 2 [0124.131] capGetDriverDescriptionA () returned 0x0 [0124.131] GetLastError () returned 0x0 [0124.132] SetLastError (dwErrCode=0x0) [0124.132] OpenThemeData () returned 0x3130000 [0124.132] GetSystemMetrics (nIndex=32) returned 4 [0124.132] GetSystemMetrics (nIndex=33) returned 4 [0124.132] CloseThemeData () returned 0x0 [0124.132] lstrlenA (lpString="\x92\x07") returned 2 [0124.132] lstrlenA (lpString="\x92\x07") returned 2 [0124.132] lstrlenA (lpString="\x92\x07") returned 2 [0124.132] lstrlenA (lpString="\x92\x07") returned 2 [0124.132] lstrlenA (lpString="\x92\x07") returned 2 [0124.132] lstrlenA (lpString="\x92\x07") returned 2 [0124.133] capGetDriverDescriptionA () returned 0x0 [0124.133] GetLastError () returned 0x0 [0124.133] SetLastError (dwErrCode=0x0) [0124.133] OpenThemeData () returned 0x3140000 [0124.134] GetSystemMetrics (nIndex=32) returned 4 [0124.134] GetSystemMetrics (nIndex=33) returned 4 [0124.134] CloseThemeData () returned 0x0 [0124.134] lstrlenA (lpString="\x92\x07") returned 2 [0124.134] lstrlenA (lpString="\x92\x07") returned 2 [0124.134] lstrlenA (lpString="\x92\x07") returned 2 [0124.134] lstrlenA (lpString="\x92\x07") returned 2 [0124.134] lstrlenA (lpString="\x92\x07") returned 2 [0124.134] lstrlenA (lpString="\x92\x07") returned 2 [0124.134] capGetDriverDescriptionA () returned 0x0 [0124.135] GetLastError () returned 0x0 [0124.135] SetLastError (dwErrCode=0x0) [0124.135] OpenThemeData () returned 0x3150000 [0124.135] GetSystemMetrics (nIndex=32) returned 4 [0124.135] GetSystemMetrics (nIndex=33) returned 4 [0124.135] CloseThemeData () returned 0x0 [0124.136] lstrlenA (lpString="\x92\x07") returned 2 [0124.136] lstrlenA (lpString="\x92\x07") returned 2 [0124.136] lstrlenA (lpString="\x92\x07") returned 2 [0124.136] lstrlenA (lpString="\x92\x07") returned 2 [0124.136] lstrlenA (lpString="\x92\x07") returned 2 [0124.136] lstrlenA (lpString="\x92\x07") returned 2 [0124.136] capGetDriverDescriptionA () returned 0x0 [0124.136] GetLastError () returned 0x0 [0124.136] SetLastError (dwErrCode=0x0) [0124.136] OpenThemeData () returned 0x3160000 [0124.137] GetSystemMetrics (nIndex=32) returned 4 [0124.137] GetSystemMetrics (nIndex=33) returned 4 [0124.137] CloseThemeData () returned 0x0 [0124.137] lstrlenA (lpString="\x92\x07") returned 2 [0124.137] lstrlenA (lpString="\x92\x07") returned 2 [0124.137] lstrlenA (lpString="\x92\x07") returned 2 [0124.137] lstrlenA (lpString="\x92\x07") returned 2 [0124.137] lstrlenA (lpString="\x92\x07") returned 2 [0124.137] lstrlenA (lpString="\x92\x07") returned 2 [0124.137] capGetDriverDescriptionA () returned 0x0 [0124.138] GetLastError () returned 0x0 [0124.138] SetLastError (dwErrCode=0x0) [0124.138] OpenThemeData () returned 0x3170000 [0124.138] GetSystemMetrics (nIndex=32) returned 4 [0124.138] GetSystemMetrics (nIndex=33) returned 4 [0124.138] CloseThemeData () returned 0x0 [0124.139] lstrlenA (lpString="\x92\x07") returned 2 [0124.139] lstrlenA (lpString="\x92\x07") returned 2 [0124.139] lstrlenA (lpString="\x92\x07") returned 2 [0124.139] lstrlenA (lpString="\x92\x07") returned 2 [0124.139] lstrlenA (lpString="\x92\x07") returned 2 [0124.139] lstrlenA (lpString="\x92\x07") returned 2 [0124.139] capGetDriverDescriptionA () returned 0x0 [0124.139] GetLastError () returned 0x0 [0124.139] SetLastError (dwErrCode=0x0) [0124.140] OpenThemeData () returned 0x3180000 [0124.140] GetSystemMetrics (nIndex=32) returned 4 [0124.140] GetSystemMetrics (nIndex=33) returned 4 [0124.140] CloseThemeData () returned 0x0 [0124.140] lstrlenA (lpString="\x92\x07") returned 2 [0124.140] lstrlenA (lpString="\x92\x07") returned 2 [0124.140] lstrlenA (lpString="\x92\x07") returned 2 [0124.140] lstrlenA (lpString="\x92\x07") returned 2 [0124.140] lstrlenA (lpString="\x92\x07") returned 2 [0124.140] lstrlenA (lpString="\x92\x07") returned 2 [0124.140] capGetDriverDescriptionA () returned 0x0 [0124.141] GetLastError () returned 0x0 [0124.141] SetLastError (dwErrCode=0x0) [0124.141] OpenThemeData () returned 0x3190000 [0124.142] GetSystemMetrics (nIndex=32) returned 4 [0124.142] GetSystemMetrics (nIndex=33) returned 4 [0124.142] CloseThemeData () returned 0x0 [0124.142] lstrlenA (lpString="\x92\x07") returned 2 [0124.142] lstrlenA (lpString="\x92\x07") returned 2 [0124.142] lstrlenA (lpString="\x92\x07") returned 2 [0124.142] lstrlenA (lpString="\x92\x07") returned 2 [0124.142] lstrlenA (lpString="\x92\x07") returned 2 [0124.142] lstrlenA (lpString="\x92\x07") returned 2 [0124.142] capGetDriverDescriptionA () returned 0x0 [0124.143] GetLastError () returned 0x0 [0124.143] SetLastError (dwErrCode=0x0) [0124.143] OpenThemeData () returned 0x31a0000 [0124.143] GetSystemMetrics (nIndex=32) returned 4 [0124.143] GetSystemMetrics (nIndex=33) returned 4 [0124.143] CloseThemeData () returned 0x0 [0124.143] lstrlenA (lpString="\x92\x07") returned 2 [0124.144] lstrlenA (lpString="\x92\x07") returned 2 [0124.144] lstrlenA (lpString="\x92\x07") returned 2 [0124.144] lstrlenA (lpString="\x92\x07") returned 2 [0124.144] lstrlenA (lpString="\x92\x07") returned 2 [0124.144] lstrlenA (lpString="\x92\x07") returned 2 [0124.144] capGetDriverDescriptionA () returned 0x0 [0124.144] GetLastError () returned 0x0 [0124.144] SetLastError (dwErrCode=0x0) [0124.144] OpenThemeData () returned 0x31b0000 [0124.145] GetSystemMetrics (nIndex=32) returned 4 [0124.145] GetSystemMetrics (nIndex=33) returned 4 [0124.145] CloseThemeData () returned 0x0 [0124.145] lstrlenA (lpString="\x92\x07") returned 2 [0124.145] lstrlenA (lpString="\x92\x07") returned 2 [0124.145] lstrlenA (lpString="\x92\x07") returned 2 [0124.145] lstrlenA (lpString="\x92\x07") returned 2 [0124.145] lstrlenA (lpString="\x92\x07") returned 2 [0124.145] lstrlenA (lpString="\x92\x07") returned 2 [0124.145] capGetDriverDescriptionA () returned 0x0 [0124.146] GetLastError () returned 0x0 [0124.146] SetLastError (dwErrCode=0x0) [0124.146] OpenThemeData () returned 0x31c0000 [0124.146] GetSystemMetrics (nIndex=32) returned 4 [0124.146] GetSystemMetrics (nIndex=33) returned 4 [0124.146] CloseThemeData () returned 0x0 [0124.147] lstrlenA (lpString="\x92\x07") returned 2 [0124.147] lstrlenA (lpString="\x92\x07") returned 2 [0124.147] lstrlenA (lpString="\x92\x07") returned 2 [0124.147] lstrlenA (lpString="\x92\x07") returned 2 [0124.147] lstrlenA (lpString="\x92\x07") returned 2 [0124.147] lstrlenA (lpString="\x92\x07") returned 2 [0124.147] capGetDriverDescriptionA () returned 0x0 [0124.148] GetLastError () returned 0x0 [0124.148] SetLastError (dwErrCode=0x0) [0124.148] OpenThemeData () returned 0x31d0000 [0124.148] GetSystemMetrics (nIndex=32) returned 4 [0124.148] GetSystemMetrics (nIndex=33) returned 4 [0124.148] CloseThemeData () returned 0x0 [0124.148] lstrlenA (lpString="\x92\x07") returned 2 [0124.148] lstrlenA (lpString="\x92\x07") returned 2 [0124.148] lstrlenA (lpString="\x92\x07") returned 2 [0124.148] lstrlenA (lpString="\x92\x07") returned 2 [0124.148] lstrlenA (lpString="\x92\x07") returned 2 [0124.149] lstrlenA (lpString="\x92\x07") returned 2 [0124.149] capGetDriverDescriptionA () returned 0x0 [0124.149] GetLastError () returned 0x0 [0124.149] SetLastError (dwErrCode=0x0) [0124.149] OpenThemeData () returned 0x31e0000 [0124.150] GetSystemMetrics (nIndex=32) returned 4 [0124.150] GetSystemMetrics (nIndex=33) returned 4 [0124.150] CloseThemeData () returned 0x0 [0124.150] lstrlenA (lpString="\x92\x07") returned 2 [0124.150] lstrlenA (lpString="\x92\x07") returned 2 [0124.150] lstrlenA (lpString="\x92\x07") returned 2 [0124.150] lstrlenA (lpString="\x92\x07") returned 2 [0124.150] lstrlenA (lpString="\x92\x07") returned 2 [0124.150] lstrlenA (lpString="\x92\x07") returned 2 [0124.150] capGetDriverDescriptionA () returned 0x0 [0124.151] GetLastError () returned 0x0 [0124.151] SetLastError (dwErrCode=0x0) [0124.151] OpenThemeData () returned 0x31f0000 [0124.151] GetSystemMetrics (nIndex=32) returned 4 [0124.151] GetSystemMetrics (nIndex=33) returned 4 [0124.151] CloseThemeData () returned 0x0 [0124.152] lstrlenA (lpString="\x92\x07") returned 2 [0124.152] lstrlenA (lpString="\x92\x07") returned 2 [0124.152] lstrlenA (lpString="\x92\x07") returned 2 [0124.152] lstrlenA (lpString="\x92\x07") returned 2 [0124.152] lstrlenA (lpString="\x92\x07") returned 2 [0124.152] lstrlenA (lpString="\x92\x07") returned 2 [0124.152] capGetDriverDescriptionA () returned 0x0 [0124.152] GetLastError () returned 0x0 [0124.152] SetLastError (dwErrCode=0x0) [0124.152] OpenThemeData () returned 0x3200000 [0124.153] GetSystemMetrics (nIndex=32) returned 4 [0124.153] GetSystemMetrics (nIndex=33) returned 4 [0124.153] CloseThemeData () returned 0x0 [0124.153] lstrlenA (lpString="\x92\x07") returned 2 [0124.153] lstrlenA (lpString="\x92\x07") returned 2 [0124.153] lstrlenA (lpString="\x92\x07") returned 2 [0124.153] lstrlenA (lpString="\x92\x07") returned 2 [0124.153] lstrlenA (lpString="\x92\x07") returned 2 [0124.153] lstrlenA (lpString="\x92\x07") returned 2 [0124.153] capGetDriverDescriptionA () returned 0x0 [0124.154] GetLastError () returned 0x0 [0124.154] SetLastError (dwErrCode=0x0) [0124.154] OpenThemeData () returned 0x3210000 [0124.154] GetSystemMetrics (nIndex=32) returned 4 [0124.154] GetSystemMetrics (nIndex=33) returned 4 [0124.154] CloseThemeData () returned 0x0 [0124.155] lstrlenA (lpString="\x92\x07") returned 2 [0124.155] lstrlenA (lpString="\x92\x07") returned 2 [0124.155] lstrlenA (lpString="\x92\x07") returned 2 [0124.155] lstrlenA (lpString="\x92\x07") returned 2 [0124.155] lstrlenA (lpString="\x92\x07") returned 2 [0124.155] lstrlenA (lpString="\x92\x07") returned 2 [0124.155] capGetDriverDescriptionA () returned 0x0 [0124.156] GetLastError () returned 0x0 [0124.156] SetLastError (dwErrCode=0x0) [0124.156] OpenThemeData () returned 0x3220000 [0124.156] GetSystemMetrics (nIndex=32) returned 4 [0124.156] GetSystemMetrics (nIndex=33) returned 4 [0124.156] CloseThemeData () returned 0x0 [0124.156] lstrlenA (lpString="\x92\x07") returned 2 [0124.156] lstrlenA (lpString="\x92\x07") returned 2 [0124.156] lstrlenA (lpString="\x92\x07") returned 2 [0124.156] lstrlenA (lpString="\x92\x07") returned 2 [0124.156] lstrlenA (lpString="\x92\x07") returned 2 [0124.156] lstrlenA (lpString="\x92\x07") returned 2 [0124.157] capGetDriverDescriptionA () returned 0x0 [0124.157] GetLastError () returned 0x0 [0124.157] SetLastError (dwErrCode=0x0) [0124.157] OpenThemeData () returned 0x3230000 [0124.158] GetSystemMetrics (nIndex=32) returned 4 [0124.158] GetSystemMetrics (nIndex=33) returned 4 [0124.158] CloseThemeData () returned 0x0 [0124.158] lstrlenA (lpString="\x92\x07") returned 2 [0124.158] lstrlenA (lpString="\x92\x07") returned 2 [0124.158] lstrlenA (lpString="\x92\x07") returned 2 [0124.158] lstrlenA (lpString="\x92\x07") returned 2 [0124.158] lstrlenA (lpString="\x92\x07") returned 2 [0124.158] lstrlenA (lpString="\x92\x07") returned 2 [0124.158] capGetDriverDescriptionA () returned 0x0 [0124.159] GetLastError () returned 0x0 [0124.159] SetLastError (dwErrCode=0x0) [0124.159] OpenThemeData () returned 0x3240000 [0124.159] GetSystemMetrics (nIndex=32) returned 4 [0124.159] GetSystemMetrics (nIndex=33) returned 4 [0124.159] CloseThemeData () returned 0x0 [0124.784] lstrlenA (lpString="\x92\x07") returned 2 [0124.784] lstrlenA (lpString="\x92\x07") returned 2 [0124.784] lstrlenA (lpString="\x92\x07") returned 2 [0124.784] lstrlenA (lpString="\x92\x07") returned 2 [0124.784] lstrlenA (lpString="\x92\x07") returned 2 [0124.784] lstrlenA (lpString="\x92\x07") returned 2 [0124.784] capGetDriverDescriptionA () returned 0x0 [0124.785] GetLastError () returned 0x0 [0124.785] SetLastError (dwErrCode=0x0) [0124.785] OpenThemeData () returned 0x3250000 [0124.785] GetSystemMetrics (nIndex=32) returned 4 [0124.786] GetSystemMetrics (nIndex=33) returned 4 [0124.786] CloseThemeData () returned 0x0 [0124.786] lstrlenA (lpString="\x92\x07") returned 2 [0124.786] lstrlenA (lpString="\x92\x07") returned 2 [0124.786] lstrlenA (lpString="\x92\x07") returned 2 [0124.786] lstrlenA (lpString="\x92\x07") returned 2 [0124.786] lstrlenA (lpString="\x92\x07") returned 2 [0124.786] lstrlenA (lpString="\x92\x07") returned 2 [0124.786] capGetDriverDescriptionA () returned 0x0 [0124.787] GetLastError () returned 0x0 [0124.787] SetLastError (dwErrCode=0x0) [0124.787] OpenThemeData () returned 0x3260000 [0124.787] GetSystemMetrics (nIndex=32) returned 4 [0124.787] GetSystemMetrics (nIndex=33) returned 4 [0124.787] CloseThemeData () returned 0x0 [0124.787] lstrlenA (lpString="\x92\x07") returned 2 [0124.788] lstrlenA (lpString="\x92\x07") returned 2 [0124.788] lstrlenA (lpString="\x92\x07") returned 2 [0124.788] lstrlenA (lpString="\x92\x07") returned 2 [0124.788] lstrlenA (lpString="\x92\x07") returned 2 [0124.788] lstrlenA (lpString="\x92\x07") returned 2 [0124.788] capGetDriverDescriptionA () returned 0x0 [0124.788] GetLastError () returned 0x0 [0124.788] SetLastError (dwErrCode=0x0) [0124.788] OpenThemeData () returned 0x3270000 [0124.789] GetSystemMetrics (nIndex=32) returned 4 [0124.789] GetSystemMetrics (nIndex=33) returned 4 [0124.789] CloseThemeData () returned 0x0 [0124.789] lstrlenA (lpString="\x92\x07") returned 2 [0124.789] lstrlenA (lpString="\x92\x07") returned 2 [0124.789] lstrlenA (lpString="\x92\x07") returned 2 [0124.789] lstrlenA (lpString="\x92\x07") returned 2 [0124.789] lstrlenA (lpString="\x92\x07") returned 2 [0124.789] lstrlenA (lpString="\x92\x07") returned 2 [0124.789] capGetDriverDescriptionA () returned 0x0 [0124.790] GetLastError () returned 0x0 [0124.790] SetLastError (dwErrCode=0x0) [0124.790] OpenThemeData () returned 0x3280000 [0124.790] GetSystemMetrics (nIndex=32) returned 4 [0124.790] GetSystemMetrics (nIndex=33) returned 4 [0124.790] CloseThemeData () returned 0x0 [0124.791] lstrlenA (lpString="\x92\x07") returned 2 [0124.791] lstrlenA (lpString="\x92\x07") returned 2 [0124.791] lstrlenA (lpString="\x92\x07") returned 2 [0124.791] lstrlenA (lpString="\x92\x07") returned 2 [0124.791] lstrlenA (lpString="\x92\x07") returned 2 [0124.791] lstrlenA (lpString="\x92\x07") returned 2 [0124.791] capGetDriverDescriptionA () returned 0x0 [0124.792] GetLastError () returned 0x0 [0124.792] SetLastError (dwErrCode=0x0) [0124.792] OpenThemeData () returned 0x3290000 [0124.792] GetSystemMetrics (nIndex=32) returned 4 [0124.792] GetSystemMetrics (nIndex=33) returned 4 [0124.792] CloseThemeData () returned 0x0 [0124.793] lstrlenA (lpString="\x92\x07") returned 2 [0124.793] lstrlenA (lpString="\x92\x07") returned 2 [0124.793] lstrlenA (lpString="\x92\x07") returned 2 [0124.793] lstrlenA (lpString="\x92\x07") returned 2 [0124.793] lstrlenA (lpString="\x92\x07") returned 2 [0124.793] lstrlenA (lpString="\x92\x07") returned 2 [0124.793] capGetDriverDescriptionA () returned 0x0 [0124.793] GetLastError () returned 0x0 [0124.793] SetLastError (dwErrCode=0x0) [0124.793] OpenThemeData () returned 0x32a0000 [0124.794] GetSystemMetrics (nIndex=32) returned 4 [0124.794] GetSystemMetrics (nIndex=33) returned 4 [0124.794] CloseThemeData () returned 0x0 [0124.794] lstrlenA (lpString="\x92\x07") returned 2 [0124.794] lstrlenA (lpString="\x92\x07") returned 2 [0124.794] lstrlenA (lpString="\x92\x07") returned 2 [0124.794] lstrlenA (lpString="\x92\x07") returned 2 [0124.794] lstrlenA (lpString="\x92\x07") returned 2 [0124.794] lstrlenA (lpString="\x92\x07") returned 2 [0124.794] capGetDriverDescriptionA () returned 0x0 [0124.795] GetLastError () returned 0x0 [0124.795] SetLastError (dwErrCode=0x0) [0124.795] OpenThemeData () returned 0x32b0000 [0124.795] GetSystemMetrics (nIndex=32) returned 4 [0124.795] GetSystemMetrics (nIndex=33) returned 4 [0124.795] CloseThemeData () returned 0x0 [0124.796] lstrlenA (lpString="\x92\x07") returned 2 [0124.796] lstrlenA (lpString="\x92\x07") returned 2 [0124.796] lstrlenA (lpString="\x92\x07") returned 2 [0124.796] lstrlenA (lpString="\x92\x07") returned 2 [0124.796] lstrlenA (lpString="\x92\x07") returned 2 [0124.796] lstrlenA (lpString="\x92\x07") returned 2 [0124.796] capGetDriverDescriptionA () returned 0x0 [0124.797] GetLastError () returned 0x0 [0124.797] SetLastError (dwErrCode=0x0) [0124.797] OpenThemeData () returned 0x32c0000 [0124.797] GetSystemMetrics (nIndex=32) returned 4 [0124.797] GetSystemMetrics (nIndex=33) returned 4 [0124.797] CloseThemeData () returned 0x0 [0124.797] lstrlenA (lpString="\x92\x07") returned 2 [0124.797] lstrlenA (lpString="\x92\x07") returned 2 [0124.798] lstrlenA (lpString="\x92\x07") returned 2 [0124.798] lstrlenA (lpString="\x92\x07") returned 2 [0124.798] lstrlenA (lpString="\x92\x07") returned 2 [0124.798] lstrlenA (lpString="\x92\x07") returned 2 [0124.798] capGetDriverDescriptionA () returned 0x0 [0124.798] GetLastError () returned 0x0 [0124.798] SetLastError (dwErrCode=0x0) [0124.798] OpenThemeData () returned 0x32d0000 [0124.799] GetSystemMetrics (nIndex=32) returned 4 [0124.799] GetSystemMetrics (nIndex=33) returned 4 [0124.799] CloseThemeData () returned 0x0 [0124.799] lstrlenA (lpString="\x92\x07") returned 2 [0124.799] lstrlenA (lpString="\x92\x07") returned 2 [0124.800] lstrlenA (lpString="\x92\x07") returned 2 [0124.800] lstrlenA (lpString="\x92\x07") returned 2 [0124.800] lstrlenA (lpString="\x92\x07") returned 2 [0124.800] lstrlenA (lpString="\x92\x07") returned 2 [0124.800] capGetDriverDescriptionA () returned 0x0 [0124.800] GetLastError () returned 0x0 [0124.800] SetLastError (dwErrCode=0x0) [0124.800] OpenThemeData () returned 0x32e0000 [0124.801] GetSystemMetrics (nIndex=32) returned 4 [0124.801] GetSystemMetrics (nIndex=33) returned 4 [0124.801] CloseThemeData () returned 0x0 [0124.801] lstrlenA (lpString="\x92\x07") returned 2 [0124.801] lstrlenA (lpString="\x92\x07") returned 2 [0124.801] lstrlenA (lpString="\x92\x07") returned 2 [0124.801] lstrlenA (lpString="\x92\x07") returned 2 [0124.801] lstrlenA (lpString="\x92\x07") returned 2 [0124.801] lstrlenA (lpString="\x92\x07") returned 2 [0124.801] capGetDriverDescriptionA () returned 0x0 [0124.802] GetLastError () returned 0x0 [0124.802] SetLastError (dwErrCode=0x0) [0124.802] OpenThemeData () returned 0x32f0000 [0124.802] GetSystemMetrics (nIndex=32) returned 4 [0124.802] GetSystemMetrics (nIndex=33) returned 4 [0124.802] CloseThemeData () returned 0x0 [0124.803] lstrlenA (lpString="\x92\x07") returned 2 [0124.803] lstrlenA (lpString="\x92\x07") returned 2 [0124.803] lstrlenA (lpString="\x92\x07") returned 2 [0124.803] lstrlenA (lpString="\x92\x07") returned 2 [0124.803] lstrlenA (lpString="\x92\x07") returned 2 [0124.803] lstrlenA (lpString="\x92\x07") returned 2 [0124.803] capGetDriverDescriptionA () returned 0x0 [0124.804] GetLastError () returned 0x0 [0124.804] SetLastError (dwErrCode=0x0) [0124.804] OpenThemeData () returned 0x3300000 [0124.804] GetSystemMetrics (nIndex=32) returned 4 [0124.804] GetSystemMetrics (nIndex=33) returned 4 [0124.804] CloseThemeData () returned 0x0 [0124.804] lstrlenA (lpString="\x92\x07") returned 2 [0124.804] lstrlenA (lpString="\x92\x07") returned 2 [0124.804] lstrlenA (lpString="\x92\x07") returned 2 [0124.804] lstrlenA (lpString="\x92\x07") returned 2 [0124.805] lstrlenA (lpString="\x92\x07") returned 2 [0124.805] lstrlenA (lpString="\x92\x07") returned 2 [0124.805] capGetDriverDescriptionA () returned 0x0 [0124.805] GetLastError () returned 0x0 [0124.805] SetLastError (dwErrCode=0x0) [0124.805] OpenThemeData () returned 0x3310000 [0124.806] GetSystemMetrics (nIndex=32) returned 4 [0124.806] GetSystemMetrics (nIndex=33) returned 4 [0124.806] CloseThemeData () returned 0x0 [0124.806] lstrlenA (lpString="\x92\x07") returned 2 [0124.806] lstrlenA (lpString="\x92\x07") returned 2 [0124.806] lstrlenA (lpString="\x92\x07") returned 2 [0124.806] lstrlenA (lpString="\x92\x07") returned 2 [0124.806] lstrlenA (lpString="\x92\x07") returned 2 [0124.806] lstrlenA (lpString="\x92\x07") returned 2 [0124.806] capGetDriverDescriptionA () returned 0x0 [0124.807] GetLastError () returned 0x0 [0124.807] SetLastError (dwErrCode=0x0) [0124.807] OpenThemeData () returned 0x3320000 [0124.807] GetSystemMetrics (nIndex=32) returned 4 [0124.807] GetSystemMetrics (nIndex=33) returned 4 [0124.807] CloseThemeData () returned 0x0 [0124.808] lstrlenA (lpString="\x92\x07") returned 2 [0124.808] lstrlenA (lpString="\x92\x07") returned 2 [0124.808] lstrlenA (lpString="\x92\x07") returned 2 [0124.808] lstrlenA (lpString="\x92\x07") returned 2 [0124.808] lstrlenA (lpString="\x92\x07") returned 2 [0124.808] lstrlenA (lpString="\x92\x07") returned 2 [0124.808] capGetDriverDescriptionA () returned 0x0 [0124.809] GetLastError () returned 0x0 [0124.809] SetLastError (dwErrCode=0x0) [0124.809] OpenThemeData () returned 0x3330000 [0124.809] GetSystemMetrics (nIndex=32) returned 4 [0124.809] GetSystemMetrics (nIndex=33) returned 4 [0124.809] CloseThemeData () returned 0x0 [0124.809] lstrlenA (lpString="\x92\x07") returned 2 [0124.809] lstrlenA (lpString="\x92\x07") returned 2 [0124.809] lstrlenA (lpString="\x92\x07") returned 2 [0124.809] lstrlenA (lpString="\x92\x07") returned 2 [0124.810] lstrlenA (lpString="\x92\x07") returned 2 [0124.810] lstrlenA (lpString="\x92\x07") returned 2 [0124.810] capGetDriverDescriptionA () returned 0x0 [0124.810] GetLastError () returned 0x0 [0124.810] SetLastError (dwErrCode=0x0) [0124.810] OpenThemeData () returned 0x3340000 [0124.811] GetSystemMetrics (nIndex=32) returned 4 [0124.811] GetSystemMetrics (nIndex=33) returned 4 [0124.811] CloseThemeData () returned 0x0 [0124.811] lstrlenA (lpString="\x92\x07") returned 2 [0124.811] lstrlenA (lpString="\x92\x07") returned 2 [0124.811] lstrlenA (lpString="\x92\x07") returned 2 [0124.811] lstrlenA (lpString="\x92\x07") returned 2 [0124.811] lstrlenA (lpString="\x92\x07") returned 2 [0124.811] lstrlenA (lpString="\x92\x07") returned 2 [0124.811] capGetDriverDescriptionA () returned 0x0 [0124.812] GetLastError () returned 0x0 [0124.812] SetLastError (dwErrCode=0x0) [0124.812] OpenThemeData () returned 0x3350000 [0124.812] GetSystemMetrics (nIndex=32) returned 4 [0124.812] GetSystemMetrics (nIndex=33) returned 4 [0124.812] CloseThemeData () returned 0x0 [0124.813] lstrlenA (lpString="\x92\x07") returned 2 [0124.813] lstrlenA (lpString="\x92\x07") returned 2 [0124.813] lstrlenA (lpString="\x92\x07") returned 2 [0124.813] lstrlenA (lpString="\x92\x07") returned 2 [0124.813] lstrlenA (lpString="\x92\x07") returned 2 [0124.813] lstrlenA (lpString="\x92\x07") returned 2 [0124.813] capGetDriverDescriptionA () returned 0x0 [0124.813] GetLastError () returned 0x0 [0124.814] SetLastError (dwErrCode=0x0) [0124.814] OpenThemeData () returned 0x3360000 [0124.814] GetSystemMetrics (nIndex=32) returned 4 [0124.814] GetSystemMetrics (nIndex=33) returned 4 [0124.814] CloseThemeData () returned 0x0 [0124.814] lstrlenA (lpString="\x92\x07") returned 2 [0124.814] lstrlenA (lpString="\x92\x07") returned 2 [0124.814] lstrlenA (lpString="\x92\x07") returned 2 [0124.814] lstrlenA (lpString="\x92\x07") returned 2 [0124.814] lstrlenA (lpString="\x92\x07") returned 2 [0124.814] lstrlenA (lpString="\x92\x07") returned 2 [0124.815] capGetDriverDescriptionA () returned 0x0 [0124.815] GetLastError () returned 0x0 [0124.815] SetLastError (dwErrCode=0x0) [0124.815] OpenThemeData () returned 0x3370000 [0124.816] GetSystemMetrics (nIndex=32) returned 4 [0124.816] GetSystemMetrics (nIndex=33) returned 4 [0124.816] CloseThemeData () returned 0x0 [0124.816] lstrlenA (lpString="\x92\x07") returned 2 [0124.816] lstrlenA (lpString="\x92\x07") returned 2 [0124.816] lstrlenA (lpString="\x92\x07") returned 2 [0124.816] lstrlenA (lpString="\x92\x07") returned 2 [0124.816] lstrlenA (lpString="\x92\x07") returned 2 [0124.816] lstrlenA (lpString="\x92\x07") returned 2 [0124.816] capGetDriverDescriptionA () returned 0x0 [0124.817] GetLastError () returned 0x0 [0124.817] SetLastError (dwErrCode=0x0) [0124.817] OpenThemeData () returned 0x3380000 [0124.817] GetSystemMetrics (nIndex=32) returned 4 [0124.817] GetSystemMetrics (nIndex=33) returned 4 [0124.817] CloseThemeData () returned 0x0 [0124.818] lstrlenA (lpString="\x92\x07") returned 2 [0124.818] lstrlenA (lpString="\x92\x07") returned 2 [0124.818] lstrlenA (lpString="\x92\x07") returned 2 [0124.818] lstrlenA (lpString="\x92\x07") returned 2 [0124.818] lstrlenA (lpString="\x92\x07") returned 2 [0124.818] lstrlenA (lpString="\x92\x07") returned 2 [0124.818] capGetDriverDescriptionA () returned 0x0 [0124.819] GetLastError () returned 0x0 [0124.819] SetLastError (dwErrCode=0x0) [0124.819] OpenThemeData () returned 0x3390000 [0124.819] GetSystemMetrics (nIndex=32) returned 4 [0124.819] GetSystemMetrics (nIndex=33) returned 4 [0124.819] CloseThemeData () returned 0x0 [0124.819] lstrlenA (lpString="\x92\x07") returned 2 [0124.819] lstrlenA (lpString="\x92\x07") returned 2 [0124.819] lstrlenA (lpString="\x92\x07") returned 2 [0124.819] lstrlenA (lpString="\x92\x07") returned 2 [0124.820] lstrlenA (lpString="\x92\x07") returned 2 [0124.820] lstrlenA (lpString="\x92\x07") returned 2 [0124.820] capGetDriverDescriptionA () returned 0x0 [0124.820] GetLastError () returned 0x0 [0124.820] SetLastError (dwErrCode=0x0) [0124.820] OpenThemeData () returned 0x33a0000 [0124.821] GetSystemMetrics (nIndex=32) returned 4 [0124.821] GetSystemMetrics (nIndex=33) returned 4 [0124.821] CloseThemeData () returned 0x0 [0124.821] lstrlenA (lpString="\x92\x07") returned 2 [0124.821] lstrlenA (lpString="\x92\x07") returned 2 [0124.821] lstrlenA (lpString="\x92\x07") returned 2 [0124.821] lstrlenA (lpString="\x92\x07") returned 2 [0124.821] lstrlenA (lpString="\x92\x07") returned 2 [0124.821] lstrlenA (lpString="\x92\x07") returned 2 [0124.821] capGetDriverDescriptionA () returned 0x0 [0124.822] GetLastError () returned 0x0 [0124.822] SetLastError (dwErrCode=0x0) [0124.822] OpenThemeData () returned 0x33b0000 [0124.822] GetSystemMetrics (nIndex=32) returned 4 [0124.822] GetSystemMetrics (nIndex=33) returned 4 [0124.822] CloseThemeData () returned 0x0 [0124.823] lstrlenA (lpString="\x92\x07") returned 2 [0124.823] lstrlenA (lpString="\x92\x07") returned 2 [0124.823] lstrlenA (lpString="\x92\x07") returned 2 [0124.823] lstrlenA (lpString="\x92\x07") returned 2 [0124.823] lstrlenA (lpString="\x92\x07") returned 2 [0124.823] lstrlenA (lpString="\x92\x07") returned 2 [0124.823] capGetDriverDescriptionA () returned 0x0 [0124.823] GetLastError () returned 0x0 [0124.824] SetLastError (dwErrCode=0x0) [0124.824] OpenThemeData () returned 0x33c0000 [0124.824] GetSystemMetrics (nIndex=32) returned 4 [0124.824] GetSystemMetrics (nIndex=33) returned 4 [0124.824] CloseThemeData () returned 0x0 [0124.824] lstrlenA (lpString="\x92\x07") returned 2 [0124.824] lstrlenA (lpString="\x92\x07") returned 2 [0124.824] lstrlenA (lpString="\x92\x07") returned 2 [0124.824] lstrlenA (lpString="\x92\x07") returned 2 [0124.824] lstrlenA (lpString="\x92\x07") returned 2 [0124.824] lstrlenA (lpString="\x92\x07") returned 2 [0124.825] capGetDriverDescriptionA () returned 0x0 [0124.825] GetLastError () returned 0x0 [0124.825] SetLastError (dwErrCode=0x0) [0124.825] OpenThemeData () returned 0x33d0000 [0124.826] GetSystemMetrics (nIndex=32) returned 4 [0124.826] GetSystemMetrics (nIndex=33) returned 4 [0124.826] CloseThemeData () returned 0x0 [0124.826] lstrlenA (lpString="\x92\x07") returned 2 [0124.826] lstrlenA (lpString="\x92\x07") returned 2 [0124.826] lstrlenA (lpString="\x92\x07") returned 2 [0124.826] lstrlenA (lpString="\x92\x07") returned 2 [0124.826] lstrlenA (lpString="\x92\x07") returned 2 [0124.826] lstrlenA (lpString="\x92\x07") returned 2 [0124.826] capGetDriverDescriptionA () returned 0x0 [0124.827] GetLastError () returned 0x0 [0124.827] SetLastError (dwErrCode=0x0) [0124.827] OpenThemeData () returned 0x33e0000 [0124.827] GetSystemMetrics (nIndex=32) returned 4 [0124.827] GetSystemMetrics (nIndex=33) returned 4 [0124.827] CloseThemeData () returned 0x0 [0124.828] lstrlenA (lpString="\x92\x07") returned 2 [0124.828] lstrlenA (lpString="\x92\x07") returned 2 [0124.828] lstrlenA (lpString="\x92\x07") returned 2 [0124.828] lstrlenA (lpString="\x92\x07") returned 2 [0124.828] lstrlenA (lpString="\x92\x07") returned 2 [0124.828] lstrlenA (lpString="\x92\x07") returned 2 [0124.828] capGetDriverDescriptionA () returned 0x0 [0124.828] GetLastError () returned 0x0 [0124.828] SetLastError (dwErrCode=0x0) [0124.828] OpenThemeData () returned 0x33f0000 [0124.829] GetSystemMetrics (nIndex=32) returned 4 [0124.829] GetSystemMetrics (nIndex=33) returned 4 [0124.829] CloseThemeData () returned 0x0 [0124.829] lstrlenA (lpString="\x92\x07") returned 2 [0124.829] lstrlenA (lpString="\x92\x07") returned 2 [0124.829] lstrlenA (lpString="\x92\x07") returned 2 [0124.829] lstrlenA (lpString="\x92\x07") returned 2 [0124.829] lstrlenA (lpString="\x92\x07") returned 2 [0124.829] lstrlenA (lpString="\x92\x07") returned 2 [0124.829] capGetDriverDescriptionA () returned 0x0 [0124.830] GetLastError () returned 0x0 [0124.830] SetLastError (dwErrCode=0x0) [0124.830] OpenThemeData () Thread: id = 26 os_tid = 0xf98 Process: id = "5" image_name = "taskkill.exe" filename = "c:\\windows\\syswow64\\taskkill.exe" page_root = "0xdba7000" os_pid = "0x12fc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13a8" cmd_line = "\"C:\\Windows\\System32\\taskkill.exe\" /IM outlook.exe /F" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 29 os_tid = 0x12f8 Thread: id = 116 os_tid = 0x724 Process: id = "6" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x8ab3000" os_pid = "0x1310" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13a8" cmd_line = "cmd.exe /c \"WMIC.exe shadowcopy delete\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 31 os_tid = 0x1300 [0111.920] GetModuleHandleA (lpModuleName=0x0) returned 0xb70000 [0111.920] __set_app_type (_Type=0x1) [0111.920] __p__fmode () returned 0x74ff3c14 [0111.920] __p__commode () returned 0x74ff49ec [0111.920] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xb86fd0) returned 0x0 [0111.920] __getmainargs (in: _Argc=0xb9d1a4, _Argv=0xb9d1a8, _Env=0xb9d1ac, _DoWildCard=0, _StartInfo=0xb9d1b8 | out: _Argc=0xb9d1a4, _Argv=0xb9d1a8, _Env=0xb9d1ac) returned 0 [0111.921] _onexit (_Func=0xb88030) returned 0xb88030 [0111.921] _onexit (_Func=0xb88040) returned 0xb88040 [0111.921] _onexit (_Func=0xb88050) returned 0xb88050 [0111.921] _onexit (_Func=0xb88060) returned 0xb88060 [0111.921] _onexit (_Func=0xb88070) returned 0xb88070 [0111.921] _onexit (_Func=0xb88080) returned 0xb88080 [0111.921] GetCurrentThreadId () returned 0x1300 [0111.921] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x1300) returned 0xbc [0111.922] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x73b80000 [0111.922] GetProcAddress (hModule=0x73b80000, lpProcName="SetThreadUILanguage") returned 0x73b94f70 [0111.922] SetThreadUILanguage (LangId=0x0) returned 0x4a0409 [0112.928] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0112.928] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x6ff920 | out: phkResult=0x6ff920*=0x0) returned 0x2 [0112.928] VirtualQuery (in: lpAddress=0x6ff92b, lpBuffer=0x6ff8d8, dwLength=0x1c | out: lpBuffer=0x6ff8d8*(BaseAddress=0x6ff000, AllocationBase=0x600000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0112.928] VirtualQuery (in: lpAddress=0x600000, lpBuffer=0x6ff8d8, dwLength=0x1c | out: lpBuffer=0x6ff8d8*(BaseAddress=0x600000, AllocationBase=0x600000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0112.928] VirtualQuery (in: lpAddress=0x601000, lpBuffer=0x6ff8d8, dwLength=0x1c | out: lpBuffer=0x6ff8d8*(BaseAddress=0x601000, AllocationBase=0x600000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0112.928] VirtualQuery (in: lpAddress=0x603000, lpBuffer=0x6ff8d8, dwLength=0x1c | out: lpBuffer=0x6ff8d8*(BaseAddress=0x603000, AllocationBase=0x600000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0112.928] VirtualQuery (in: lpAddress=0x700000, lpBuffer=0x6ff8d8, dwLength=0x1c | out: lpBuffer=0x6ff8d8*(BaseAddress=0x700000, AllocationBase=0x700000, AllocationProtect=0x2, RegionSize=0xc5000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c [0112.928] GetConsoleOutputCP () returned 0x1b5 [0113.405] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0xba3850 | out: lpCPInfo=0xba3850) returned 1 [0113.405] SetConsoleCtrlHandler (HandlerRoutine=0xb97260, Add=1) returned 1 [0113.405] _get_osfhandle (_FileHandle=1) returned 0x90 [0113.405] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xba388c | out: lpMode=0xba388c) returned 1 [0114.367] _get_osfhandle (_FileHandle=0) returned 0x8c [0114.367] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0xba3888 | out: lpMode=0xba3888) returned 1 [0115.961] _get_osfhandle (_FileHandle=1) returned 0x90 [0115.961] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x0) returned 1 [0117.019] _get_osfhandle (_FileHandle=1) returned 0x90 [0117.020] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xba3890 | out: lpMode=0xba3890) returned 1 [0118.409] _get_osfhandle (_FileHandle=1) returned 0x90 [0118.409] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0119.481] _get_osfhandle (_FileHandle=0) returned 0x8c [0119.481] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0xba3894 | out: lpMode=0xba3894) returned 1 [0120.382] _get_osfhandle (_FileHandle=0) returned 0x8c [0120.382] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0121.710] GetEnvironmentStringsW () returned 0x9a4b60* [0121.710] GetProcessHeap () returned 0x9a0000 [0121.710] RtlAllocateHeap (HeapHandle=0x9a0000, Flags=0x8, Size=0xaca) returned 0x9a5638 [0121.728] FreeEnvironmentStringsA (penv="A") returned 1 [0121.728] GetProcessHeap () returned 0x9a0000 [0121.728] RtlAllocateHeap (HeapHandle=0x9a0000, Flags=0x8, Size=0x4) returned 0x9a4640 [0121.728] GetEnvironmentStringsW () returned 0x9a4b60* [0121.728] GetProcessHeap () returned 0x9a0000 [0121.732] RtlAllocateHeap (HeapHandle=0x9a0000, Flags=0x8, Size=0xaca) returned 0x9a6110 [0121.732] FreeEnvironmentStringsA (penv="A") returned 1 [0121.732] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x6fe87c | out: phkResult=0x6fe87c*=0xcc) returned 0x0 [0121.735] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x6fe884, lpData=0x6fe888, lpcbData=0x6fe880*=0x1000 | out: lpType=0x6fe884*=0x0, lpData=0x6fe888*=0xc5, lpcbData=0x6fe880*=0x1000) returned 0x2 [0121.735] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x6fe884, lpData=0x6fe888, lpcbData=0x6fe880*=0x1000 | out: lpType=0x6fe884*=0x4, lpData=0x6fe888*=0x1, lpcbData=0x6fe880*=0x4) returned 0x0 [0121.735] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x6fe884, lpData=0x6fe888, lpcbData=0x6fe880*=0x1000 | out: lpType=0x6fe884*=0x0, lpData=0x6fe888*=0x1, lpcbData=0x6fe880*=0x1000) returned 0x2 [0121.735] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x6fe884, lpData=0x6fe888, lpcbData=0x6fe880*=0x1000 | out: lpType=0x6fe884*=0x4, lpData=0x6fe888*=0x0, lpcbData=0x6fe880*=0x4) returned 0x0 [0121.735] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x6fe884, lpData=0x6fe888, lpcbData=0x6fe880*=0x1000 | out: lpType=0x6fe884*=0x4, lpData=0x6fe888*=0x40, lpcbData=0x6fe880*=0x4) returned 0x0 [0121.735] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x6fe884, lpData=0x6fe888, lpcbData=0x6fe880*=0x1000 | out: lpType=0x6fe884*=0x4, lpData=0x6fe888*=0x40, lpcbData=0x6fe880*=0x4) returned 0x0 [0121.735] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x6fe884, lpData=0x6fe888, lpcbData=0x6fe880*=0x1000 | out: lpType=0x6fe884*=0x0, lpData=0x6fe888*=0x40, lpcbData=0x6fe880*=0x1000) returned 0x2 [0121.735] RegCloseKey (hKey=0xcc) returned 0x0 [0121.735] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x6fe87c | out: phkResult=0x6fe87c*=0xcc) returned 0x0 [0121.735] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x6fe884, lpData=0x6fe888, lpcbData=0x6fe880*=0x1000 | out: lpType=0x6fe884*=0x0, lpData=0x6fe888*=0x40, lpcbData=0x6fe880*=0x1000) returned 0x2 [0121.735] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x6fe884, lpData=0x6fe888, lpcbData=0x6fe880*=0x1000 | out: lpType=0x6fe884*=0x4, lpData=0x6fe888*=0x1, lpcbData=0x6fe880*=0x4) returned 0x0 [0121.735] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x6fe884, lpData=0x6fe888, lpcbData=0x6fe880*=0x1000 | out: lpType=0x6fe884*=0x0, lpData=0x6fe888*=0x1, lpcbData=0x6fe880*=0x1000) returned 0x2 [0121.736] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x6fe884, lpData=0x6fe888, lpcbData=0x6fe880*=0x1000 | out: lpType=0x6fe884*=0x4, lpData=0x6fe888*=0x0, lpcbData=0x6fe880*=0x4) returned 0x0 [0121.736] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x6fe884, lpData=0x6fe888, lpcbData=0x6fe880*=0x1000 | out: lpType=0x6fe884*=0x4, lpData=0x6fe888*=0x9, lpcbData=0x6fe880*=0x4) returned 0x0 [0121.736] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x6fe884, lpData=0x6fe888, lpcbData=0x6fe880*=0x1000 | out: lpType=0x6fe884*=0x4, lpData=0x6fe888*=0x9, lpcbData=0x6fe880*=0x4) returned 0x0 [0121.736] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x6fe884, lpData=0x6fe888, lpcbData=0x6fe880*=0x1000 | out: lpType=0x6fe884*=0x0, lpData=0x6fe888*=0x9, lpcbData=0x6fe880*=0x1000) returned 0x2 [0121.736] RegCloseKey (hKey=0xcc) returned 0x0 [0121.736] time (in: timer=0x0 | out: timer=0x0) returned 0x5e55128a [0121.736] srand (_Seed=0x5e55128a) [0121.736] GetCommandLineW () returned="cmd.exe /c \"WMIC.exe shadowcopy delete\"" [0121.736] malloc (_Size=0x4000) returned 0x2ca21f0 [0121.736] GetCommandLineW () returned="cmd.exe /c \"WMIC.exe shadowcopy delete\"" [0121.736] malloc (_Size=0xffce) returned 0x2cb0048 [0121.737] ??_V@YAXPAX@Z () returned 0x6ff860 [0121.747] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2cb0048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0121.747] malloc (_Size=0xffce) returned 0x2cc0020 [0121.747] ??_V@YAXPAX@Z () returned 0x6ff634 [0121.748] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2cc0020, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0121.748] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0xb9f840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0121.748] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xb9f840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0121.748] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0xb9f840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0121.748] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0121.748] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0121.748] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0121.748] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0121.748] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0121.748] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0121.748] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0121.748] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0121.748] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0121.748] GetProcessHeap () returned 0x9a0000 [0121.748] RtlFreeHeap (HeapHandle=0x9a0000, Flags=0x0, BaseAddress=0x9a5638) returned 1 [0121.748] GetEnvironmentStringsW () returned 0x9a4b60* [0121.748] GetProcessHeap () returned 0x9a0000 [0121.748] RtlAllocateHeap (HeapHandle=0x9a0000, Flags=0x8, Size=0xae2) returned 0x9a76d8 [0121.749] FreeEnvironmentStringsA (penv="A") returned 1 [0121.749] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0xb9f840, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0121.749] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0xb9f840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0121.749] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0121.749] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0121.749] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0121.749] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0121.749] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0121.749] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0121.749] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0121.749] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0121.749] malloc (_Size=0xffce) returned 0x2ccfff8 [0121.749] ??_V@YAXPAX@Z () returned 0x6ff3cc [0121.749] GetProcessHeap () returned 0x9a0000 [0121.749] RtlAllocateHeap (HeapHandle=0x9a0000, Flags=0x8, Size=0x38) returned 0x9a0ae0 [0121.749] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2ccfff8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0121.750] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x2ccfff8, lpFilePart=0x6ff418 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x6ff418*="Desktop") returned 0x17 [0121.750] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0121.750] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x6ff198 | out: lpFindFileData=0x6ff198*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xd7bf47b5, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x9a0b20 [0121.750] FindClose (in: hFindFile=0x9a0b20 | out: hFindFile=0x9a0b20) returned 1 [0121.750] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0x6ff198 | out: lpFindFileData=0x6ff198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x9a0b20 [0121.750] FindClose (in: hFindFile=0x9a0b20 | out: hFindFile=0x9a0b20) returned 1 [0121.750] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0x6ff198 | out: lpFindFileData=0x6ff198*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xcbf1bdaa, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xcbf1bdaa, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x9a0b20 [0121.750] FindClose (in: hFindFile=0x9a0b20 | out: hFindFile=0x9a0b20) returned 1 [0121.751] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0121.751] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0121.751] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0121.751] GetProcessHeap () returned 0x9a0000 [0121.751] RtlFreeHeap (HeapHandle=0x9a0000, Flags=0x0, BaseAddress=0x9a76d8) returned 1 [0121.751] GetEnvironmentStringsW () returned 0x9a4b60* [0121.751] GetProcessHeap () returned 0x9a0000 [0121.751] RtlAllocateHeap (HeapHandle=0x9a0000, Flags=0x8, Size=0xb1a) returned 0x9a6be8 [0121.751] FreeEnvironmentStringsA (penv="=") returned 1 [0121.751] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2cb0048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0121.751] GetProcessHeap () returned 0x9a0000 [0121.751] RtlFreeHeap (HeapHandle=0x9a0000, Flags=0x0, BaseAddress=0x9a0ae0) returned 1 [0121.751] ??_V@YAXPAX@Z () returned 0x1 [0121.751] ??_V@YAXPAX@Z () returned 0x1 [0121.751] GetProcessHeap () returned 0x9a0000 [0121.751] RtlAllocateHeap (HeapHandle=0x9a0000, Flags=0x8, Size=0x400e) returned 0x9a8cf0 [0121.751] GetProcessHeap () returned 0x9a0000 [0121.751] RtlAllocateHeap (HeapHandle=0x9a0000, Flags=0x8, Size=0x46) returned 0x9a7710 [0121.751] GetProcessHeap () returned 0x9a0000 [0121.751] RtlAllocateHeap (HeapHandle=0x9a0000, Flags=0x8, Size=0x4008) returned 0x9acd08 [0121.752] GetProcessHeap () returned 0x9a0000 [0121.752] RtlAllocateHeap (HeapHandle=0x9a0000, Flags=0x8, Size=0x4008) returned 0x9b0d18 [0121.753] _wcsnicmp (_String1="WMIC", _String2="cmd ", _MaxCount=0x4) returned 20 [0121.753] malloc (_Size=0xffce) returned 0x2cc0020 [0121.753] ??_V@YAXPAX@Z () returned 0x6ff57c [0121.753] GetProcessHeap () returned 0x9a0000 [0121.753] RtlAllocateHeap (HeapHandle=0x9a0000, Flags=0x8, Size=0x1ffa4) returned 0x9b4d28 [0121.755] SetErrorMode (uMode=0x0) returned 0x0 [0121.755] SetErrorMode (uMode=0x1) returned 0x0 [0121.755] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x9b4d30, lpFilePart=0x6ff59c | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x6ff59c*="Desktop") returned 0x17 [0121.755] SetErrorMode (uMode=0x0) returned 0x1 [0121.755] GetProcessHeap () returned 0x9a0000 [0121.755] RtlReAllocateHeap (Heap=0x9a0000, Flags=0x0, Ptr=0x9b4d28, Size=0x6e) returned 0x9b4d28 [0121.755] GetProcessHeap () returned 0x9a0000 [0121.755] RtlSizeHeap (HeapHandle=0x9a0000, Flags=0x0, MemoryPointer=0x9b4d28) returned 0x6e [0121.755] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0xb9f840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0121.755] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0121.755] GetProcessHeap () returned 0x9a0000 [0121.755] RtlAllocateHeap (HeapHandle=0x9a0000, Flags=0x8, Size=0x1b4) returned 0x9a7760 [0121.755] GetProcessHeap () returned 0x9a0000 [0121.755] RtlAllocateHeap (HeapHandle=0x9a0000, Flags=0x8, Size=0x360) returned 0x9a7920 [0121.761] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0121.761] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\WMIC.exe shadowcopy delete", fInfoLevelId=0x1, lpFindFileData=0x6ff348, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x6ff348) returned 0xffffffff [0121.761] GetLastError () returned 0x2 [0121.761] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\WMIC.exe shadowcopy delete.*", fInfoLevelId=0x1, lpFindFileData=0x6ff328, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x6ff328) returned 0xffffffff [0121.761] GetLastError () returned 0x2 [0121.762] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0121.762] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\WMIC.exe shadowcopy delete", fInfoLevelId=0x1, lpFindFileData=0x6ff348, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x6ff348) returned 0xffffffff [0121.762] GetLastError () returned 0x2 [0121.762] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\WMIC.exe shadowcopy delete.*", fInfoLevelId=0x1, lpFindFileData=0x6ff328, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x6ff328) returned 0xffffffff [0121.762] GetLastError () returned 0x2 [0121.762] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0121.762] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\WMIC.exe shadowcopy delete", fInfoLevelId=0x1, lpFindFileData=0x6ff348, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x6ff348) returned 0xffffffff [0121.762] GetLastError () returned 0x2 [0121.762] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\WMIC.exe shadowcopy delete.*", fInfoLevelId=0x1, lpFindFileData=0x6ff328, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x6ff328) returned 0xffffffff [0121.763] GetLastError () returned 0x2 [0121.763] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0121.763] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\WMIC.exe shadowcopy delete", fInfoLevelId=0x1, lpFindFileData=0x6ff348, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x6ff348) returned 0xffffffff [0121.763] GetLastError () returned 0x2 [0121.763] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\WMIC.exe shadowcopy delete.*", fInfoLevelId=0x1, lpFindFileData=0x6ff328, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x6ff328) returned 0xffffffff [0121.763] GetLastError () returned 0x2 [0121.763] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0121.763] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem\\WMIC.exe shadowcopy delete", fInfoLevelId=0x1, lpFindFileData=0x6ff348, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x6ff348) returned 0xffffffff [0121.765] GetLastError () returned 0x2 [0121.765] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem\\WMIC.exe shadowcopy delete.*", fInfoLevelId=0x1, lpFindFileData=0x6ff328, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x6ff328) returned 0xffffffff [0121.766] GetLastError () returned 0x2 [0121.766] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0121.767] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\WMIC.exe shadowcopy delete", fInfoLevelId=0x1, lpFindFileData=0x6ff348, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x6ff348) returned 0xffffffff [0121.768] GetLastError () returned 0x2 [0121.768] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\WMIC.exe shadowcopy delete.*", fInfoLevelId=0x1, lpFindFileData=0x6ff328, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x6ff328) returned 0xffffffff [0121.769] GetLastError () returned 0x2 [0121.769] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0121.769] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps\\WMIC.exe shadowcopy delete", fInfoLevelId=0x1, lpFindFileData=0x6ff348, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x6ff348) returned 0xffffffff [0121.770] GetLastError () returned 0x2 [0121.770] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps\\WMIC.exe shadowcopy delete.*", fInfoLevelId=0x1, lpFindFileData=0x6ff328, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x6ff328) returned 0xffffffff [0121.770] GetLastError () returned 0x2 [0121.770] ??_V@YAXPAX@Z () returned 0x1 [0121.770] GetProcessHeap () returned 0x9a0000 [0121.770] RtlFreeHeap (HeapHandle=0x9a0000, Flags=0x0, BaseAddress=0x9acd08) returned 1 [0121.771] GetProcessHeap () returned 0x9a0000 [0121.771] RtlFreeHeap (HeapHandle=0x9a0000, Flags=0x0, BaseAddress=0x9b0d18) returned 1 [0121.771] GetProcessHeap () returned 0x9a0000 [0121.771] RtlFreeHeap (HeapHandle=0x9a0000, Flags=0x0, BaseAddress=0x9a8cf0) returned 1 [0121.771] GetConsoleOutputCP () returned 0x1b5 [0122.923] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0xba3850 | out: lpCPInfo=0xba3850) returned 1 [0122.923] GetUserDefaultLCID () returned 0x409 [0122.923] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0xb9f82c, cchData=8 | out: lpLCData=":") returned 2 [0122.924] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x6ff788, cchData=128 | out: lpLCData="0") returned 2 [0122.924] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x6ff788, cchData=128 | out: lpLCData="0") returned 2 [0122.924] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x6ff788, cchData=128 | out: lpLCData="1") returned 2 [0122.924] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0xb9f81c, cchData=8 | out: lpLCData="/") returned 2 [0122.924] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0xb9f7b8, cchData=32 | out: lpLCData="Mon") returned 4 [0122.924] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0xb9f778, cchData=32 | out: lpLCData="Tue") returned 4 [0122.924] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0xb9f738, cchData=32 | out: lpLCData="Wed") returned 4 [0122.924] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0xb9f6f8, cchData=32 | out: lpLCData="Thu") returned 4 [0122.924] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0xb9f6b8, cchData=32 | out: lpLCData="Fri") returned 4 [0122.924] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0xb9f678, cchData=32 | out: lpLCData="Sat") returned 4 [0122.924] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0xb9f638, cchData=32 | out: lpLCData="Sun") returned 4 [0122.924] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0xb9f80c, cchData=8 | out: lpLCData=".") returned 2 [0122.924] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0xb9f7f8, cchData=8 | out: lpLCData=",") returned 2 [0122.924] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0122.925] GetProcessHeap () returned 0x9a0000 [0122.925] RtlAllocateHeap (HeapHandle=0x9a0000, Flags=0x0, Size=0x20c) returned 0x9a7ba8 [0122.925] GetConsoleTitleW (in: lpConsoleTitle=0x9a7ba8, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\SYSTEM32\\cmd.exe") returned 0x1c [0124.074] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x73b80000 [0124.074] GetProcAddress (hModule=0x73b80000, lpProcName="CopyFileExW") returned 0x73b94330 [0124.074] GetProcAddress (hModule=0x73b80000, lpProcName="IsDebuggerPresent") returned 0x73b95930 [0124.074] GetProcAddress (hModule=0x73b80000, lpProcName="SetConsoleInputExeNameW") returned 0x74eb09d0 [0124.074] ??_V@YAXPAX@Z () returned 0x1 [0124.075] GetProcessHeap () returned 0x9a0000 [0124.075] RtlAllocateHeap (HeapHandle=0x9a0000, Flags=0x8, Size=0x400a) returned 0x9a8cf0 [0124.075] GetProcessHeap () returned 0x9a0000 [0124.075] RtlFreeHeap (HeapHandle=0x9a0000, Flags=0x0, BaseAddress=0x9a8cf0) returned 1 [0124.075] _wcsicmp (_String1="WMIC.exe", _String2=")") returned 78 [0124.075] _wcsicmp (_String1="FOR", _String2="WMIC.exe") returned -17 [0124.075] _wcsicmp (_String1="FOR/?", _String2="WMIC.exe") returned -17 [0124.075] _wcsicmp (_String1="IF", _String2="WMIC.exe") returned -14 [0124.075] _wcsicmp (_String1="IF/?", _String2="WMIC.exe") returned -14 [0124.075] _wcsicmp (_String1="REM", _String2="WMIC.exe") returned -5 [0124.075] _wcsicmp (_String1="REM/?", _String2="WMIC.exe") returned -5 [0124.075] GetProcessHeap () returned 0x9a0000 [0124.075] RtlAllocateHeap (HeapHandle=0x9a0000, Flags=0x8, Size=0x58) returned 0x9a7dc0 [0124.075] GetProcessHeap () returned 0x9a0000 [0124.075] RtlAllocateHeap (HeapHandle=0x9a0000, Flags=0x8, Size=0x1a) returned 0x9a7e20 [0124.076] GetProcessHeap () returned 0x9a0000 [0124.076] RtlAllocateHeap (HeapHandle=0x9a0000, Flags=0x8, Size=0x2e) returned 0x9a7e48 [0124.076] GetConsoleTitleW (lpConsoleTitle=0x6ff680, nSize=0x104) Thread: id = 134 os_tid = 0x11d0 Process: id = "7" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x8ab4000" os_pid = "0x1380" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13a8" cmd_line = "cmd.exe /c \"vssadmin.exe Delete Shadows /all /quiet\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 32 os_tid = 0x12f0 [0111.220] GetModuleHandleA (lpModuleName=0x0) returned 0xb70000 [0111.220] __set_app_type (_Type=0x1) [0111.220] __p__fmode () returned 0x74ff3c14 [0111.220] __p__commode () returned 0x74ff49ec [0111.221] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xb86fd0) returned 0x0 [0111.221] __getmainargs (in: _Argc=0xb9d1a4, _Argv=0xb9d1a8, _Env=0xb9d1ac, _DoWildCard=0, _StartInfo=0xb9d1b8 | out: _Argc=0xb9d1a4, _Argv=0xb9d1a8, _Env=0xb9d1ac) returned 0 [0111.221] _onexit (_Func=0xb88030) returned 0xb88030 [0111.221] _onexit (_Func=0xb88040) returned 0xb88040 [0111.221] _onexit (_Func=0xb88050) returned 0xb88050 [0111.221] _onexit (_Func=0xb88060) returned 0xb88060 [0111.221] _onexit (_Func=0xb88070) returned 0xb88070 [0111.956] _onexit (_Func=0xb88080) returned 0xb88080 [0111.956] GetCurrentThreadId () returned 0x12f0 [0111.956] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x12f0) returned 0xbc [0111.956] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x73b80000 [0111.956] GetProcAddress (hModule=0x73b80000, lpProcName="SetThreadUILanguage") returned 0x73b94f70 [0111.956] SetThreadUILanguage (LangId=0x0) returned 0x9c0409 [0112.961] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0112.961] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x7bf8a8 | out: phkResult=0x7bf8a8*=0x0) returned 0x2 [0112.961] VirtualQuery (in: lpAddress=0x7bf8b3, lpBuffer=0x7bf860, dwLength=0x1c | out: lpBuffer=0x7bf860*(BaseAddress=0x7bf000, AllocationBase=0x6c0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0112.961] VirtualQuery (in: lpAddress=0x6c0000, lpBuffer=0x7bf860, dwLength=0x1c | out: lpBuffer=0x7bf860*(BaseAddress=0x6c0000, AllocationBase=0x6c0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0112.961] VirtualQuery (in: lpAddress=0x6c1000, lpBuffer=0x7bf860, dwLength=0x1c | out: lpBuffer=0x7bf860*(BaseAddress=0x6c1000, AllocationBase=0x6c0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0112.961] VirtualQuery (in: lpAddress=0x6c3000, lpBuffer=0x7bf860, dwLength=0x1c | out: lpBuffer=0x7bf860*(BaseAddress=0x6c3000, AllocationBase=0x6c0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0112.961] VirtualQuery (in: lpAddress=0x7c0000, lpBuffer=0x7bf860, dwLength=0x1c | out: lpBuffer=0x7bf860*(BaseAddress=0x7c0000, AllocationBase=0x7c0000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c [0112.961] GetConsoleOutputCP () returned 0x1b5 [0113.440] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0xba3850 | out: lpCPInfo=0xba3850) returned 1 [0113.441] SetConsoleCtrlHandler (HandlerRoutine=0xb97260, Add=1) returned 1 [0113.441] _get_osfhandle (_FileHandle=1) returned 0x90 [0113.441] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xba388c | out: lpMode=0xba388c) returned 1 [0114.409] _get_osfhandle (_FileHandle=0) returned 0x8c [0114.409] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0xba3888 | out: lpMode=0xba3888) returned 1 [0116.004] _get_osfhandle (_FileHandle=1) returned 0x90 [0116.004] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x0) returned 1 [0117.065] _get_osfhandle (_FileHandle=1) returned 0x90 [0117.065] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xba3890 | out: lpMode=0xba3890) returned 1 [0118.410] _get_osfhandle (_FileHandle=1) returned 0x90 [0118.410] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0119.482] _get_osfhandle (_FileHandle=0) returned 0x8c [0119.482] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0xba3894 | out: lpMode=0xba3894) returned 1 [0120.382] _get_osfhandle (_FileHandle=0) returned 0x8c [0120.382] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0121.764] GetEnvironmentStringsW () returned 0x14c68* [0121.764] GetProcessHeap () returned 0x10000 [0121.771] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0xaca) returned 0x15740 [0121.771] FreeEnvironmentStringsA (penv="A") returned 1 [0121.771] GetProcessHeap () returned 0x10000 [0121.771] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x4) returned 0x14720 [0121.771] GetEnvironmentStringsW () returned 0x14c68* [0121.771] GetProcessHeap () returned 0x10000 [0121.771] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0xaca) returned 0x16218 [0121.771] FreeEnvironmentStringsA (penv="A") returned 1 [0121.771] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x7be804 | out: phkResult=0x7be804*=0xcc) returned 0x0 [0121.772] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x7be80c, lpData=0x7be810, lpcbData=0x7be808*=0x1000 | out: lpType=0x7be80c*=0x0, lpData=0x7be810*=0x20, lpcbData=0x7be808*=0x1000) returned 0x2 [0121.772] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x7be80c, lpData=0x7be810, lpcbData=0x7be808*=0x1000 | out: lpType=0x7be80c*=0x4, lpData=0x7be810*=0x1, lpcbData=0x7be808*=0x4) returned 0x0 [0121.772] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x7be80c, lpData=0x7be810, lpcbData=0x7be808*=0x1000 | out: lpType=0x7be80c*=0x0, lpData=0x7be810*=0x1, lpcbData=0x7be808*=0x1000) returned 0x2 [0121.772] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x7be80c, lpData=0x7be810, lpcbData=0x7be808*=0x1000 | out: lpType=0x7be80c*=0x4, lpData=0x7be810*=0x0, lpcbData=0x7be808*=0x4) returned 0x0 [0121.772] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x7be80c, lpData=0x7be810, lpcbData=0x7be808*=0x1000 | out: lpType=0x7be80c*=0x4, lpData=0x7be810*=0x40, lpcbData=0x7be808*=0x4) returned 0x0 [0121.772] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x7be80c, lpData=0x7be810, lpcbData=0x7be808*=0x1000 | out: lpType=0x7be80c*=0x4, lpData=0x7be810*=0x40, lpcbData=0x7be808*=0x4) returned 0x0 [0121.772] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x7be80c, lpData=0x7be810, lpcbData=0x7be808*=0x1000 | out: lpType=0x7be80c*=0x0, lpData=0x7be810*=0x40, lpcbData=0x7be808*=0x1000) returned 0x2 [0121.772] RegCloseKey (hKey=0xcc) returned 0x0 [0121.772] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x7be804 | out: phkResult=0x7be804*=0xcc) returned 0x0 [0121.772] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x7be80c, lpData=0x7be810, lpcbData=0x7be808*=0x1000 | out: lpType=0x7be80c*=0x0, lpData=0x7be810*=0x40, lpcbData=0x7be808*=0x1000) returned 0x2 [0121.772] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x7be80c, lpData=0x7be810, lpcbData=0x7be808*=0x1000 | out: lpType=0x7be80c*=0x4, lpData=0x7be810*=0x1, lpcbData=0x7be808*=0x4) returned 0x0 [0121.772] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x7be80c, lpData=0x7be810, lpcbData=0x7be808*=0x1000 | out: lpType=0x7be80c*=0x0, lpData=0x7be810*=0x1, lpcbData=0x7be808*=0x1000) returned 0x2 [0121.772] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x7be80c, lpData=0x7be810, lpcbData=0x7be808*=0x1000 | out: lpType=0x7be80c*=0x4, lpData=0x7be810*=0x0, lpcbData=0x7be808*=0x4) returned 0x0 [0121.772] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x7be80c, lpData=0x7be810, lpcbData=0x7be808*=0x1000 | out: lpType=0x7be80c*=0x4, lpData=0x7be810*=0x9, lpcbData=0x7be808*=0x4) returned 0x0 [0121.772] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x7be80c, lpData=0x7be810, lpcbData=0x7be808*=0x1000 | out: lpType=0x7be80c*=0x4, lpData=0x7be810*=0x9, lpcbData=0x7be808*=0x4) returned 0x0 [0121.772] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0x7be80c, lpData=0x7be810, lpcbData=0x7be808*=0x1000 | out: lpType=0x7be80c*=0x0, lpData=0x7be810*=0x9, lpcbData=0x7be808*=0x1000) returned 0x2 [0121.772] RegCloseKey (hKey=0xcc) returned 0x0 [0121.773] time (in: timer=0x0 | out: timer=0x0) returned 0x5e55128a [0121.773] srand (_Seed=0x5e55128a) [0121.773] GetCommandLineW () returned="cmd.exe /c \"vssadmin.exe Delete Shadows /all /quiet\"" [0121.773] malloc (_Size=0x4000) returned 0x2ef21f0 [0121.773] GetCommandLineW () returned="cmd.exe /c \"vssadmin.exe Delete Shadows /all /quiet\"" [0121.773] malloc (_Size=0xffce) returned 0x2da0048 [0121.773] ??_V@YAXPAX@Z () returned 0x7bf7e8 [0121.774] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2da0048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0121.774] malloc (_Size=0xffce) returned 0x2db0020 [0121.774] ??_V@YAXPAX@Z () returned 0x7bf5bc [0121.774] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2db0020, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0121.774] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0xb9f840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0121.774] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xb9f840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0121.774] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0xb9f840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0121.774] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0121.775] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0121.775] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0121.775] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0121.775] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0121.775] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0121.775] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0121.775] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0121.775] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0121.775] GetProcessHeap () returned 0x10000 [0121.775] RtlFreeHeap (HeapHandle=0x10000, Flags=0x0, BaseAddress=0x15740) returned 1 [0121.775] GetEnvironmentStringsW () returned 0x14c68* [0121.775] GetProcessHeap () returned 0x10000 [0121.775] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0xae2) returned 0x177e0 [0121.775] FreeEnvironmentStringsA (penv="A") returned 1 [0121.775] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0xb9f840, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0121.775] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0xb9f840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0121.775] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0121.775] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0121.775] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0121.775] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0121.775] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0121.775] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0121.775] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0121.775] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0121.775] malloc (_Size=0xffce) returned 0x2dbfff8 [0121.776] ??_V@YAXPAX@Z () returned 0x7bf354 [0121.776] GetProcessHeap () returned 0x10000 [0121.776] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x38) returned 0x147b8 [0121.776] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2dbfff8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0121.776] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x2dbfff8, lpFilePart=0x7bf3a0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x7bf3a0*="Desktop") returned 0x17 [0121.776] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0121.776] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x7bf120 | out: lpFindFileData=0x7bf120*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xd7bf47b5, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x147f8 [0121.777] FindClose (in: hFindFile=0x147f8 | out: hFindFile=0x147f8) returned 1 [0121.777] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0x7bf120 | out: lpFindFileData=0x7bf120*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x147f8 [0121.777] FindClose (in: hFindFile=0x147f8 | out: hFindFile=0x147f8) returned 1 [0121.777] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0x7bf120 | out: lpFindFileData=0x7bf120*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xcbf1bdaa, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xcbf1bdaa, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x147f8 [0121.777] FindClose (in: hFindFile=0x147f8 | out: hFindFile=0x147f8) returned 1 [0121.777] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0121.777] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0121.777] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0121.777] GetProcessHeap () returned 0x10000 [0121.777] RtlFreeHeap (HeapHandle=0x10000, Flags=0x0, BaseAddress=0x177e0) returned 1 [0121.777] GetEnvironmentStringsW () returned 0x14c68* [0121.777] GetProcessHeap () returned 0x10000 [0121.777] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0xb1a) returned 0x16cf0 [0121.777] FreeEnvironmentStringsA (penv="=") returned 1 [0121.777] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2da0048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0121.777] GetProcessHeap () returned 0x10000 [0121.777] RtlFreeHeap (HeapHandle=0x10000, Flags=0x0, BaseAddress=0x147b8) returned 1 [0121.777] ??_V@YAXPAX@Z () returned 0x1 [0121.777] ??_V@YAXPAX@Z () returned 0x1 [0121.777] GetProcessHeap () returned 0x10000 [0121.777] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x400e) returned 0x18df8 [0121.778] GetProcessHeap () returned 0x10000 [0121.778] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x60) returned 0x147b8 [0121.778] GetProcessHeap () returned 0x10000 [0121.778] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x4008) returned 0x1ce10 [0121.778] GetProcessHeap () returned 0x10000 [0121.778] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x4008) returned 0x20e20 [0121.779] _wcsnicmp (_String1="vssa", _String2="cmd ", _MaxCount=0x4) returned 19 [0121.779] malloc (_Size=0xffce) returned 0x2db0020 [0121.779] ??_V@YAXPAX@Z () returned 0x7bf504 [0121.780] GetProcessHeap () returned 0x10000 [0121.780] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x1ffa4) returned 0x24e30 [0121.781] SetErrorMode (uMode=0x0) returned 0x0 [0121.781] SetErrorMode (uMode=0x1) returned 0x0 [0121.781] GetFullPathNameW (in: lpFileName="vssadmin.exe Delete Shadows \\all \\.", nBufferLength=0xffce, lpBuffer=0x24e38, lpFilePart=0x7bf524 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\vssadmin.exe Delete Shadows \\all", lpFilePart=0x7bf524*="all") returned 0x38 [0121.781] SetErrorMode (uMode=0x0) returned 0x1 [0121.781] GetProcessHeap () returned 0x10000 [0121.781] RtlReAllocateHeap (Heap=0x10000, Flags=0x0, Ptr=0x24e30, Size=0x86) returned 0x24e30 [0121.781] GetProcessHeap () returned 0x10000 [0121.781] RtlSizeHeap (HeapHandle=0x10000, Flags=0x0, MemoryPointer=0x24e30) returned 0x86 [0121.781] NeedCurrentDirectoryForExePathW (ExeName="vssadmin.exe Delete Shadows \\all \\.") returned 1 [0121.781] GetProcessHeap () returned 0x10000 [0121.781] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x80) returned 0x17818 [0121.781] GetProcessHeap () returned 0x10000 [0121.781] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0xf4) returned 0x178a0 [0121.782] GetProcessHeap () returned 0x10000 [0121.782] RtlReAllocateHeap (Heap=0x10000, Flags=0x0, Ptr=0x178a0, Size=0x80) returned 0x178a0 [0121.782] GetProcessHeap () returned 0x10000 [0121.782] RtlSizeHeap (HeapHandle=0x10000, Flags=0x0, MemoryPointer=0x178a0) returned 0x80 [0121.782] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xb9f840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0121.782] GetProcessHeap () returned 0x10000 [0121.782] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0xe0) returned 0x17928 [0121.785] GetProcessHeap () returned 0x10000 [0121.785] RtlReAllocateHeap (Heap=0x10000, Flags=0x0, Ptr=0x17928, Size=0x76) returned 0x17928 [0121.785] GetProcessHeap () returned 0x10000 [0121.785] RtlSizeHeap (HeapHandle=0x10000, Flags=0x0, MemoryPointer=0x17928) returned 0x76 [0121.786] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0121.786] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\vssadmin.exe Delete Shadows \\all\\quiet.*", fInfoLevelId=0x1, lpFindFileData=0x7bf2b0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x7bf2b0) returned 0xffffffff [0121.786] GetLastError () returned 0x3 [0121.786] ??_V@YAXPAX@Z () returned 0x1 [0121.786] GetProcessHeap () returned 0x10000 [0121.786] RtlFreeHeap (HeapHandle=0x10000, Flags=0x0, BaseAddress=0x1ce10) returned 1 [0121.787] GetProcessHeap () returned 0x10000 [0121.787] RtlFreeHeap (HeapHandle=0x10000, Flags=0x0, BaseAddress=0x20e20) returned 1 [0121.787] GetProcessHeap () returned 0x10000 [0121.787] RtlFreeHeap (HeapHandle=0x10000, Flags=0x0, BaseAddress=0x18df8) returned 1 [0121.787] GetConsoleOutputCP () returned 0x1b5 [0122.926] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0xba3850 | out: lpCPInfo=0xba3850) returned 1 [0122.926] GetUserDefaultLCID () returned 0x409 [0122.926] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0xb9f82c, cchData=8 | out: lpLCData=":") returned 2 [0122.926] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x7bf710, cchData=128 | out: lpLCData="0") returned 2 [0122.926] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x7bf710, cchData=128 | out: lpLCData="0") returned 2 [0122.926] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x7bf710, cchData=128 | out: lpLCData="1") returned 2 [0122.926] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0xb9f81c, cchData=8 | out: lpLCData="/") returned 2 [0122.926] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0xb9f7b8, cchData=32 | out: lpLCData="Mon") returned 4 [0122.926] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0xb9f778, cchData=32 | out: lpLCData="Tue") returned 4 [0122.926] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0xb9f738, cchData=32 | out: lpLCData="Wed") returned 4 [0122.926] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0xb9f6f8, cchData=32 | out: lpLCData="Thu") returned 4 [0122.926] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0xb9f6b8, cchData=32 | out: lpLCData="Fri") returned 4 [0122.926] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0xb9f678, cchData=32 | out: lpLCData="Sat") returned 4 [0122.926] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0xb9f638, cchData=32 | out: lpLCData="Sun") returned 4 [0122.926] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0xb9f80c, cchData=8 | out: lpLCData=".") returned 2 [0122.926] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0xb9f7f8, cchData=8 | out: lpLCData=",") returned 2 [0122.926] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0122.928] GetProcessHeap () returned 0x10000 [0122.928] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x0, Size=0x20c) returned 0x179a8 [0122.928] GetConsoleTitleW (in: lpConsoleTitle=0x179a8, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\SYSTEM32\\cmd.exe") returned 0x1c [0124.076] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x73b80000 [0124.076] GetProcAddress (hModule=0x73b80000, lpProcName="CopyFileExW") returned 0x73b94330 [0124.077] GetProcAddress (hModule=0x73b80000, lpProcName="IsDebuggerPresent") returned 0x73b95930 [0124.077] GetProcAddress (hModule=0x73b80000, lpProcName="SetConsoleInputExeNameW") returned 0x74eb09d0 [0124.077] ??_V@YAXPAX@Z () returned 0x1 [0124.077] GetProcessHeap () returned 0x10000 [0124.077] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x400a) returned 0x18df8 [0124.077] GetProcessHeap () returned 0x10000 [0124.077] RtlFreeHeap (HeapHandle=0x10000, Flags=0x0, BaseAddress=0x18df8) returned 1 [0124.078] _wcsicmp (_String1="vssadmin.exe", _String2=")") returned 77 [0124.078] _wcsicmp (_String1="FOR", _String2="vssadmin.exe") returned -16 [0124.078] _wcsicmp (_String1="FOR/?", _String2="vssadmin.exe") returned -16 [0124.078] _wcsicmp (_String1="IF", _String2="vssadmin.exe") returned -13 [0124.078] _wcsicmp (_String1="IF/?", _String2="vssadmin.exe") returned -13 [0124.078] _wcsicmp (_String1="REM", _String2="vssadmin.exe") returned -4 [0124.078] _wcsicmp (_String1="REM/?", _String2="vssadmin.exe") returned -4 [0124.078] GetProcessHeap () returned 0x10000 [0124.078] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x58) returned 0x17bc0 [0124.078] GetProcessHeap () returned 0x10000 [0124.078] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x22) returned 0x17c20 [0124.079] GetProcessHeap () returned 0x10000 [0124.079] RtlAllocateHeap (HeapHandle=0x10000, Flags=0x8, Size=0x40) returned 0x17c50 [0124.079] GetConsoleTitleW (lpConsoleTitle=0x7bf608, nSize=0x104) Thread: id = 130 os_tid = 0x1264 Process: id = "8" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x22db5000" os_pid = "0x1308" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13a8" cmd_line = "cmd.exe /c \"bcdedit /set {default} recoveryenabled No & bcdedit /set {default}\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 33 os_tid = 0x1304 [0111.210] GetModuleHandleA (lpModuleName=0x0) returned 0xb70000 [0111.210] __set_app_type (_Type=0x1) [0111.210] __p__fmode () returned 0x74ff3c14 [0111.210] __p__commode () returned 0x74ff49ec [0111.210] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xb86fd0) returned 0x0 [0111.210] __getmainargs (in: _Argc=0xb9d1a4, _Argv=0xb9d1a8, _Env=0xb9d1ac, _DoWildCard=0, _StartInfo=0xb9d1b8 | out: _Argc=0xb9d1a4, _Argv=0xb9d1a8, _Env=0xb9d1ac) returned 0 [0111.211] _onexit (_Func=0xb88030) returned 0xb88030 [0111.211] _onexit (_Func=0xb88040) returned 0xb88040 [0111.211] _onexit (_Func=0xb88050) returned 0xb88050 [0111.211] _onexit (_Func=0xb88060) returned 0xb88060 [0111.211] _onexit (_Func=0xb88070) returned 0xb88070 [0111.262] _onexit (_Func=0xb88080) returned 0xb88080 [0111.262] GetCurrentThreadId () returned 0x1304 [0111.263] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x1304) returned 0xbc [0111.263] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x73b80000 [0111.263] GetProcAddress (hModule=0x73b80000, lpProcName="SetThreadUILanguage") returned 0x73b94f70 [0111.263] SetThreadUILanguage (LangId=0x0) returned 0x2cc0409 [0112.430] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0112.430] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0xa0fbb4 | out: phkResult=0xa0fbb4*=0x0) returned 0x2 [0112.431] VirtualQuery (in: lpAddress=0xa0fbbf, lpBuffer=0xa0fb6c, dwLength=0x1c | out: lpBuffer=0xa0fb6c*(BaseAddress=0xa0f000, AllocationBase=0x910000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0112.431] VirtualQuery (in: lpAddress=0x910000, lpBuffer=0xa0fb6c, dwLength=0x1c | out: lpBuffer=0xa0fb6c*(BaseAddress=0x910000, AllocationBase=0x910000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0112.431] VirtualQuery (in: lpAddress=0x911000, lpBuffer=0xa0fb6c, dwLength=0x1c | out: lpBuffer=0xa0fb6c*(BaseAddress=0x911000, AllocationBase=0x910000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0112.431] VirtualQuery (in: lpAddress=0x913000, lpBuffer=0xa0fb6c, dwLength=0x1c | out: lpBuffer=0xa0fb6c*(BaseAddress=0x913000, AllocationBase=0x910000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0112.431] VirtualQuery (in: lpAddress=0xa10000, lpBuffer=0xa0fb6c, dwLength=0x1c | out: lpBuffer=0xa0fb6c*(BaseAddress=0xa10000, AllocationBase=0xa10000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c [0112.431] GetConsoleOutputCP () returned 0x1b5 [0113.253] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0xba3850 | out: lpCPInfo=0xba3850) returned 1 [0113.253] SetConsoleCtrlHandler (HandlerRoutine=0xb97260, Add=1) returned 1 [0113.253] _get_osfhandle (_FileHandle=1) returned 0x90 [0113.253] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xba388c | out: lpMode=0xba388c) returned 1 [0114.175] _get_osfhandle (_FileHandle=0) returned 0x8c [0114.175] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0xba3888 | out: lpMode=0xba3888) returned 1 [0115.253] _get_osfhandle (_FileHandle=1) returned 0x90 [0115.253] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x0) returned 1 [0116.425] _get_osfhandle (_FileHandle=1) returned 0x90 [0116.425] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xba3890 | out: lpMode=0xba3890) returned 1 [0117.741] _get_osfhandle (_FileHandle=1) returned 0x90 [0117.741] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0119.134] _get_osfhandle (_FileHandle=0) returned 0x8c [0119.134] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0xba3894 | out: lpMode=0xba3894) returned 1 [0120.073] _get_osfhandle (_FileHandle=0) returned 0x8c [0120.073] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0120.867] GetEnvironmentStringsW () returned 0x2ed4bd8* [0120.867] GetProcessHeap () returned 0x2ed0000 [0120.867] RtlAllocateHeap (HeapHandle=0x2ed0000, Flags=0x8, Size=0xaca) returned 0x2ed56b0 [0120.868] FreeEnvironmentStringsA (penv="A") returned 1 [0120.868] GetProcessHeap () returned 0x2ed0000 [0120.868] RtlAllocateHeap (HeapHandle=0x2ed0000, Flags=0x8, Size=0x4) returned 0x2ed46b8 [0120.868] GetEnvironmentStringsW () returned 0x2ed4bd8* [0120.868] GetProcessHeap () returned 0x2ed0000 [0120.868] RtlAllocateHeap (HeapHandle=0x2ed0000, Flags=0x8, Size=0xaca) returned 0x2ed6188 [0120.868] FreeEnvironmentStringsA (penv="A") returned 1 [0120.868] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xa0eb10 | out: phkResult=0xa0eb10*=0xcc) returned 0x0 [0120.868] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xa0eb18, lpData=0xa0eb1c, lpcbData=0xa0eb14*=0x1000 | out: lpType=0xa0eb18*=0x0, lpData=0xa0eb1c*=0x0, lpcbData=0xa0eb14*=0x1000) returned 0x2 [0120.868] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xa0eb18, lpData=0xa0eb1c, lpcbData=0xa0eb14*=0x1000 | out: lpType=0xa0eb18*=0x4, lpData=0xa0eb1c*=0x1, lpcbData=0xa0eb14*=0x4) returned 0x0 [0120.868] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xa0eb18, lpData=0xa0eb1c, lpcbData=0xa0eb14*=0x1000 | out: lpType=0xa0eb18*=0x0, lpData=0xa0eb1c*=0x1, lpcbData=0xa0eb14*=0x1000) returned 0x2 [0120.868] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xa0eb18, lpData=0xa0eb1c, lpcbData=0xa0eb14*=0x1000 | out: lpType=0xa0eb18*=0x4, lpData=0xa0eb1c*=0x0, lpcbData=0xa0eb14*=0x4) returned 0x0 [0120.868] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xa0eb18, lpData=0xa0eb1c, lpcbData=0xa0eb14*=0x1000 | out: lpType=0xa0eb18*=0x4, lpData=0xa0eb1c*=0x40, lpcbData=0xa0eb14*=0x4) returned 0x0 [0120.868] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xa0eb18, lpData=0xa0eb1c, lpcbData=0xa0eb14*=0x1000 | out: lpType=0xa0eb18*=0x4, lpData=0xa0eb1c*=0x40, lpcbData=0xa0eb14*=0x4) returned 0x0 [0120.868] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0xa0eb18, lpData=0xa0eb1c, lpcbData=0xa0eb14*=0x1000 | out: lpType=0xa0eb18*=0x0, lpData=0xa0eb1c*=0x40, lpcbData=0xa0eb14*=0x1000) returned 0x2 [0120.868] RegCloseKey (hKey=0xcc) returned 0x0 [0120.869] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xa0eb10 | out: phkResult=0xa0eb10*=0xcc) returned 0x0 [0120.869] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xa0eb18, lpData=0xa0eb1c, lpcbData=0xa0eb14*=0x1000 | out: lpType=0xa0eb18*=0x0, lpData=0xa0eb1c*=0x40, lpcbData=0xa0eb14*=0x1000) returned 0x2 [0120.869] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xa0eb18, lpData=0xa0eb1c, lpcbData=0xa0eb14*=0x1000 | out: lpType=0xa0eb18*=0x4, lpData=0xa0eb1c*=0x1, lpcbData=0xa0eb14*=0x4) returned 0x0 [0120.869] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xa0eb18, lpData=0xa0eb1c, lpcbData=0xa0eb14*=0x1000 | out: lpType=0xa0eb18*=0x0, lpData=0xa0eb1c*=0x1, lpcbData=0xa0eb14*=0x1000) returned 0x2 [0120.869] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xa0eb18, lpData=0xa0eb1c, lpcbData=0xa0eb14*=0x1000 | out: lpType=0xa0eb18*=0x4, lpData=0xa0eb1c*=0x0, lpcbData=0xa0eb14*=0x4) returned 0x0 [0120.869] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xa0eb18, lpData=0xa0eb1c, lpcbData=0xa0eb14*=0x1000 | out: lpType=0xa0eb18*=0x4, lpData=0xa0eb1c*=0x9, lpcbData=0xa0eb14*=0x4) returned 0x0 [0120.869] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xa0eb18, lpData=0xa0eb1c, lpcbData=0xa0eb14*=0x1000 | out: lpType=0xa0eb18*=0x4, lpData=0xa0eb1c*=0x9, lpcbData=0xa0eb14*=0x4) returned 0x0 [0120.869] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0xa0eb18, lpData=0xa0eb1c, lpcbData=0xa0eb14*=0x1000 | out: lpType=0xa0eb18*=0x0, lpData=0xa0eb1c*=0x9, lpcbData=0xa0eb14*=0x1000) returned 0x2 [0120.869] RegCloseKey (hKey=0xcc) returned 0x0 [0120.869] time (in: timer=0x0 | out: timer=0x0) returned 0x5e551289 [0120.869] srand (_Seed=0x5e551289) [0120.869] GetCommandLineW () returned="cmd.exe /c \"bcdedit /set {default} recoveryenabled No & bcdedit /set {default}\"" [0120.869] malloc (_Size=0x4000) returned 0x32521f0 [0120.870] GetCommandLineW () returned="cmd.exe /c \"bcdedit /set {default} recoveryenabled No & bcdedit /set {default}\"" [0120.870] malloc (_Size=0xffce) returned 0x30d0048 [0120.870] ??_V@YAXPAX@Z () returned 0xa0faf4 [0120.870] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x30d0048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0120.872] malloc (_Size=0xffce) returned 0x30e0020 [0120.872] ??_V@YAXPAX@Z () returned 0xa0f8c8 [0120.872] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x30e0020, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0120.872] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0xb9f840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0120.872] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xb9f840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0120.872] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0xb9f840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0120.872] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0120.873] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0120.873] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0120.873] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0120.873] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0120.873] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0120.873] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0120.873] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0120.873] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0120.873] GetProcessHeap () returned 0x2ed0000 [0120.873] RtlFreeHeap (HeapHandle=0x2ed0000, Flags=0x0, BaseAddress=0x2ed56b0) returned 1 [0120.873] GetEnvironmentStringsW () returned 0x2ed4bd8* [0120.873] GetProcessHeap () returned 0x2ed0000 [0120.873] RtlAllocateHeap (HeapHandle=0x2ed0000, Flags=0x8, Size=0xae2) returned 0x2ed7750 [0120.873] FreeEnvironmentStringsA (penv="A") returned 1 [0120.873] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0xb9f840, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0120.873] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0xb9f840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0120.873] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0120.873] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0120.873] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0120.873] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0120.873] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0120.873] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0120.873] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0120.873] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0120.873] malloc (_Size=0xffce) returned 0x30efff8 [0120.874] ??_V@YAXPAX@Z () returned 0xa0f660 [0120.874] GetProcessHeap () returned 0x2ed0000 [0120.874] RtlAllocateHeap (HeapHandle=0x2ed0000, Flags=0x8, Size=0x38) returned 0x2ed0ae0 [0120.874] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x30efff8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0120.874] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x30efff8, lpFilePart=0xa0f6ac | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0xa0f6ac*="Desktop") returned 0x17 [0120.874] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0120.875] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0xa0f430 | out: lpFindFileData=0xa0f430*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x2ed0b20 [0120.875] FindClose (in: hFindFile=0x2ed0b20 | out: hFindFile=0x2ed0b20) returned 1 [0120.875] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0xa0f430 | out: lpFindFileData=0xa0f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x2ed0b20 [0120.875] FindClose (in: hFindFile=0x2ed0b20 | out: hFindFile=0x2ed0b20) returned 1 [0120.875] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0xa0f430 | out: lpFindFileData=0xa0f430*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xcbf1bdaa, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xcbf1bdaa, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x2ed0b20 [0120.875] FindClose (in: hFindFile=0x2ed0b20 | out: hFindFile=0x2ed0b20) returned 1 [0120.875] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0120.875] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0120.876] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0120.876] GetProcessHeap () returned 0x2ed0000 [0120.876] RtlFreeHeap (HeapHandle=0x2ed0000, Flags=0x0, BaseAddress=0x2ed7750) returned 1 [0120.876] GetEnvironmentStringsW () returned 0x2ed4bd8* [0120.876] GetProcessHeap () returned 0x2ed0000 [0120.876] RtlAllocateHeap (HeapHandle=0x2ed0000, Flags=0x8, Size=0xb1a) returned 0x2ed6c60 [0120.876] FreeEnvironmentStringsA (penv="=") returned 1 [0120.876] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x30d0048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0120.876] GetProcessHeap () returned 0x2ed0000 [0120.876] RtlFreeHeap (HeapHandle=0x2ed0000, Flags=0x0, BaseAddress=0x2ed0ae0) returned 1 [0120.876] ??_V@YAXPAX@Z () returned 0x1 [0120.876] ??_V@YAXPAX@Z () returned 0x1 [0120.876] GetProcessHeap () returned 0x2ed0000 [0120.876] RtlAllocateHeap (HeapHandle=0x2ed0000, Flags=0x8, Size=0x400e) returned 0x2ed8d68 [0120.876] GetProcessHeap () returned 0x2ed0000 [0120.876] RtlAllocateHeap (HeapHandle=0x2ed0000, Flags=0x8, Size=0x96) returned 0x2ed7788 [0120.876] GetProcessHeap () returned 0x2ed0000 [0120.876] RtlAllocateHeap (HeapHandle=0x2ed0000, Flags=0x8, Size=0x4008) returned 0x2edcd80 [0120.877] GetProcessHeap () returned 0x2ed0000 [0120.877] RtlAllocateHeap (HeapHandle=0x2ed0000, Flags=0x8, Size=0x4008) returned 0x2ee0d90 [0120.878] GetProcessHeap () returned 0x2ed0000 [0120.878] RtlFreeHeap (HeapHandle=0x2ed0000, Flags=0x0, BaseAddress=0x2ed8d68) returned 1 [0120.878] GetConsoleOutputCP () returned 0x1b5 [0122.488] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0xba3850 | out: lpCPInfo=0xba3850) returned 1 [0122.488] GetUserDefaultLCID () returned 0x409 [0122.488] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0xb9f82c, cchData=8 | out: lpLCData=":") returned 2 [0122.488] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0xa0fa1c, cchData=128 | out: lpLCData="0") returned 2 [0122.488] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0xa0fa1c, cchData=128 | out: lpLCData="0") returned 2 [0122.488] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0xa0fa1c, cchData=128 | out: lpLCData="1") returned 2 [0122.488] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0xb9f81c, cchData=8 | out: lpLCData="/") returned 2 [0122.488] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0xb9f7b8, cchData=32 | out: lpLCData="Mon") returned 4 [0122.488] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0xb9f778, cchData=32 | out: lpLCData="Tue") returned 4 [0122.488] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0xb9f738, cchData=32 | out: lpLCData="Wed") returned 4 [0122.488] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0xb9f6f8, cchData=32 | out: lpLCData="Thu") returned 4 [0122.488] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0xb9f6b8, cchData=32 | out: lpLCData="Fri") returned 4 [0122.489] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0xb9f678, cchData=32 | out: lpLCData="Sat") returned 4 [0122.489] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0xb9f638, cchData=32 | out: lpLCData="Sun") returned 4 [0122.489] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0xb9f80c, cchData=8 | out: lpLCData=".") returned 2 [0122.489] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0xb9f7f8, cchData=8 | out: lpLCData=",") returned 2 [0122.489] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0122.490] GetProcessHeap () returned 0x2ed0000 [0122.490] RtlAllocateHeap (HeapHandle=0x2ed0000, Flags=0x0, Size=0x20c) returned 0x2ed7870 [0122.490] GetConsoleTitleW (in: lpConsoleTitle=0x2ed7870, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\SYSTEM32\\cmd.exe") returned 0x1c [0123.656] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x73b80000 [0123.656] GetProcAddress (hModule=0x73b80000, lpProcName="CopyFileExW") returned 0x73b94330 [0123.656] GetProcAddress (hModule=0x73b80000, lpProcName="IsDebuggerPresent") returned 0x73b95930 [0123.656] GetProcAddress (hModule=0x73b80000, lpProcName="SetConsoleInputExeNameW") returned 0x74eb09d0 [0123.656] ??_V@YAXPAX@Z () returned 0x1 [0123.656] GetProcessHeap () returned 0x2ed0000 [0123.656] RtlAllocateHeap (HeapHandle=0x2ed0000, Flags=0x8, Size=0x400a) returned 0x2ed8d68 [0123.656] GetProcessHeap () returned 0x2ed0000 [0123.656] RtlFreeHeap (HeapHandle=0x2ed0000, Flags=0x0, BaseAddress=0x2ed8d68) returned 1 [0123.657] _wcsicmp (_String1="bcdedit", _String2=")") returned 57 [0123.657] _wcsicmp (_String1="FOR", _String2="bcdedit") returned 4 [0123.657] _wcsicmp (_String1="FOR/?", _String2="bcdedit") returned 4 [0123.657] _wcsicmp (_String1="IF", _String2="bcdedit") returned 7 [0123.657] _wcsicmp (_String1="IF/?", _String2="bcdedit") returned 7 [0123.657] _wcsicmp (_String1="REM", _String2="bcdedit") returned 16 [0123.657] _wcsicmp (_String1="REM/?", _String2="bcdedit") returned 16 [0123.657] GetProcessHeap () returned 0x2ed0000 [0123.657] RtlAllocateHeap (HeapHandle=0x2ed0000, Flags=0x8, Size=0x58) returned 0x2ed7a88 [0123.657] GetProcessHeap () returned 0x2ed0000 [0123.657] RtlAllocateHeap (HeapHandle=0x2ed0000, Flags=0x8, Size=0x18) returned 0x2ed7ae8 [0123.658] GetProcessHeap () returned 0x2ed0000 [0123.658] RtlAllocateHeap (HeapHandle=0x2ed0000, Flags=0x8, Size=0x50) returned 0x2ed7b08 [0123.658] GetProcessHeap () returned 0x2ed0000 [0123.658] RtlAllocateHeap (HeapHandle=0x2ed0000, Flags=0x8, Size=0x58) returned 0x2ed7b60 [0123.659] _wcsicmp (_String1="bcdedit", _String2=")") returned 57 [0123.659] _wcsicmp (_String1="FOR", _String2="bcdedit") returned 4 [0123.659] _wcsicmp (_String1="FOR/?", _String2="bcdedit") returned 4 [0123.659] _wcsicmp (_String1="IF", _String2="bcdedit") returned 7 [0123.659] _wcsicmp (_String1="IF/?", _String2="bcdedit") returned 7 [0123.659] _wcsicmp (_String1="REM", _String2="bcdedit") returned 16 [0123.659] _wcsicmp (_String1="REM/?", _String2="bcdedit") returned 16 [0123.659] GetProcessHeap () returned 0x2ed0000 [0123.659] RtlAllocateHeap (HeapHandle=0x2ed0000, Flags=0x8, Size=0x58) returned 0x2ed7bc0 [0123.659] GetProcessHeap () returned 0x2ed0000 [0123.659] RtlAllocateHeap (HeapHandle=0x2ed0000, Flags=0x8, Size=0x18) returned 0x2ed7c20 [0123.660] GetProcessHeap () returned 0x2ed0000 [0123.660] RtlAllocateHeap (HeapHandle=0x2ed0000, Flags=0x8, Size=0x28) returned 0x2ed7c40 [0123.660] GetConsoleTitleW (in: lpConsoleTitle=0xa0f8b0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\SYSTEM32\\cmd.exe") returned 0x1c [0124.715] malloc (_Size=0xffce) returned 0x30e2620 [0124.716] ??_V@YAXPAX@Z () returned 0xa0f63c [0124.716] malloc (_Size=0xffce) returned 0x30f25f8 [0124.716] ??_V@YAXPAX@Z () returned 0xa0f3f4 [0124.717] _wcsicmp (_String1="bcdedit", _String2="DIR") returned -2 [0124.717] _wcsicmp (_String1="bcdedit", _String2="ERASE") returned -3 [0124.717] _wcsicmp (_String1="bcdedit", _String2="DEL") returned -2 [0124.717] _wcsicmp (_String1="bcdedit", _String2="TYPE") returned -18 [0124.717] _wcsicmp (_String1="bcdedit", _String2="COPY") returned -1 [0124.717] _wcsicmp (_String1="bcdedit", _String2="CD") returned -1 [0124.717] _wcsicmp (_String1="bcdedit", _String2="CHDIR") returned -1 [0124.717] _wcsicmp (_String1="bcdedit", _String2="RENAME") returned -16 [0124.717] _wcsicmp (_String1="bcdedit", _String2="REN") returned -16 [0124.717] _wcsicmp (_String1="bcdedit", _String2="ECHO") returned -3 [0124.717] _wcsicmp (_String1="bcdedit", _String2="SET") returned -17 [0124.717] _wcsicmp (_String1="bcdedit", _String2="PAUSE") returned -14 [0124.717] _wcsicmp (_String1="bcdedit", _String2="DATE") returned -2 [0124.717] _wcsicmp (_String1="bcdedit", _String2="TIME") returned -18 [0124.717] _wcsicmp (_String1="bcdedit", _String2="PROMPT") returned -14 [0124.717] _wcsicmp (_String1="bcdedit", _String2="MD") returned -11 [0124.717] _wcsicmp (_String1="bcdedit", _String2="MKDIR") returned -11 [0124.717] _wcsicmp (_String1="bcdedit", _String2="RD") returned -16 [0124.717] _wcsicmp (_String1="bcdedit", _String2="RMDIR") returned -16 [0124.717] _wcsicmp (_String1="bcdedit", _String2="PATH") returned -14 [0124.717] _wcsicmp (_String1="bcdedit", _String2="GOTO") returned -5 [0124.718] _wcsicmp (_String1="bcdedit", _String2="SHIFT") returned -17 [0124.718] _wcsicmp (_String1="bcdedit", _String2="CLS") returned -1 [0124.718] _wcsicmp (_String1="bcdedit", _String2="CALL") returned -1 [0124.718] _wcsicmp (_String1="bcdedit", _String2="VERIFY") returned -20 [0124.718] _wcsicmp (_String1="bcdedit", _String2="VER") returned -20 [0124.718] _wcsicmp (_String1="bcdedit", _String2="VOL") returned -20 [0124.718] _wcsicmp (_String1="bcdedit", _String2="EXIT") returned -3 [0124.718] _wcsicmp (_String1="bcdedit", _String2="SETLOCAL") returned -17 [0124.718] _wcsicmp (_String1="bcdedit", _String2="ENDLOCAL") returned -3 [0124.718] _wcsicmp (_String1="bcdedit", _String2="TITLE") returned -18 [0124.718] _wcsicmp (_String1="bcdedit", _String2="START") returned -17 [0124.718] _wcsicmp (_String1="bcdedit", _String2="DPATH") returned -2 [0124.718] _wcsicmp (_String1="bcdedit", _String2="KEYS") returned -9 [0124.718] _wcsicmp (_String1="bcdedit", _String2="MOVE") returned -11 [0124.718] _wcsicmp (_String1="bcdedit", _String2="PUSHD") returned -14 [0124.718] _wcsicmp (_String1="bcdedit", _String2="POPD") returned -14 [0124.718] _wcsicmp (_String1="bcdedit", _String2="ASSOC") returned 1 [0124.718] _wcsicmp (_String1="bcdedit", _String2="FTYPE") returned -4 [0124.718] _wcsicmp (_String1="bcdedit", _String2="BREAK") returned -15 [0124.718] _wcsicmp (_String1="bcdedit", _String2="COLOR") returned -1 [0124.718] _wcsicmp (_String1="bcdedit", _String2="MKLINK") returned -11 [0124.718] _wcsicmp (_String1="bcdedit", _String2="DIR") returned -2 [0124.718] _wcsicmp (_String1="bcdedit", _String2="ERASE") returned -3 [0124.718] _wcsicmp (_String1="bcdedit", _String2="DEL") returned -2 [0124.718] _wcsicmp (_String1="bcdedit", _String2="TYPE") returned -18 [0124.718] _wcsicmp (_String1="bcdedit", _String2="COPY") returned -1 [0124.718] _wcsicmp (_String1="bcdedit", _String2="CD") returned -1 [0124.718] _wcsicmp (_String1="bcdedit", _String2="CHDIR") returned -1 [0124.718] _wcsicmp (_String1="bcdedit", _String2="RENAME") returned -16 [0124.718] _wcsicmp (_String1="bcdedit", _String2="REN") returned -16 [0124.719] _wcsicmp (_String1="bcdedit", _String2="ECHO") returned -3 [0124.719] _wcsicmp (_String1="bcdedit", _String2="SET") returned -17 [0124.719] _wcsicmp (_String1="bcdedit", _String2="PAUSE") returned -14 [0124.719] _wcsicmp (_String1="bcdedit", _String2="DATE") returned -2 [0124.719] _wcsicmp (_String1="bcdedit", _String2="TIME") returned -18 [0124.719] _wcsicmp (_String1="bcdedit", _String2="PROMPT") returned -14 [0124.719] _wcsicmp (_String1="bcdedit", _String2="MD") returned -11 [0124.719] _wcsicmp (_String1="bcdedit", _String2="MKDIR") returned -11 [0124.719] _wcsicmp (_String1="bcdedit", _String2="RD") returned -16 [0124.719] _wcsicmp (_String1="bcdedit", _String2="RMDIR") returned -16 [0124.719] _wcsicmp (_String1="bcdedit", _String2="PATH") returned -14 [0124.719] _wcsicmp (_String1="bcdedit", _String2="GOTO") returned -5 [0124.719] _wcsicmp (_String1="bcdedit", _String2="SHIFT") returned -17 [0124.719] _wcsicmp (_String1="bcdedit", _String2="CLS") returned -1 [0124.719] _wcsicmp (_String1="bcdedit", _String2="CALL") returned -1 [0124.719] _wcsicmp (_String1="bcdedit", _String2="VERIFY") returned -20 [0124.719] _wcsicmp (_String1="bcdedit", _String2="VER") returned -20 [0124.719] _wcsicmp (_String1="bcdedit", _String2="VOL") returned -20 [0124.719] _wcsicmp (_String1="bcdedit", _String2="EXIT") returned -3 [0124.719] _wcsicmp (_String1="bcdedit", _String2="SETLOCAL") returned -17 [0124.719] _wcsicmp (_String1="bcdedit", _String2="ENDLOCAL") returned -3 [0124.719] _wcsicmp (_String1="bcdedit", _String2="TITLE") returned -18 [0124.719] _wcsicmp (_String1="bcdedit", _String2="START") returned -17 [0124.719] _wcsicmp (_String1="bcdedit", _String2="DPATH") returned -2 [0124.719] _wcsicmp (_String1="bcdedit", _String2="KEYS") returned -9 [0124.719] _wcsicmp (_String1="bcdedit", _String2="MOVE") returned -11 [0124.719] _wcsicmp (_String1="bcdedit", _String2="PUSHD") returned -14 [0124.719] _wcsicmp (_String1="bcdedit", _String2="POPD") returned -14 [0124.719] _wcsicmp (_String1="bcdedit", _String2="ASSOC") returned 1 [0124.719] _wcsicmp (_String1="bcdedit", _String2="FTYPE") returned -4 [0124.719] _wcsicmp (_String1="bcdedit", _String2="BREAK") returned -15 [0124.720] _wcsicmp (_String1="bcdedit", _String2="COLOR") returned -1 [0124.720] _wcsicmp (_String1="bcdedit", _String2="MKLINK") returned -11 [0124.720] _wcsicmp (_String1="bcdedit", _String2="FOR") returned -4 [0124.720] _wcsicmp (_String1="bcdedit", _String2="IF") returned -7 [0124.720] _wcsicmp (_String1="bcdedit", _String2="REM") returned -16 [0124.720] ??_V@YAXPAX@Z () returned 0x1 [0124.720] GetProcessHeap () returned 0x2ed0000 [0124.720] RtlAllocateHeap (HeapHandle=0x2ed0000, Flags=0x8, Size=0xffd6) returned 0x2ee4da0 [0124.721] GetProcessHeap () returned 0x2ed0000 [0124.721] RtlAllocateHeap (HeapHandle=0x2ed0000, Flags=0x8, Size=0x60) returned 0x2ed7c70 [0124.721] _wcsnicmp (_String1="bcde", _String2="cmd ", _MaxCount=0x4) returned -1 [0124.721] malloc (_Size=0xffce) returned 0x30f25f8 [0124.721] ??_V@YAXPAX@Z () returned 0xa0f174 [0124.721] GetProcessHeap () returned 0x2ed0000 [0124.721] RtlAllocateHeap (HeapHandle=0x2ed0000, Flags=0x8, Size=0x1ffa4) returned 0x2ef4d80 [0124.723] SetErrorMode (uMode=0x0) returned 0x0 [0124.723] SetErrorMode (uMode=0x1) returned 0x0 [0124.723] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x2ef4d88, lpFilePart=0xa0f194 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0xa0f194*="Desktop") returned 0x17 [0124.723] SetErrorMode (uMode=0x0) returned 0x1 [0124.723] GetProcessHeap () returned 0x2ed0000 [0124.723] RtlReAllocateHeap (Heap=0x2ed0000, Flags=0x0, Ptr=0x2ef4d80, Size=0x48) returned 0x2ef4d80 [0124.723] GetProcessHeap () returned 0x2ed0000 [0124.723] RtlSizeHeap (HeapHandle=0x2ed0000, Flags=0x0, MemoryPointer=0x2ef4d80) returned 0x48 [0124.723] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0xb9f840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0124.723] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0124.723] GetProcessHeap () returned 0x2ed0000 [0124.723] RtlAllocateHeap (HeapHandle=0x2ed0000, Flags=0x8, Size=0x1b4) returned 0x2ed7cd8 [0124.723] GetProcessHeap () returned 0x2ed0000 [0124.723] RtlAllocateHeap (HeapHandle=0x2ed0000, Flags=0x8, Size=0x360) returned 0x2ed7e98 [0124.729] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0124.730] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\bcdedit.*", fInfoLevelId=0x1, lpFindFileData=0xa0ef20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xa0ef20) returned 0xffffffff [0124.731] GetLastError () returned 0x2 [0124.731] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0124.731] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\bcdedit.*", fInfoLevelId=0x1, lpFindFileData=0xa0ef20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xa0ef20) returned 0xffffffff [0124.731] GetLastError () returned 0x2 [0124.731] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0124.731] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\bcdedit.*", fInfoLevelId=0x1, lpFindFileData=0xa0ef20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xa0ef20) returned 0xffffffff [0124.731] GetLastError () returned 0x2 [0124.731] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0124.731] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\bcdedit.*", fInfoLevelId=0x1, lpFindFileData=0xa0ef20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xa0ef20) returned 0xffffffff [0124.732] GetLastError () returned 0x2 [0124.732] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0124.732] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem\\bcdedit.*", fInfoLevelId=0x1, lpFindFileData=0xa0ef20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xa0ef20) returned 0xffffffff [0124.733] GetLastError () returned 0x2 [0124.733] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0124.733] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\bcdedit.*", fInfoLevelId=0x1, lpFindFileData=0xa0ef20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xa0ef20) returned 0xffffffff [0124.735] GetLastError () returned 0x2 [0124.735] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0124.735] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps\\bcdedit.*", fInfoLevelId=0x1, lpFindFileData=0xa0ef20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xa0ef20) returned 0xffffffff [0124.735] GetLastError () returned 0x2 [0124.735] ??_V@YAXPAX@Z () returned 0x1 [0124.735] _get_osfhandle (_FileHandle=2) returned 0x94 [0124.735] GetFileType (hFile=0x94) returned 0x2 [0124.735] GetStdHandle (nStdHandle=0xfffffff4) returned 0x94 [0124.735] GetConsoleMode (hConsoleHandle=0x94, lpMode=0xa0f36c) Thread: id = 129 os_tid = 0x8d8 Process: id = "9" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x71ab6000" os_pid = "0x1350" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13a8" cmd_line = "cmd.exe /c \"bootstatuspolicy ignoreallfailures\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 34 os_tid = 0x12ec [0111.879] GetModuleHandleA (lpModuleName=0x0) returned 0xb70000 [0111.879] __set_app_type (_Type=0x1) [0111.879] __p__fmode () returned 0x74ff3c14 [0111.879] __p__commode () returned 0x74ff49ec [0111.879] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xb86fd0) returned 0x0 [0111.879] __getmainargs (in: _Argc=0xb9d1a4, _Argv=0xb9d1a8, _Env=0xb9d1ac, _DoWildCard=0, _StartInfo=0xb9d1b8 | out: _Argc=0xb9d1a4, _Argv=0xb9d1a8, _Env=0xb9d1ac) returned 0 [0111.879] _onexit (_Func=0xb88030) returned 0xb88030 [0111.879] _onexit (_Func=0xb88040) returned 0xb88040 [0111.879] _onexit (_Func=0xb88050) returned 0xb88050 [0111.879] _onexit (_Func=0xb88060) returned 0xb88060 [0111.880] _onexit (_Func=0xb88070) returned 0xb88070 [0111.880] _onexit (_Func=0xb88080) returned 0xb88080 [0111.880] GetCurrentThreadId () returned 0x12ec [0111.880] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x12ec) returned 0xbc [0111.880] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x73b80000 [0111.880] GetProcAddress (hModule=0x73b80000, lpProcName="SetThreadUILanguage") returned 0x73b94f70 [0111.880] SetThreadUILanguage (LangId=0x0) returned 0x9e0409 [0112.921] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0112.921] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0xaffc34 | out: phkResult=0xaffc34*=0x0) returned 0x2 [0112.921] VirtualQuery (in: lpAddress=0xaffc3f, lpBuffer=0xaffbec, dwLength=0x1c | out: lpBuffer=0xaffbec*(BaseAddress=0xaff000, AllocationBase=0xa00000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0112.921] VirtualQuery (in: lpAddress=0xa00000, lpBuffer=0xaffbec, dwLength=0x1c | out: lpBuffer=0xaffbec*(BaseAddress=0xa00000, AllocationBase=0xa00000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0112.921] VirtualQuery (in: lpAddress=0xa01000, lpBuffer=0xaffbec, dwLength=0x1c | out: lpBuffer=0xaffbec*(BaseAddress=0xa01000, AllocationBase=0xa00000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0112.921] VirtualQuery (in: lpAddress=0xa03000, lpBuffer=0xaffbec, dwLength=0x1c | out: lpBuffer=0xaffbec*(BaseAddress=0xa03000, AllocationBase=0xa00000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0112.921] VirtualQuery (in: lpAddress=0xb00000, lpBuffer=0xaffbec, dwLength=0x1c | out: lpBuffer=0xaffbec*(BaseAddress=0xb00000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x70000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c [0112.921] GetConsoleOutputCP () returned 0x1b5 [0113.379] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0xba3850 | out: lpCPInfo=0xba3850) returned 1 [0113.379] SetConsoleCtrlHandler (HandlerRoutine=0xb97260, Add=1) returned 1 [0113.380] _get_osfhandle (_FileHandle=1) returned 0x90 [0113.380] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xba388c | out: lpMode=0xba388c) returned 1 [0114.361] _get_osfhandle (_FileHandle=0) returned 0x8c [0114.361] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0xba3888 | out: lpMode=0xba3888) returned 1 [0115.941] _get_osfhandle (_FileHandle=1) returned 0x90 [0115.941] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x0) returned 1 [0117.018] _get_osfhandle (_FileHandle=1) returned 0x90 [0117.018] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xba3890 | out: lpMode=0xba3890) returned 1 [0118.369] _get_osfhandle (_FileHandle=1) returned 0x90 [0118.369] SetConsoleMode (hConsoleHandle=0x90, dwMode=0x7) returned 1 [0119.476] _get_osfhandle (_FileHandle=0) returned 0x8c [0119.476] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0xba3894 | out: lpMode=0xba3894) returned 1 [0120.382] _get_osfhandle (_FileHandle=0) returned 0x8c [0120.382] SetConsoleMode (hConsoleHandle=0x8c, dwMode=0x1e7) returned 1 [0121.698] GetEnvironmentStringsW () returned 0x2ec4b78* [0121.699] GetProcessHeap () returned 0x2ec0000 [0121.699] RtlAllocateHeap (HeapHandle=0x2ec0000, Flags=0x8, Size=0xaca) returned 0x2ec5650 [0121.699] FreeEnvironmentStringsA (penv="A") returned 1 [0121.699] GetProcessHeap () returned 0x2ec0000 [0121.699] RtlAllocateHeap (HeapHandle=0x2ec0000, Flags=0x8, Size=0x4) returned 0x2ec4658 [0121.699] GetEnvironmentStringsW () returned 0x2ec4b78* [0121.699] GetProcessHeap () returned 0x2ec0000 [0121.699] RtlAllocateHeap (HeapHandle=0x2ec0000, Flags=0x8, Size=0xaca) returned 0x2ec6128 [0121.699] FreeEnvironmentStringsA (penv="A") returned 1 [0121.699] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xafeb90 | out: phkResult=0xafeb90*=0xcc) returned 0x0 [0121.699] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xafeb98, lpData=0xafeb9c, lpcbData=0xafeb94*=0x1000 | out: lpType=0xafeb98*=0x0, lpData=0xafeb9c*=0x0, lpcbData=0xafeb94*=0x1000) returned 0x2 [0121.700] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xafeb98, lpData=0xafeb9c, lpcbData=0xafeb94*=0x1000 | out: lpType=0xafeb98*=0x4, lpData=0xafeb9c*=0x1, lpcbData=0xafeb94*=0x4) returned 0x0 [0121.700] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xafeb98, lpData=0xafeb9c, lpcbData=0xafeb94*=0x1000 | out: lpType=0xafeb98*=0x0, lpData=0xafeb9c*=0x1, lpcbData=0xafeb94*=0x1000) returned 0x2 [0121.700] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xafeb98, lpData=0xafeb9c, lpcbData=0xafeb94*=0x1000 | out: lpType=0xafeb98*=0x4, lpData=0xafeb9c*=0x0, lpcbData=0xafeb94*=0x4) returned 0x0 [0121.700] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xafeb98, lpData=0xafeb9c, lpcbData=0xafeb94*=0x1000 | out: lpType=0xafeb98*=0x4, lpData=0xafeb9c*=0x40, lpcbData=0xafeb94*=0x4) returned 0x0 [0121.700] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xafeb98, lpData=0xafeb9c, lpcbData=0xafeb94*=0x1000 | out: lpType=0xafeb98*=0x4, lpData=0xafeb9c*=0x40, lpcbData=0xafeb94*=0x4) returned 0x0 [0121.700] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0xafeb98, lpData=0xafeb9c, lpcbData=0xafeb94*=0x1000 | out: lpType=0xafeb98*=0x0, lpData=0xafeb9c*=0x40, lpcbData=0xafeb94*=0x1000) returned 0x2 [0121.700] RegCloseKey (hKey=0xcc) returned 0x0 [0121.700] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xafeb90 | out: phkResult=0xafeb90*=0xcc) returned 0x0 [0121.700] RegQueryValueExW (in: hKey=0xcc, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xafeb98, lpData=0xafeb9c, lpcbData=0xafeb94*=0x1000 | out: lpType=0xafeb98*=0x0, lpData=0xafeb9c*=0x40, lpcbData=0xafeb94*=0x1000) returned 0x2 [0121.700] RegQueryValueExW (in: hKey=0xcc, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xafeb98, lpData=0xafeb9c, lpcbData=0xafeb94*=0x1000 | out: lpType=0xafeb98*=0x4, lpData=0xafeb9c*=0x1, lpcbData=0xafeb94*=0x4) returned 0x0 [0121.700] RegQueryValueExW (in: hKey=0xcc, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xafeb98, lpData=0xafeb9c, lpcbData=0xafeb94*=0x1000 | out: lpType=0xafeb98*=0x0, lpData=0xafeb9c*=0x1, lpcbData=0xafeb94*=0x1000) returned 0x2 [0121.700] RegQueryValueExW (in: hKey=0xcc, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xafeb98, lpData=0xafeb9c, lpcbData=0xafeb94*=0x1000 | out: lpType=0xafeb98*=0x4, lpData=0xafeb9c*=0x0, lpcbData=0xafeb94*=0x4) returned 0x0 [0121.700] RegQueryValueExW (in: hKey=0xcc, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xafeb98, lpData=0xafeb9c, lpcbData=0xafeb94*=0x1000 | out: lpType=0xafeb98*=0x4, lpData=0xafeb9c*=0x9, lpcbData=0xafeb94*=0x4) returned 0x0 [0121.700] RegQueryValueExW (in: hKey=0xcc, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xafeb98, lpData=0xafeb9c, lpcbData=0xafeb94*=0x1000 | out: lpType=0xafeb98*=0x4, lpData=0xafeb9c*=0x9, lpcbData=0xafeb94*=0x4) returned 0x0 [0121.700] RegQueryValueExW (in: hKey=0xcc, lpValueName="AutoRun", lpReserved=0x0, lpType=0xafeb98, lpData=0xafeb9c, lpcbData=0xafeb94*=0x1000 | out: lpType=0xafeb98*=0x0, lpData=0xafeb9c*=0x9, lpcbData=0xafeb94*=0x1000) returned 0x2 [0121.700] RegCloseKey (hKey=0xcc) returned 0x0 [0121.700] time (in: timer=0x0 | out: timer=0x0) returned 0x5e55128a [0121.700] srand (_Seed=0x5e55128a) [0121.700] GetCommandLineW () returned="cmd.exe /c \"bootstatuspolicy ignoreallfailures\"" [0121.700] malloc (_Size=0x4000) returned 0x6e21f0 [0121.701] GetCommandLineW () returned="cmd.exe /c \"bootstatuspolicy ignoreallfailures\"" [0121.701] malloc (_Size=0xffce) returned 0x2fc0048 [0121.701] ??_V@YAXPAX@Z () returned 0xaffb74 [0121.701] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2fc0048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0121.702] malloc (_Size=0xffce) returned 0x2fd0020 [0121.702] ??_V@YAXPAX@Z () returned 0xaff948 [0121.702] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2fd0020, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0121.702] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0xb9f840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0121.702] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xb9f840, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0121.702] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0xb9f840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0121.702] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0121.702] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0121.702] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0121.702] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0121.702] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0121.702] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0121.702] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0121.702] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0121.703] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0121.703] GetProcessHeap () returned 0x2ec0000 [0121.703] RtlFreeHeap (HeapHandle=0x2ec0000, Flags=0x0, BaseAddress=0x2ec5650) returned 1 [0121.703] GetEnvironmentStringsW () returned 0x2ec4b78* [0121.703] GetProcessHeap () returned 0x2ec0000 [0121.703] RtlAllocateHeap (HeapHandle=0x2ec0000, Flags=0x8, Size=0xae2) returned 0x2ec76f0 [0121.703] FreeEnvironmentStringsA (penv="A") returned 1 [0121.703] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0xb9f840, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0121.703] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0xb9f840, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0121.703] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0121.703] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0121.703] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0121.703] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0121.703] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0121.703] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0121.703] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0121.703] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0121.703] malloc (_Size=0xffce) returned 0x2fdfff8 [0121.703] ??_V@YAXPAX@Z () returned 0xaff6e0 [0121.704] GetProcessHeap () returned 0x2ec0000 [0121.704] RtlAllocateHeap (HeapHandle=0x2ec0000, Flags=0x8, Size=0x38) returned 0x2ec0ae0 [0121.704] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2fdfff8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0121.704] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x2fdfff8, lpFilePart=0xaff72c | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0xaff72c*="Desktop") returned 0x17 [0121.704] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0121.704] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0xaff4b0 | out: lpFindFileData=0xaff4b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xd7bf47b5, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xd7bf47b5, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x2ec0b20 [0121.704] FindClose (in: hFindFile=0x2ec0b20 | out: hFindFile=0x2ec0b20) returned 1 [0121.705] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0xaff4b0 | out: lpFindFileData=0xaff4b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x2ec0b20 [0121.705] FindClose (in: hFindFile=0x2ec0b20 | out: hFindFile=0x2ec0b20) returned 1 [0121.705] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0xaff4b0 | out: lpFindFileData=0xaff4b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xcbf1bdaa, ftLastAccessTime.dwHighDateTime=0x1d5ebd6, ftLastWriteTime.dwLowDateTime=0xcbf1bdaa, ftLastWriteTime.dwHighDateTime=0x1d5ebd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x2ec0b20 [0121.705] FindClose (in: hFindFile=0x2ec0b20 | out: hFindFile=0x2ec0b20) returned 1 [0121.705] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0121.705] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0121.705] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0121.705] GetProcessHeap () returned 0x2ec0000 [0121.705] RtlFreeHeap (HeapHandle=0x2ec0000, Flags=0x0, BaseAddress=0x2ec76f0) returned 1 [0121.705] GetEnvironmentStringsW () returned 0x2ec4b78* [0121.705] GetProcessHeap () returned 0x2ec0000 [0121.705] RtlAllocateHeap (HeapHandle=0x2ec0000, Flags=0x8, Size=0xb1a) returned 0x2ec6c00 [0121.705] FreeEnvironmentStringsA (penv="=") returned 1 [0121.705] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2fc0048 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0121.705] GetProcessHeap () returned 0x2ec0000 [0121.705] RtlFreeHeap (HeapHandle=0x2ec0000, Flags=0x0, BaseAddress=0x2ec0ae0) returned 1 [0121.705] ??_V@YAXPAX@Z () returned 0x1 [0121.705] ??_V@YAXPAX@Z () returned 0x1 [0121.705] GetProcessHeap () returned 0x2ec0000 [0121.705] RtlAllocateHeap (HeapHandle=0x2ec0000, Flags=0x8, Size=0x400e) returned 0x2ec8d08 [0121.706] GetProcessHeap () returned 0x2ec0000 [0121.706] RtlAllocateHeap (HeapHandle=0x2ec0000, Flags=0x8, Size=0x56) returned 0x2ec7728 [0121.706] GetProcessHeap () returned 0x2ec0000 [0121.706] RtlAllocateHeap (HeapHandle=0x2ec0000, Flags=0x8, Size=0x4008) returned 0x2eccd20 [0121.706] GetProcessHeap () returned 0x2ec0000 [0121.706] RtlAllocateHeap (HeapHandle=0x2ec0000, Flags=0x8, Size=0x4008) returned 0x2ed0d30 [0121.707] _wcsnicmp (_String1="boot", _String2="cmd ", _MaxCount=0x4) returned -1 [0121.707] malloc (_Size=0xffce) returned 0x2fd0020 [0121.707] ??_V@YAXPAX@Z () returned 0xaff894 [0121.708] GetProcessHeap () returned 0x2ec0000 [0121.708] RtlAllocateHeap (HeapHandle=0x2ec0000, Flags=0x8, Size=0x1ffa4) returned 0x2ed4d40 [0121.709] SetErrorMode (uMode=0x0) returned 0x0 [0121.709] SetErrorMode (uMode=0x1) returned 0x0 [0121.709] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x2ed4d48, lpFilePart=0xaff8b4 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0xaff8b4*="Desktop") returned 0x17 [0121.709] SetErrorMode (uMode=0x0) returned 0x1 [0121.709] GetProcessHeap () returned 0x2ec0000 [0121.709] RtlReAllocateHeap (Heap=0x2ec0000, Flags=0x0, Ptr=0x2ed4d40, Size=0x7e) returned 0x2ed4d40 [0121.709] GetProcessHeap () returned 0x2ec0000 [0121.709] RtlSizeHeap (HeapHandle=0x2ec0000, Flags=0x0, MemoryPointer=0x2ed4d40) returned 0x7e [0121.709] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0xb9f840, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0121.710] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0121.711] GetProcessHeap () returned 0x2ec0000 [0121.711] RtlAllocateHeap (HeapHandle=0x2ec0000, Flags=0x8, Size=0x1b4) returned 0x2ec7788 [0121.711] GetProcessHeap () returned 0x2ec0000 [0121.711] RtlAllocateHeap (HeapHandle=0x2ec0000, Flags=0x8, Size=0x360) returned 0x2ec7948 [0121.721] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0121.722] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\bootstatuspolicy ignoreallfailures.*", fInfoLevelId=0x1, lpFindFileData=0xaff640, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xaff640) returned 0xffffffff [0121.723] GetLastError () returned 0x2 [0121.723] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0121.723] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\bootstatuspolicy ignoreallfailures.*", fInfoLevelId=0x1, lpFindFileData=0xaff640, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xaff640) returned 0xffffffff [0121.725] GetLastError () returned 0x2 [0121.725] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0121.725] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\bootstatuspolicy ignoreallfailures.*", fInfoLevelId=0x1, lpFindFileData=0xaff640, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xaff640) returned 0xffffffff [0121.725] GetLastError () returned 0x2 [0121.725] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0121.725] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\bootstatuspolicy ignoreallfailures.*", fInfoLevelId=0x1, lpFindFileData=0xaff640, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xaff640) returned 0xffffffff [0121.726] GetLastError () returned 0x2 [0121.726] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0121.726] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem\\bootstatuspolicy ignoreallfailures.*", fInfoLevelId=0x1, lpFindFileData=0xaff640, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xaff640) returned 0xffffffff [0121.729] GetLastError () returned 0x2 [0121.729] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0121.730] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\bootstatuspolicy ignoreallfailures.*", fInfoLevelId=0x1, lpFindFileData=0xaff640, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xaff640) returned 0xffffffff [0121.733] GetLastError () returned 0x2 [0121.733] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0121.733] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps\\bootstatuspolicy ignoreallfailures.*", fInfoLevelId=0x1, lpFindFileData=0xaff640, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xaff640) returned 0xffffffff [0121.733] GetLastError () returned 0x2 [0121.734] ??_V@YAXPAX@Z () returned 0x1 [0121.734] GetProcessHeap () returned 0x2ec0000 [0121.734] RtlFreeHeap (HeapHandle=0x2ec0000, Flags=0x0, BaseAddress=0x2eccd20) returned 1 [0121.734] GetProcessHeap () returned 0x2ec0000 [0121.734] RtlFreeHeap (HeapHandle=0x2ec0000, Flags=0x0, BaseAddress=0x2ed0d30) returned 1 [0121.735] GetProcessHeap () returned 0x2ec0000 [0121.735] RtlFreeHeap (HeapHandle=0x2ec0000, Flags=0x0, BaseAddress=0x2ec8d08) returned 1 [0121.735] GetConsoleOutputCP () returned 0x1b5 [0122.921] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0xba3850 | out: lpCPInfo=0xba3850) returned 1 [0122.921] GetUserDefaultLCID () returned 0x409 [0122.921] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0xb9f82c, cchData=8 | out: lpLCData=":") returned 2 [0122.921] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0xaffa9c, cchData=128 | out: lpLCData="0") returned 2 [0122.921] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0xaffa9c, cchData=128 | out: lpLCData="0") returned 2 [0122.921] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0xaffa9c, cchData=128 | out: lpLCData="1") returned 2 [0122.921] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0xb9f81c, cchData=8 | out: lpLCData="/") returned 2 [0122.921] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0xb9f7b8, cchData=32 | out: lpLCData="Mon") returned 4 [0122.921] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0xb9f778, cchData=32 | out: lpLCData="Tue") returned 4 [0122.921] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0xb9f738, cchData=32 | out: lpLCData="Wed") returned 4 [0122.921] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0xb9f6f8, cchData=32 | out: lpLCData="Thu") returned 4 [0122.921] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0xb9f6b8, cchData=32 | out: lpLCData="Fri") returned 4 [0122.921] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0xb9f678, cchData=32 | out: lpLCData="Sat") returned 4 [0122.922] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0xb9f638, cchData=32 | out: lpLCData="Sun") returned 4 [0122.922] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0xb9f80c, cchData=8 | out: lpLCData=".") returned 2 [0122.922] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0xb9f7f8, cchData=8 | out: lpLCData=",") returned 2 [0122.922] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0122.923] GetProcessHeap () returned 0x2ec0000 [0122.923] RtlAllocateHeap (HeapHandle=0x2ec0000, Flags=0x0, Size=0x20c) returned 0x2ec7bd0 [0122.923] GetConsoleTitleW (in: lpConsoleTitle=0x2ec7bd0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\SYSTEM32\\cmd.exe") returned 0x1c [0124.072] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x73b80000 [0124.072] GetProcAddress (hModule=0x73b80000, lpProcName="CopyFileExW") returned 0x73b94330 [0124.072] GetProcAddress (hModule=0x73b80000, lpProcName="IsDebuggerPresent") returned 0x73b95930 [0124.072] GetProcAddress (hModule=0x73b80000, lpProcName="SetConsoleInputExeNameW") returned 0x74eb09d0 [0124.072] ??_V@YAXPAX@Z () returned 0x1 [0124.072] GetProcessHeap () returned 0x2ec0000 [0124.072] RtlAllocateHeap (HeapHandle=0x2ec0000, Flags=0x8, Size=0x400a) returned 0x2ec8d08 [0124.072] GetProcessHeap () returned 0x2ec0000 [0124.072] RtlFreeHeap (HeapHandle=0x2ec0000, Flags=0x0, BaseAddress=0x2ec8d08) returned 1 [0124.073] _wcsicmp (_String1="bootstatuspolicy", _String2=")") returned 57 [0124.073] _wcsicmp (_String1="FOR", _String2="bootstatuspolicy") returned 4 [0124.073] _wcsicmp (_String1="FOR/?", _String2="bootstatuspolicy") returned 4 [0124.073] _wcsicmp (_String1="IF", _String2="bootstatuspolicy") returned 7 [0124.073] _wcsicmp (_String1="IF/?", _String2="bootstatuspolicy") returned 7 [0124.073] _wcsicmp (_String1="REM", _String2="bootstatuspolicy") returned 16 [0124.073] _wcsicmp (_String1="REM/?", _String2="bootstatuspolicy") returned 16 [0124.073] GetProcessHeap () returned 0x2ec0000 [0124.073] RtlAllocateHeap (HeapHandle=0x2ec0000, Flags=0x8, Size=0x58) returned 0x2ec7de8 [0124.073] GetProcessHeap () returned 0x2ec0000 [0124.073] RtlAllocateHeap (HeapHandle=0x2ec0000, Flags=0x8, Size=0x2a) returned 0x2ec7e48 [0124.073] GetProcessHeap () returned 0x2ec0000 [0124.073] RtlAllocateHeap (HeapHandle=0x2ec0000, Flags=0x8, Size=0x2e) returned 0x2ec7e80 [0124.074] GetConsoleTitleW (lpConsoleTitle=0xaff990, nSize=0x104) Thread: id = 132 os_tid = 0x11d4 Process: id = "10" image_name = "icacls.exe" filename = "c:\\windows\\syswow64\\icacls.exe" page_root = "0x1f1c1000" os_pid = "0x12dc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13a8" cmd_line = "icacls \"C:\\*\" /grant Everyone:F /T /C /Qÿ" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 35 os_tid = 0x1334 Thread: id = 136 os_tid = 0xec4 Process: id = "11" image_name = "taskkill.exe" filename = "c:\\windows\\syswow64\\taskkill.exe" page_root = "0x71fc3000" os_pid = "0x1330" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13a8" cmd_line = "\"C:\\Windows\\System32\\taskkill.exe\" /IM thunderbird.exe /F" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 36 os_tid = 0x1338 Thread: id = 192 os_tid = 0x1228 Process: id = "12" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x1e459000" os_pid = "0x1328" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0x1308" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 37 os_tid = 0x1324 Thread: id = 48 os_tid = 0x123c Thread: id = 55 os_tid = 0xfe0 Thread: id = 78 os_tid = 0x13a4 Thread: id = 94 os_tid = 0x458 Process: id = "13" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x733b0000" os_pid = "0x130c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "9" os_parent_pid = "0x1350" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 38 os_tid = 0x1354 Thread: id = 52 os_tid = 0x1248 Thread: id = 58 os_tid = 0x4a0 Thread: id = 93 os_tid = 0xb28 Thread: id = 101 os_tid = 0x13e8 Process: id = "14" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x1f1cf000" os_pid = "0x1348" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x12fc" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 39 os_tid = 0x134c Thread: id = 43 os_tid = 0xe5c Thread: id = 56 os_tid = 0xff4 Thread: id = 77 os_tid = 0x1394 Thread: id = 80 os_tid = 0x135c Process: id = "15" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x1e650000" os_pid = "0x12c8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "6" os_parent_pid = "0x1310" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 41 os_tid = 0x13a0 Thread: id = 46 os_tid = 0xe7c Thread: id = 57 os_tid = 0x378 Thread: id = 95 os_tid = 0x1f4 Thread: id = 102 os_tid = 0xef8 Process: id = "16" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x75655000" os_pid = "0x128c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0x1380" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 42 os_tid = 0x1294 Thread: id = 47 os_tid = 0x340 Thread: id = 51 os_tid = 0x1244 Thread: id = 79 os_tid = 0x138c Thread: id = 96 os_tid = 0x13d4 Process: id = "17" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x1e8a2000" os_pid = "0x1220" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0x1330" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 44 os_tid = 0xec8 Thread: id = 50 os_tid = 0x380 Thread: id = 97 os_tid = 0x6f8 Thread: id = 135 os_tid = 0xf88 Thread: id = 151 os_tid = 0xb7c Process: id = "18" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x5d5bd000" os_pid = "0xf6c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0x12dc" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 49 os_tid = 0x1240 Thread: id = 53 os_tid = 0x1370 Thread: id = 65 os_tid = 0xab0 Thread: id = 98 os_tid = 0xe58 Thread: id = 103 os_tid = 0xee8 Process: id = "19" image_name = "taskkill.exe" filename = "c:\\windows\\syswow64\\taskkill.exe" page_root = "0x298b0000" os_pid = "0x420" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13a8" cmd_line = "\"C:\\Windows\\System32\\taskkill.exe\" /IM outlook.exe /F" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 99 os_tid = 0xe78 Thread: id = 199 os_tid = 0x11f8 Process: id = "20" image_name = "net.exe" filename = "c:\\windows\\syswow64\\net.exe" page_root = "0x29931000" os_pid = "0xf0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13a8" cmd_line = "\"C:\\Windows\\System32\\net.exe\" stop \"audioendpointbuilder\" /y" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 100 os_tid = 0xc70 Thread: id = 201 os_tid = 0x11cc Process: id = "21" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x2b696000" os_pid = "0x12b8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "19" os_parent_pid = "0x420" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 131 os_tid = 0x12bc Thread: id = 149 os_tid = 0x1180 Thread: id = 168 os_tid = 0xf64 Thread: id = 193 os_tid = 0x116c Thread: id = 194 os_tid = 0xd4c Process: id = "22" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x2b6c1000" os_pid = "0x1140" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "20" os_parent_pid = "0xf0" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 133 os_tid = 0x120c Thread: id = 150 os_tid = 0x11dc Thread: id = 169 os_tid = 0xdb8 Thread: id = 195 os_tid = 0xd2c Thread: id = 196 os_tid = 0x1170 Process: id = "23" image_name = "taskkill.exe" filename = "c:\\windows\\syswow64\\taskkill.exe" page_root = "0x2ec56000" os_pid = "0x12d4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13a8" cmd_line = "\"C:\\Windows\\System32\\taskkill.exe\" /IM thunderbird.exe /F" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 198 os_tid = 0x11a4 Process: id = "24" image_name = "net.exe" filename = "c:\\windows\\syswow64\\net.exe" page_root = "0x2f490000" os_pid = "0x11fc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13a8" cmd_line = "\"C:\\Windows\\System32\\net.exe\" stop \"samss\" /y" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 200 os_tid = 0x1188 Process: id = "25" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x2f5f3000" os_pid = "0x1224" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "23" os_parent_pid = "0x12d4" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 202 os_tid = 0x1138 Thread: id = 206 os_tid = 0x11b0 Thread: id = 255 os_tid = 0x12dc Thread: id = 282 os_tid = 0x1464 Thread: id = 306 os_tid = 0x14c4 Process: id = "26" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x2ff34000" os_pid = "0x11ac" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "24" os_parent_pid = "0x11fc" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 207 os_tid = 0xa20 Thread: id = 227 os_tid = 0x12f4 Thread: id = 270 os_tid = 0x1430 Thread: id = 317 os_tid = 0x14f0 Process: id = "27" image_name = "net1.exe" filename = "c:\\windows\\syswow64\\net1.exe" page_root = "0x308bf000" os_pid = "0xee8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "20" os_parent_pid = "0xf0" cmd_line = "C:\\WINDOWS\\system32\\net1 stop \"audioendpointbuilder\" /y" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f8ee" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 256 os_tid = 0x1370 [0124.892] GetModuleHandleA (lpModuleName=0x0) returned 0x150000 [0124.892] __set_app_type (_Type=0x1) [0124.892] __p__fmode () returned 0x74ff3c14 [0124.892] __p__commode () returned 0x74ff49ec [0124.893] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x156f20) returned 0x0 [0124.893] __getmainargs (in: _Argc=0x16f608, _Argv=0x16f60c, _Env=0x16f610, _DoWildCard=0, _StartInfo=0x16f61c | out: _Argc=0x16f608, _Argv=0x16f60c, _Env=0x16f610) returned 0 [0124.893] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0124.893] GetConsoleOutputCP () Thread: id = 318 os_tid = 0x14f4